
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
File: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json)
Hash identifier: MZCC2/HZUF6X6D/BDH6WMHIcwDgQkpdvVKn2OVtWJJ0=
Subject key identifier: 41:0F:F4:68:5F:98:8D:28:4F:6E:40:FF:01:11:32:64:DD:5F:E5:E4
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
Manifest number: 0273
Signing time: Wed 13 May 2026 02:08:40 +0000
Manifest this update: Wed 13 May 2026 02:08:40 +0000
Manifest next update: Wed 20 May 2026 02:08:40 +0000
Files and hashes: 1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: A2N+6Ic56/gm23NOqI95hL/TjWCgCDMW5SGl4A6PayQ=)
2: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: GxVSXWzE6du6WMtXT3WxN39pt4kQtD831phFtQ55DeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Validity
Not Before: May 13 02:08:40 2026 GMT
Not After : May 20 02:08:40 2026 GMT
Subject: CN=6a03dd28-f1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:12:75:fe:9b:03:61:59:4b:2c:1c:6f:9c:
74:62:02:a6:41:0a:0c:09:35:12:9b:c4:8f:78:d2:
fd:67:b5:e6:3e:4d:34:d6:da:bf:98:19:a2:92:c3:
e7:a8:4f:14:eb:16:65:7a:7e:aa:51:30:72:72:ae:
7c:a2:e5:f3:72:1c:55:bf:7f:3c:83:4c:d3:51:81:
99:a2:43:3e:cd:0c:07:1c:d5:ab:e0:d4:8b:58:56:
9a:99:21:52:92:16:51:72:7f:ac:1b:54:eb:5f:f0:
6d:15:1c:14:2e:91:85:38:39:3b:fd:07:12:de:3a:
40:05:74:f2:16:82:86:cd:0f:2e:aa:57:8b:c2:99:
dd:82:96:3c:2a:b4:ce:c4:7c:74:69:f2:84:0a:1d:
28:f3:f9:6e:0c:e4:ba:80:26:9e:cd:4f:fe:09:94:
cb:d6:01:5f:f0:ac:03:f4:ec:e4:9d:6f:67:9c:91:
99:c2:99:cd:ad:20:b7:36:8a:e2:6e:66:90:2a:c9:
60:7a:1f:3e:de:fb:59:c1:59:bc:ab:66:f4:d4:21:
0c:f9:ef:44:c6:0a:68:cf:2d:fc:5b:64:23:c6:00:
7d:c5:57:89:0e:bb:a6:6b:9f:28:5a:1a:ed:00:7f:
53:e1:7f:75:02:3c:7c:e3:d4:47:b2:c9:1a:c3:65:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:F4:68:5F:98:8D:28:4F:6E:40:FF:01:11:32:64:DD:5F:E5:E4
X509v3 Authority Key Identifier:
keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:a5:18:43:e7:ea:a8:50:08:61:f9:54:c4:e9:76:05:2b:2e:
a8:ed:bf:41:03:35:cb:ed:bf:0d:d1:0a:e6:62:67:d4:de:be:
5b:cb:1f:bb:f3:81:32:fa:61:ca:59:95:48:f4:61:fe:65:b2:
d2:a8:8d:0d:31:ac:3f:fc:d6:53:d1:8c:7a:e0:ab:96:2e:4d:
03:f5:55:f7:44:b9:7d:d5:c9:1d:8c:9f:fc:a5:3e:b4:f2:07:
a1:60:8f:1a:fc:2c:ec:a9:56:80:1b:1a:8a:04:ce:ff:c4:68:
43:8f:6b:51:78:bb:36:11:70:9f:8e:22:81:b2:a4:f5:d9:d0:
df:15:0a:14:86:f5:fa:5a:b6:24:88:b1:b4:88:75:ac:6f:ea:
c2:f2:17:41:73:b5:f1:7c:04:d0:99:c3:29:f3:d7:fc:4e:1e:
fa:ae:35:49:00:d3:c6:16:49:e5:f5:96:9f:a6:f8:91:f0:ac:
f8:cd:9c:ec:9b:da:6f:46:d7:2c:78:f7:05:e2:41:65:58:be:
4c:e1:ff:26:bf:77:0f:d0:23:1a:20:96:b9:95:c0:64:c1:40:
ce:98:ca:38:8a:e2:fd:e2:ed:1b:1e:c6:89:bf:68:b6:4b:6b:
36:8c:7f:43:f6:36:7b:5d:57:2f:c9:91:49:b7:fd:8f:3c:cf:
b8:2e:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:40:26 2026 by rpki-client