
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json)
Hash identifier: td/4pcbwyGDUZLoAA94Bfkn/WHgIMZgvN6GqQUPta28=
Subject key identifier: D1:AC:8C:B3:AC:FE:99:D1:38:67:FA:6C:10:02:09:57:5E:ED:91:5D
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 028B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
Manifest number: 0228
Signing time: Thu 23 Jul 2026 05:27:18 +0000
Manifest this update: Thu 23 Jul 2026 05:27:18 +0000
Manifest next update: Thu 30 Jul 2026 05:27:18 +0000
Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: v0bnN/xuTsLOTrUktAx5aNoYvHM1MLnedrT7bnGhPfA=)
2: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=)
3: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=)
4: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=)
5: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=)
6: 60DB5E40835411F1B1AB651362A30FBC.roa (hash: QiwTuqsF+q6i3OyITXNa/EMVWTHfVE3WCTSJ5Pst84Y=)
7: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=)
8: 9ADAB6A4835411F18D13EB1962A30FBC.roa (hash: RcYGheWGYiRTsVY9x6EMArDSWaBIhGM9FHGfaEWR5rU=)
9: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Jul 23 05:27:18 2026 GMT
Not After : Jul 30 05:27:18 2026 GMT
Subject: CN=6a61a636-44d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:b1:56:61:e1:4e:ba:8b:02:57:b9:b3:a5:
3c:8a:dd:a4:fb:1f:e9:92:d1:2b:47:66:f2:24:ec:
a6:99:e0:87:0d:14:94:37:b5:d5:99:b8:c0:72:ac:
dd:2e:20:52:aa:cc:6e:0c:26:77:eb:0e:44:3c:9b:
f3:7f:5d:8b:d2:f8:5a:62:ee:32:9a:36:f5:84:33:
6b:73:d1:81:57:19:cb:6e:ea:1e:8b:4f:22:5b:2c:
14:48:4f:86:39:9d:a5:fe:3f:6a:88:0d:cb:a1:20:
7c:00:f4:74:ce:2d:af:68:0d:74:c8:8f:18:36:03:
cc:a5:fb:20:36:9d:a0:60:ba:19:6b:db:88:eb:2c:
b9:e3:2f:e7:cb:d1:fe:58:de:fc:10:4a:74:cb:6b:
04:ae:f3:78:ef:e3:79:7c:60:3b:23:41:7c:7f:fe:
42:c0:39:82:43:7f:7c:92:b4:9a:d1:fd:6a:9a:a8:
f3:58:15:46:78:40:e0:1b:98:90:ac:ad:aa:8c:a1:
50:36:0b:32:71:20:71:8c:68:d1:bf:e4:2f:c7:69:
f5:a0:82:d8:b7:aa:b1:66:29:d3:9d:61:22:3e:4c:
43:4b:88:e0:44:f0:0d:e3:d9:7d:21:6b:20:a7:46:
5d:0f:46:9f:7d:e0:b6:86:28:cf:f9:a7:f5:7e:2a:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AC:8C:B3:AC:FE:99:D1:38:67:FA:6C:10:02:09:57:5E:ED:91:5D
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:fd:c5:2d:9a:5d:18:6a:57:a6:36:a3:67:60:20:7f:4d:05:
04:2e:0e:ff:aa:23:ca:0c:60:66:f7:7f:23:6e:79:fc:57:5e:
37:8b:7c:08:23:c2:db:a3:c1:3f:fd:a8:dd:40:f6:3e:c5:4c:
90:30:c3:02:dc:b5:0b:19:68:a5:63:5e:91:0c:55:26:c0:79:
13:94:0f:51:1a:6e:27:8a:0e:d5:3a:55:66:69:69:b4:af:8e:
d3:d6:b7:1d:ca:c0:77:37:01:db:12:34:3a:47:cc:df:6e:3c:
27:af:52:c8:d4:60:90:e7:76:fb:1a:72:27:5f:ab:7d:cc:cd:
0c:21:a9:07:e2:bc:91:0f:26:bf:55:39:b8:6e:ba:df:30:f6:
43:d9:5d:42:ed:6e:4f:99:fb:84:36:de:54:b8:78:6c:db:4f:
1b:16:24:14:ae:ea:b1:88:d2:21:3e:0d:24:37:3d:5c:c6:d4:
e9:ac:08:30:0e:fa:36:ca:56:cf:db:7a:91:11:db:7c:32:fb:
4a:47:c3:c7:75:f7:19:9f:0f:92:d7:0a:10:ce:14:89:69:9e:
c0:5d:83:c1:1c:eb:91:be:6b:18:59:da:21:3f:52:00:05:fa:
ff:16:80:89:95:b6:ef:80:fc:4a:ab:86:a6:32:32:e0:f9:b9:
fc:8e:b3:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw
MEQ3ODhCRkIwHhcNMjYwNzIzMDUyNzE4WhcNMjYwNzMwMDUyNzE4WjAYMRYwFAYD
VQQDEw02YTYxYTYzNi00NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPexVmHhTrqLAle5s6U8it2k+x/pktErR2byJOymmeCHDRSUN7XVmbjAcqzd
LiBSqsxuDCZ36w5EPJvzf12L0vhaYu4ymjb1hDNrc9GBVxnLbuoei08iWywUSE+G
OZ2l/j9qiA3LoSB8APR0zi2vaA10yI8YNgPMpfsgNp2gYLoZa9uI6yy54y/ny9H+
WN78EEp0y2sErvN47+N5fGA7I0F8f/5CwDmCQ398krSa0f1qmqjzWBVGeEDgG5iQ
rK2qjKFQNgsycSBxjGjRv+Qvx2n1oILYt6qxZinTnWEiPkxDS4jgRPAN49l9IWsg
p0ZdD0affeC2hijP+af1fipCcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGsjLOs
/pnROGf6bBACCVde7ZFdMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz
NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4
SVZwSjVDZnhyblFBMTRpX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVP3FLZpdGGpXpjajZ2Agf00FBC4O/6ojygxgZvd/I255/FdeN4t8CCPC26PB
P/2o3UD2PsVMkDDDAty1CxlopWNekQxVJsB5E5QPURpuJ4oO1TpVZmlptK+O09a3
HcrAdzcB2xI0OkfM3248J69SyNRgkOd2+xpyJ1+rfczNDCGpB+K8kQ8mv1U5uG66
3zD2Q9ldQu1uT5n7hDbeVLh4bNtPGxYkFK7qsYjSIT4NJDc9XMbU6awIMA76NspW
z9t6kRHbfDL7SkfDx3X3GZ8PktcKEM4UiWmewF2DwRzrkb5rGFnaIT9SAAX6/xaA
iZW274D8SquGpjIy4Pm5/I6z2w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:43 2026 by rpki-client