
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
File: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json)
Hash identifier: jDoaIDqdie36NcFI2WOO2OjTUWNF+1KR74MJZk3lVNA=
Subject key identifier: EA:68:D3:1E:DC:9F:79:F4:5B:48:84:2F:27:23:B0:F4:89:89:D6:AB
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
Manifest number: 0296
Signing time: Thu 23 Jul 2026 02:52:17 +0000
Manifest this update: Thu 23 Jul 2026 02:52:17 +0000
Manifest next update: Thu 30 Jul 2026 02:52:17 +0000
Files and hashes: 1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: Tti2oesd0D6I4gfAswTD94NoADdjSCtaj5lMBEL9h4o=)
2: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: GxVSXWzE6du6WMtXT3WxN39pt4kQtD831phFtQ55DeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Validity
Not Before: Jul 23 02:52:17 2026 GMT
Not After : Jul 30 02:52:17 2026 GMT
Subject: CN=6a6181e1-ebb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:bd:f4:20:8d:cd:70:c7:c5:0f:f0:bf:75:
3f:d9:13:9e:30:5b:c8:75:f2:9a:78:92:ab:83:fa:
e1:a7:4c:50:22:df:da:c4:17:96:e2:9d:c4:75:9f:
b2:7e:17:f4:e6:56:37:94:17:f8:9d:a9:dd:a7:34:
8c:81:07:1f:20:20:4d:e1:69:02:29:fb:74:b8:95:
69:f7:2e:2f:16:39:fa:20:81:82:3b:f7:0b:fb:af:
7c:79:4c:3c:21:0a:c7:2f:58:33:42:58:98:46:02:
9b:3a:cc:01:bc:25:44:a8:d0:cb:23:a8:4d:71:5c:
69:17:8b:ac:65:01:2c:08:a1:7f:ad:24:09:4f:a4:
0c:ff:89:e5:c3:8e:19:05:9b:96:37:33:4b:a2:dd:
8e:58:a2:24:e8:ec:78:3b:c4:62:fd:76:2b:fd:8e:
3d:aa:de:32:92:61:ee:40:30:4a:d3:38:ae:ec:65:
b7:fe:ce:4e:ad:20:4b:ea:43:c6:e8:7b:b8:fb:7e:
3a:1b:92:d2:38:71:4a:7f:17:57:33:e7:f8:b6:7e:
a5:a0:f5:b8:08:2c:62:ac:1f:1f:b9:c3:6a:70:00:
8b:5f:ab:35:79:a8:c2:3a:ed:77:fe:42:b5:8e:23:
0b:09:f4:e6:01:b0:ce:fe:49:22:08:46:07:5d:4b:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:68:D3:1E:DC:9F:79:F4:5B:48:84:2F:27:23:B0:F4:89:89:D6:AB
X509v3 Authority Key Identifier:
keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:5c:7a:b0:d8:cc:68:98:12:b2:4f:48:db:9b:e5:4f:59:
c6:c3:78:96:e9:67:2b:40:e7:20:07:eb:27:e4:de:26:0b:58:
cc:0b:f2:58:eb:7c:09:72:ba:02:78:0a:b0:e4:11:78:69:bc:
cb:8c:4c:47:de:e3:ab:ce:0f:1f:85:ab:67:b3:7f:3d:ab:b5:
85:fa:82:a6:4e:3a:de:e4:44:24:f3:ea:41:e4:e1:03:0a:8d:
e2:61:4b:b7:cb:c2:33:da:3d:b9:c8:68:56:7a:7f:4c:60:8a:
84:2c:21:af:d8:35:89:28:4e:2f:40:30:96:9b:06:53:a6:b1:
9e:a7:7c:c4:0a:82:29:a8:4e:b4:3a:a6:9a:0d:db:b1:06:96:
b4:14:a8:c9:1d:47:b9:25:b4:93:74:3d:01:7d:66:77:c4:2e:
7b:7d:5b:6f:d8:d6:95:c1:61:00:66:ef:9d:3f:b7:e1:8f:c0:
45:0e:de:54:88:02:36:70:b1:ba:fa:d0:87:f7:c6:83:ff:f6:
74:41:05:81:e0:3c:dd:7f:b2:7e:60:14:36:01:0e:be:b7:c2:
05:df:78:17:8c:ff:bc:c4:92:12:43:02:ad:98:27:71:56:8a:
5a:23:d8:df:4c:7c:a9:c9:d4:d8:ad:10:24:da:89:04:16:33:
a7:c8:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:47 2026 by rpki-client