
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier: G7uTB92A5tDA+iFsOSCTYNFUW9n/BgLg1cn+z8952yo=
Subject key identifier: 05:4A:45:F7:DB:79:12:7E:9A:F4:BA:B5:24:E3:0F:E8:90:66:45:78
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number: 01D4
Signing time: Wed 13 May 2026 03:52:05 +0000
Manifest this update: Wed 13 May 2026 03:52:05 +0000
Manifest next update: Wed 20 May 2026 03:52:05 +0000
Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: EJbl2xQO7zrjs+T5uF7NW9pLL/v69DYykQLQsBGwoeM=)
2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: /qNeMoHq2aNx85z5DTHQgQr12JfNKIytF+LLvQVIEvI=)
3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: May 13 03:52:05 2026 GMT
Not After : May 20 03:52:05 2026 GMT
Subject: CN=6a03f565-2840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:63:5d:48:30:89:1b:2f:a9:ea:bf:ae:ab:
41:6a:b0:07:73:d2:28:97:04:a5:75:94:87:e0:95:
e3:62:eb:d6:e7:f9:40:db:c2:90:6d:df:e7:3f:b6:
1c:94:3e:0d:1a:f5:f5:b6:f6:04:a9:71:64:87:40:
f7:88:5a:68:08:22:da:1a:07:cd:bb:d4:20:35:8e:
87:1c:77:b8:cd:a1:28:5b:03:db:02:85:ad:90:0c:
b6:04:54:5d:26:59:46:87:db:8c:98:c1:80:46:6d:
d1:40:51:af:ec:55:93:a7:0c:1e:67:a3:62:21:06:
8b:51:78:1c:b9:dc:e9:3e:52:00:8e:18:49:19:64:
0f:f1:34:bf:6e:94:37:9b:95:50:ac:d0:cd:93:65:
11:0d:a0:f6:03:0a:b9:ba:17:ff:f8:96:74:7a:91:
68:57:53:3e:53:52:95:4d:fd:5f:94:eb:6c:f8:c3:
17:cc:3f:69:e6:ef:c5:b3:99:03:78:f0:00:0b:d9:
24:08:29:fb:b2:46:6d:68:4f:fc:55:45:40:59:50:
27:82:ef:63:82:bf:7f:ae:c6:c4:1e:2c:f8:2c:65:
55:4a:8d:a8:6c:7f:6a:79:aa:b3:9b:14:2c:b4:fc:
3a:28:27:07:06:52:34:3e:d9:77:b6:e9:77:d5:d0:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4A:45:F7:DB:79:12:7E:9A:F4:BA:B5:24:E3:0F:E8:90:66:45:78
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:11:bf:aa:a0:58:9e:21:be:b9:28:91:ac:c7:45:d6:85:92:
48:9c:0d:1e:ec:14:03:1c:4a:53:82:ad:89:96:2c:8a:d0:b0:
52:23:77:ae:c2:79:0f:84:29:5b:2f:b9:ee:ea:90:20:2a:e6:
78:84:78:bf:90:8f:e4:81:16:21:69:fc:d4:e4:3f:fd:d3:82:
d3:9f:6e:59:dd:00:38:ee:1b:b6:22:48:7e:c2:af:e1:85:e5:
75:90:ad:f0:20:d2:0f:5a:bd:44:80:58:05:be:43:df:0e:e8:
f4:e8:c8:fe:42:f5:8e:98:2f:37:e0:11:fb:51:fe:07:93:af:
6c:b8:39:6b:a4:dd:d2:a6:7a:66:9d:aa:fd:55:7e:4b:66:74:
2a:69:bd:ed:97:5b:91:9d:c5:62:08:de:e7:d8:73:01:b7:18:
73:b8:51:bc:4b:3a:c4:a7:44:f3:4e:58:9c:a2:ad:d2:13:a6:
a7:ce:ac:9f:22:5b:23:93:27:b4:db:a2:5b:80:7c:c3:ef:1b:
bf:ea:92:25:10:c2:79:8b:7f:53:91:9c:f3:7c:c5:53:21:5a:
5f:da:52:97:19:b5:28:1e:6d:a7:e3:74:99:f7:ea:bf:de:14:
92:fb:a1:b0:81:4b:5a:70:1f:2b:83:00:bd:4f:ce:3d:8f:3a:
35:9f:29:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1
NTIwNUM4RjYwHhcNMjYwNTEzMDM1MjA1WhcNMjYwNTIwMDM1MjA1WjAYMRYwFAYD
VQQDEw02YTAzZjU2NS0yODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArV9jXUgwiRsvqeq/rqtBarAHc9IolwSldZSH4JXjYuvW5/lA28KQbd/nP7Yc
lD4NGvX1tvYEqXFkh0D3iFpoCCLaGgfNu9QgNY6HHHe4zaEoWwPbAoWtkAy2BFRd
JllGh9uMmMGARm3RQFGv7FWTpwweZ6NiIQaLUXgcudzpPlIAjhhJGWQP8TS/bpQ3
m5VQrNDNk2URDaD2Awq5uhf/+JZ0epFoV1M+U1KVTf1flOts+MMXzD9p5u/Fs5kD
ePAAC9kkCCn7skZtaE/8VUVAWVAngu9jgr9/rsbEHiz4LGVVSo2obH9qeaqzmxQs
tPw6KCcHBlI0Ptl3tul31dBxOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVKRffb
eRJ+mvS6tSTjD+iQZkV4MB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB
RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3
bXhicGwxQUc0U0pWSUZ5UFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGRG/qqBYniG+uSiRrMdF1oWSSJwNHuwUAxxKU4KtiZYsitCwUiN3rsJ5D4Qp
Wy+57uqQICrmeIR4v5CP5IEWIWn81OQ//dOC059uWd0AOO4btiJIfsKv4YXldZCt
8CDSD1q9RIBYBb5D3w7o9OjI/kL1jpgvN+AR+1H+B5OvbLg5a6Td0qZ6Zp2q/VV+
S2Z0Kmm97ZdbkZ3FYgje59hzAbcYc7hRvEs6xKdE805YnKKt0hOmp86snyJbI5Mn
tNuiW4B8w+8bv+qSJRDCeYt/U5Gc83zFUyFaX9pSlxm1KB5tp+N0mffqv94Ukvuh
sIFLWnAfK4MAvU/OPY86NZ8plQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:21:50 2026 by rpki-client