
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File: TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier: Hl/jGL326wVNOGO0/kY5bGI23B61ydqbokJcWFTE9l0=
Subject key identifier: 55:02:ED:7C:33:13:CB:00:16:FF:68:B5:AC:5A:30:9F:24:09:AB:1F
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3724
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number: 3611
Signing time: Tue 12 May 2026 14:29:45 +0000
Manifest this update: Tue 12 May 2026 14:29:44 +0000
Manifest next update: Tue 19 May 2026 14:29:44 +0000
Files and hashes: 1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: vYnS58HKzcXTOSmkdw0HUVB956fNb7XyD8SVP/e3QZw=)
2: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: YJpZIEy71VmJgEyYXAc8PneApk2Fcyu1z7/EBcc0Dg8=)
3: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: 9irr6mRRCa6Oo6K8I9PdRq3pgeAMalaJw+pxtHcISBU=)
4: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: E8tgGZnAJ0DYVToULPFkfN33B2nidUXrmWqnz+uCtOk=)
5: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: RV3R+8uCKWnB9ll+ltJkxV+x3kpjR9QPpPUyngdFPaM=)
6: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: 3LThCkSD3CixkviqNHz0V+phveOJEdStCjidpGP40/s=)
7: 4DC27210558111EF880A8679C4F9AE02.roa (hash: CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=)
8: 77D96D4A4F3411EFBA0A2659C4F9AE02.roa (hash: yyOi/VAw5sRVCQX5TpgvFtNkRFTz06wlp/omi2nfwPw=)
9: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU=)
10: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw=)
11: D166652A072211EF9AC24D5BC4F9AE02.roa (hash: zxbZTAwiDX/b2GO6W1+ev4fZzno5bblpI3qcle69OTA=)
12: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: IQ74hXKfS9sBj5pIuOgIRXKGZQu6lWL3dFvrJ3NA2Fw=)
13: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: j7NSyaGCsiCQNnmyTpDrtH8dk6MerGuTvymGLl12qTI=)
14: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0=)
15: EB56BC4E332311F1AE890F3EB7833773.roa (hash: KqYOqvSsGfe9/YuOAMOQ7xZCaedOl3C9H94v5PQH6VA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14116 (0x3724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: May 12 14:29:44 2026 GMT
Not After : May 19 14:29:44 2026 GMT
Subject: CN=6a033958-71ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:48:d9:a5:d3:4d:b0:76:45:88:f6:bb:95:
a1:eb:99:82:3b:cb:fd:cc:48:63:9e:c7:16:32:fe:
1e:72:a4:61:57:d5:a2:b0:be:d5:c5:5a:62:97:71:
86:bc:29:62:fc:eb:86:c8:42:9e:1b:fb:a5:3c:ca:
fa:c6:66:e1:c5:ab:e8:c9:b3:14:42:88:fb:e1:a5:
51:bd:7e:c0:43:d1:5f:c8:24:66:a7:3f:ac:70:5f:
98:65:aa:2f:12:2c:b3:75:41:3a:c8:d5:c4:36:c3:
a5:1d:d7:eb:bd:15:ec:8d:e5:d6:cf:35:94:cf:45:
81:16:b3:70:c4:e1:81:66:5f:9e:2a:7f:6d:4d:f8:
8c:0c:a2:a4:86:fe:69:61:0b:99:2f:02:d9:16:c8:
27:45:31:f5:e1:46:8c:8f:f9:75:39:be:a6:a4:21:
06:75:6c:a8:a9:c2:1c:86:53:38:56:9f:f5:ce:71:
ea:f2:2e:df:d7:d4:8c:49:df:5e:d4:fd:2f:df:59:
0a:3c:b2:c3:1b:b2:2a:9c:9c:8e:a3:41:c2:8d:66:
f7:2b:63:3d:00:7d:7b:db:a3:08:b9:2e:45:91:75:
24:61:92:67:9d:4f:e9:6d:a1:77:ec:b2:0d:00:ac:
98:23:da:b2:d3:e9:7a:1f:6d:5b:54:7d:d6:39:f0:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:02:ED:7C:33:13:CB:00:16:FF:68:B5:AC:5A:30:9F:24:09:AB:1F
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:53:81:ef:07:34:23:c2:2d:f5:04:9d:61:37:ac:f5:10:e2:
1f:d1:09:8c:d3:c8:2b:0c:b4:62:18:35:38:5a:9d:e8:ee:0e:
0e:8f:f2:0c:cf:e7:7e:5a:96:66:f4:97:94:f4:ba:26:7e:7d:
87:0d:e4:88:e7:42:27:6b:a6:08:c7:c8:82:79:59:bd:b8:6e:
81:91:13:ce:3b:8d:82:29:af:6c:d5:57:cb:c5:47:a0:0e:8a:
66:de:77:2b:43:13:91:ac:29:15:68:e7:90:a6:05:67:ea:bc:
af:b2:b3:ab:b1:17:9d:80:84:5e:db:98:31:db:65:57:15:0f:
62:61:05:39:79:2d:ba:f2:93:19:2d:ca:a2:bb:13:9c:d1:b2:
53:87:99:78:fc:10:5d:40:e5:bd:17:ac:26:0d:e8:94:ad:da:
ee:81:46:69:f7:d0:a4:3c:48:62:a2:1e:61:3a:2c:e8:f6:2a:
73:86:fd:57:ff:e5:90:62:3b:13:ab:0f:5b:c0:4a:14:f8:4d:
1a:b0:c3:7d:14:b1:c1:c9:59:ce:21:2c:8a:25:51:0d:27:c3:
bf:58:0b:78:a8:ea:35:7a:44:b6:1a:8c:0e:d7:26:96:5c:7c:
1b:83:46:d0:00:0f:5f:ee:5b:69:04:b9:a6:5c:53:84:13:0d:
0d:1a:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:50 2026 by rpki-client