
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft
File: tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json)
Hash identifier: hgGMPxP/chPFc/2ncF9l474FXagsUm8TZvEjmwtrsOA=
Subject key identifier: 72:6F:F6:6D:BA:34:69:CC:DC:1C:DD:2A:88:CD:BA:33:F7:AF:D2:97
Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28
Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft
Manifest number: 90
Signing time: Thu 23 Jul 2026 09:18:28 +0000
Manifest this update: Thu 23 Jul 2026 09:18:27 +0000
Manifest next update: Thu 30 Jul 2026 09:18:27 +0000
Files and hashes: 1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: MuRxcev3Szju57hwTrQ5M9IPpxk04OBKEJR5qDcUB/8=)
2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: PpvqloufX06LkcG9zYWZ5Pcx+1uUm6NtfRlAU1EzgwM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl
rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228
Validity
Not Before: Jul 23 09:18:27 2026 GMT
Not After : Jul 30 09:18:27 2026 GMT
Subject: CN=6a61dc64-dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:fa:24:11:bc:f5:40:1b:27:17:fc:4f:3f:
79:d1:ab:d0:97:23:1a:94:0e:33:5c:b9:7e:41:fc:
ac:3e:3c:ab:17:f0:be:3b:e3:c0:44:1a:9e:45:ce:
a6:6d:06:83:48:e7:c9:41:4a:11:06:3f:8c:c7:4f:
ad:c0:ae:0d:cb:da:ae:81:5f:6d:4a:15:f9:6b:5b:
c5:fd:fd:52:60:91:e6:ff:de:d2:e1:ae:49:cb:7e:
62:fa:94:97:3b:22:c2:9e:21:12:dd:4c:ba:56:7f:
1f:62:64:9a:f9:79:53:f1:ac:ad:60:f1:82:39:7c:
85:09:60:b8:48:e5:85:d9:be:0f:bd:8a:1a:26:41:
cb:43:dc:cc:43:75:50:b3:82:9a:55:f7:a7:3f:10:
01:c3:29:c9:ad:99:a8:2e:3a:db:a6:33:e2:f0:03:
e7:ab:50:a7:73:74:36:96:f5:df:97:34:65:49:8a:
43:5f:bc:e7:f2:a6:c9:3a:ef:5e:46:0f:51:d1:e5:
fe:b8:ba:3a:47:23:ad:95:b8:db:2b:99:1b:76:ac:
08:56:2a:dd:8c:f8:02:a6:9a:dc:cd:2c:3a:0f:f8:
2c:70:35:7c:f5:e6:c6:3d:e1:96:d6:a9:5d:97:43:
28:77:55:bc:da:8e:1f:6e:f9:8b:ce:79:41:34:e9:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:F6:6D:BA:34:69:CC:DC:1C:DD:2A:88:CD:BA:33:F7:AF:D2:97
X509v3 Authority Key Identifier:
keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:69:2a:33:1d:67:d1:b0:90:e2:45:f0:32:f2:93:81:30:38:
9a:2d:65:75:63:2c:ba:79:c8:d0:84:ab:f7:bd:03:75:49:a4:
ac:99:da:2d:9a:03:ce:6b:ca:ba:a6:a0:25:fa:8d:e7:c6:48:
a9:9b:95:59:b0:db:57:ea:18:56:31:0a:7f:f3:dc:00:0c:6a:
2b:e3:a0:d2:9b:8d:0c:35:2b:a1:5c:e0:2d:14:b1:88:24:cc:
51:b0:d9:ec:56:47:13:a8:39:7c:81:64:1d:d4:a1:81:8c:dc:
6f:ac:f3:92:61:c2:47:fc:62:9f:48:7f:a7:c3:5f:7a:de:53:
9b:9c:5c:5e:56:41:d7:d1:1c:00:f5:fb:8b:fd:44:5a:18:86:
63:ac:4a:3d:7e:63:3b:db:fc:9f:50:4b:8f:60:91:c5:3f:c9:
17:fa:9a:0a:bd:fd:75:f3:b0:6d:e0:c0:fe:02:ec:ec:68:ee:
93:b4:e2:22:ae:4c:61:b9:ea:f4:46:bf:27:ff:65:e3:09:fc:
e4:49:5c:4c:a0:82:f1:af:cb:68:bc:95:05:07:e3:1f:61:14:
40:be:bb:c8:ac:0a:68:af:4e:f3:a0:5a:1d:25:44:1a:99:fa:
e0:f9:bc:a6:ed:13:97:06:b5:31:1a:06:be:e5:8b:cc:94:6b:
28:f7:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:45 2026 by rpki-client