
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
File: tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json)
Hash identifier: 7WIkpAMNE0MWACrT8CHZtZO2R04z3nBag8YUuuEbQ1E=
Subject key identifier: 75:11:A4:29:46:98:8C:2F:F5:38:B7:D9:C7:F7:1B:6A:4C:21:7E:0C
Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Certificate serial: 2A57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
Manifest number: 2A3F
Signing time: Thu 24 Sep 2026 15:32:48 +0000
Manifest this update: Thu 24 Sep 2026 15:32:47 +0000
Manifest next update: Thu 01 Oct 2026 15:32:47 +0000
Files and hashes: 1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: jtXWUuBf/k9Jub6m5tRwEqWtmqh/OKTXR89rinTEVUQ=)
2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: EtduFqwWmltWsbxhdyqETTLdxGQaxld6Ct3ig7z5qNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10839 (0x2a57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Validity
Not Before: Sep 24 15:32:47 2026 GMT
Not After : Oct 1 15:32:47 2026 GMT
Subject: CN=6ab542a0-ef60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:f3:8e:03:62:dc:19:2a:2c:d7:32:58:ad:
b7:a6:68:53:0f:0e:c1:10:de:33:ec:cd:0c:8f:0a:
e4:6e:24:e3:1b:90:0f:56:98:39:66:ef:8e:c0:1e:
ff:06:b5:f3:a3:0f:b6:e4:4e:75:3f:3f:4a:9b:39:
0a:ed:5f:fa:b1:ba:0a:41:f5:59:9c:1e:a5:67:0d:
82:a8:5a:68:3e:1f:2e:3f:e9:6a:88:66:9b:36:09:
b3:e1:42:6a:3f:e0:fe:ae:84:51:fe:e4:89:0d:d0:
e4:bc:fe:c6:35:2a:9e:33:42:67:95:ad:fa:91:ae:
80:06:98:f5:dd:66:d0:bc:2a:71:1f:6f:4b:49:d0:
04:19:e0:bf:d8:9a:14:14:7e:03:d1:ea:5e:15:5f:
df:71:38:0b:48:2e:f5:a0:8f:ad:5e:02:b9:8a:ad:
77:8c:1d:5c:f3:c1:6b:66:b7:2c:cc:da:79:0a:91:
6a:b6:3e:50:8f:6f:e6:d9:7b:b5:1e:f1:d0:90:53:
c2:12:54:64:5a:a8:d2:25:73:49:6a:fe:3a:72:0d:
cf:81:8f:f6:fc:e2:17:54:4f:1e:65:32:8d:02:68:
c0:26:66:e5:96:00:74:a3:ae:d2:eb:11:00:5d:06:
70:37:07:fa:b2:6b:71:1a:84:4e:b4:66:dd:bb:c8:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:A4:29:46:98:8C:2F:F5:38:B7:D9:C7:F7:1B:6A:4C:21:7E:0C
X509v3 Authority Key Identifier:
keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:eb:aa:71:bc:3c:ce:33:41:40:90:f4:09:b1:10:48:94:54:
fd:80:2e:3c:8b:33:82:9c:eb:de:c7:60:0b:06:d4:f2:03:0e:
4d:42:91:b8:aa:0f:f5:b5:59:ee:3f:4f:d4:e4:fd:1c:a4:a6:
54:f6:46:d9:78:c1:96:11:0b:0b:20:c0:12:87:e3:4c:63:48:
29:a1:1b:32:f2:9c:9c:68:ba:02:f8:4e:16:ca:0d:82:20:32:
7e:ed:83:d1:b4:b0:0e:02:ca:2f:0e:fd:eb:dc:8c:e1:3b:7f:
5d:e1:e3:ea:6b:7a:dd:42:97:82:1e:93:13:ed:77:71:28:c1:
95:96:e8:17:ef:e3:af:e4:5b:89:82:30:87:33:d0:78:b4:90:
00:da:4b:b3:fa:f5:7f:19:00:bc:74:d4:d3:fa:7d:50:d6:dc:
dd:33:9c:6b:ad:85:65:26:c1:58:6b:0c:f9:c8:90:9e:f9:a8:
33:84:d9:b6:31:d1:01:41:c1:b6:a9:e7:78:f3:de:50:45:9c:
87:09:f7:c1:ff:08:a4:bc:6b:dd:9f:a8:22:0c:02:04:33:55:
ea:25:25:f3:16:94:2d:98:76:90:6b:a7:13:e2:58:2f:00:6a:
94:03:12:11:a9:ca:ab:f2:03:16:35:64:7b:81:f9:11:ff:f4:
19:6b:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:08:41 2026 by rpki-client