
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier: jfRQMOB473r5eAqiEoLMRxI1f7VQUuB+r4vAxdjo3qc=
Subject key identifier: FE:CC:F8:12:1B:EA:84:9F:5B:14:D6:6B:1F:EB:04:E2:79:A7:24:50
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number: 01BB
Signing time: Wed 25 Mar 2026 03:21:56 +0000
Manifest this update: Wed 25 Mar 2026 03:21:55 +0000
Manifest next update: Wed 01 Apr 2026 03:21:55 +0000
Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: CRSFIb1/mb4PCXHdT6wIklIPBWPraeH4aGylG+MQsP8=)
2: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE=)
3: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: /qNeMoHq2aNx85z5DTHQgQr12JfNKIytF+LLvQVIEvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: Mar 25 03:21:55 2026 GMT
Not After : Apr 1 03:21:55 2026 GMT
Subject: CN=69c354d4-e30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:3a:38:79:eb:49:33:44:56:b9:2e:82:4c:
70:98:4d:6f:bb:f4:1c:e0:2e:a6:d2:12:25:4f:66:
aa:9e:13:51:e3:fd:4e:b8:94:91:29:77:c5:4a:6c:
74:b5:39:10:09:17:3a:01:a0:d8:4a:02:34:13:c2:
a4:c4:b5:f4:e4:37:ce:97:88:a2:46:bb:e8:85:e1:
b5:23:7c:e0:66:01:cc:e8:23:7c:e6:f4:d0:4b:9d:
17:df:f1:ec:e1:80:68:92:bd:4c:94:91:c6:d8:81:
c0:13:66:c5:f1:30:10:2f:a4:f9:e9:d6:a9:4c:37:
02:df:31:7e:58:e2:e0:b4:84:18:95:1f:47:af:9e:
c9:e3:c1:f8:43:75:67:2f:18:76:47:cb:53:5a:52:
d7:32:e1:62:97:68:a9:0a:72:98:b6:a6:e3:c1:a4:
9f:7b:c4:aa:2b:1c:ec:30:93:0d:26:23:14:d3:7a:
bc:c5:f3:f3:88:35:56:d2:ff:97:5b:dd:0a:47:e2:
bb:a6:8a:7c:f1:3d:90:35:96:25:38:cd:78:28:c2:
51:1d:eb:cf:25:e9:62:7f:65:2b:88:ad:64:47:3e:
85:be:e7:55:d5:34:52:7b:df:ca:25:2c:ca:cd:d9:
1d:97:9a:82:89:9e:57:28:44:d2:32:87:e5:69:6e:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CC:F8:12:1B:EA:84:9F:5B:14:D6:6B:1F:EB:04:E2:79:A7:24:50
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:16:61:29:06:bd:16:2b:39:d3:25:99:eb:d7:02:4c:13:02:
0a:94:6d:4f:aa:e5:c5:0e:ee:f9:ff:59:f7:f8:34:0d:f0:cb:
cc:55:b6:4c:9a:da:a7:02:17:3f:ef:a9:1f:99:c3:74:e2:42:
3b:52:49:89:40:4f:aa:4d:d3:93:b2:2f:b2:f4:ba:95:b6:94:
a8:46:d2:06:3b:01:bc:8e:7a:e9:af:fe:00:f9:da:20:94:be:
f7:41:40:6d:b2:13:cf:bf:f7:bb:12:a0:55:26:a0:f3:06:c5:
6a:3c:ef:52:e3:95:30:93:0f:24:7d:54:b6:9d:e1:1a:49:31:
30:4d:93:66:34:04:09:88:c1:8d:5e:76:35:33:31:5e:3e:a6:
08:4f:0a:85:b4:61:98:1a:32:cf:59:da:07:6d:4b:66:e6:e9:
d2:d4:c2:2d:6b:94:6c:b7:cc:2b:20:4d:4c:24:2a:e8:c5:21:
51:6d:ae:fe:0a:ee:02:7c:28:4a:92:21:ed:f6:e8:59:19:f6:
1c:03:6e:27:1a:5d:e1:e0:22:09:d8:af:aa:29:56:d7:87:8b:
50:af:f5:46:2d:0e:28:0c:86:bd:10:b9:1f:3a:cc:9a:5a:31:
3b:19:8a:07:21:95:1d:3b:4c:d2:0b:24:e1:dd:ea:fe:8c:ac:
df:d2:b3:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1
NTIwNUM4RjYwHhcNMjYwMzI1MDMyMTU1WhcNMjYwNDAxMDMyMTU1WjAYMRYwFAYD
VQQDEw02OWMzNTRkNC1lMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZE6OHnrSTNEVrkugkxwmE1vu/Qc4C6m0hIlT2aqnhNR4/1OuJSRKXfFSmx0
tTkQCRc6AaDYSgI0E8KkxLX05DfOl4iiRrvoheG1I3zgZgHM6CN85vTQS50X3/Hs
4YBokr1MlJHG2IHAE2bF8TAQL6T56dapTDcC3zF+WOLgtIQYlR9Hr57J48H4Q3Vn
Lxh2R8tTWlLXMuFil2ipCnKYtqbjwaSfe8SqKxzsMJMNJiMU03q8xfPziDVW0v+X
W90KR+K7pop88T2QNZYlOM14KMJRHevPJelif2UriK1kRz6FvudV1TRSe9/KJSzK
zdkdl5qCiZ5XKETSMoflaW49ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7M+BIb
6oSfWxTWax/rBOJ5pyRQMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB
RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3
bXhicGwxQUc0U0pWSUZ5UFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgBZhKQa9Fis50yWZ69cCTBMCCpRtT6rlxQ7u+f9Z9/g0DfDLzFW2TJrapwIX
P++pH5nDdOJCO1JJiUBPqk3Tk7IvsvS6lbaUqEbSBjsBvI566a/+APnaIJS+90FA
bbITz7/3uxKgVSag8wbFajzvUuOVMJMPJH1Utp3hGkkxME2TZjQECYjBjV52NTMx
Xj6mCE8KhbRhmBoyz1naB21LZubp0tTCLWuUbLfMKyBNTCQq6MUhUW2u/gruAnwo
SpIh7fboWRn2HANuJxpd4eAiCdivqilW14eLUK/1Ri0OKAyGvRC5HzrMmloxOxmK
ByGVHTtM0gsk4d3q/oys39Kz5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:18 2026 by rpki-client