
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json)
Hash identifier: I8JSvFUf+eU/2uYpKkuwWr+cLslQZHXbFHvMN9Yf8sk=
Subject key identifier: BA:6E:2F:1A:95:E5:4C:8B:95:51:A4:CA:35:F9:C5:36:94:8E:DD:2E
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
Manifest number: 01FE
Signing time: Mon 11 May 2026 04:30:50 +0000
Manifest this update: Mon 11 May 2026 04:30:50 +0000
Manifest next update: Mon 18 May 2026 04:30:50 +0000
Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: +YjFQiFglBD+BZmDs6tNA1TL/Tu2wqFvGGgbbim3n4Y=)
2: 186CFB6440DD11F1A8025F1AA6833773.roa (hash: ExyVp+3BEiYoIGyxcmeHrI1eINQHaGYAun96Y5CYXGk=)
3: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=)
4: A562D2B20C4111F1A1A27D5E0E3D8C67.roa (hash: QLkjHyRkvA9YbmHmikqdDsD4DAHlBTN2EdsuEF0kfO0=)
5: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=)
6: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=)
7: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=)
8: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=)
9: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: May 11 04:30:50 2026 GMT
Not After : May 18 04:30:50 2026 GMT
Subject: CN=6a015b7a-cb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:55:04:ff:56:31:73:02:e2:65:32:31:58:
91:bf:c5:31:86:51:22:ee:0b:6d:13:7e:c0:3b:5d:
35:ec:bf:ab:e1:1f:e4:23:ad:c9:2e:72:d7:b0:0f:
3d:b7:6f:64:0d:ec:73:87:cd:0e:69:26:12:72:04:
ba:a3:63:8c:55:87:38:cb:9e:1b:1a:27:58:66:be:
9d:77:e4:f2:cb:e2:33:fc:27:28:cb:0c:c6:c2:0e:
52:09:e9:8b:2e:9c:6b:4f:b8:40:04:6d:1d:a0:37:
95:24:45:6c:93:e4:2a:33:f8:0f:14:de:68:63:7a:
56:31:de:75:1b:9c:2b:ae:01:d8:49:b4:a0:ff:66:
f0:e3:49:e0:14:88:32:b6:45:d0:35:05:62:26:3c:
d3:96:5a:8b:a4:16:52:73:35:ca:27:2c:ce:7d:49:
29:10:36:a5:99:d6:10:f7:93:04:c8:48:6d:fb:6b:
90:5f:90:9b:b7:99:04:59:f5:fe:b8:8a:0b:cb:44:
5a:5f:18:d2:7a:40:86:94:f7:17:a6:44:35:83:e3:
8c:8b:fe:0d:b3:be:64:af:ed:aa:54:d5:93:a6:49:
df:a7:7d:dd:82:29:99:ec:96:2d:18:94:01:35:c0:
6f:a0:81:32:e3:d1:23:d0:30:24:24:73:c1:ba:db:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:2F:1A:95:E5:4C:8B:95:51:A4:CA:35:F9:C5:36:94:8E:DD:2E
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:9c:7e:c3:9b:f6:99:18:95:15:73:4d:9f:e8:8b:b7:64:6a:
ec:ba:cd:6f:5f:bb:6b:a6:fa:e2:db:86:0f:3c:6a:eb:9e:e2:
35:36:c1:da:47:dc:17:dc:45:d6:ac:1c:78:1c:ec:da:b4:70:
9e:7e:55:08:8f:6c:98:02:3e:e8:86:9a:17:40:40:d3:0c:14:
71:4f:94:e0:49:3e:57:65:3c:de:3d:d3:17:70:af:d9:eb:9d:
2e:d3:f3:4c:25:2a:03:6f:ad:71:d7:7b:9b:2d:89:50:ff:b5:
ff:9e:d2:b1:3d:26:b9:95:57:88:28:74:3f:9b:95:c0:93:f2:
bc:44:95:92:d8:da:bc:37:5a:ee:95:c8:27:48:24:c4:bc:38:
1b:ad:cd:02:09:36:51:10:d4:44:5f:97:34:1a:6f:26:b9:16:
f3:27:42:f0:9a:9d:f5:36:3d:ba:8e:d7:61:5d:33:26:26:b5:
a4:ef:4c:ad:76:35:3a:86:e0:80:58:87:70:fe:5d:7e:62:fd:
a1:86:e7:f4:ed:eb:3b:fd:d6:63:57:59:50:4b:ab:31:20:5c:
e7:c5:c6:f9:3c:61:e6:98:95:bc:db:b6:ea:61:7d:26:4e:22:
c9:af:cd:dd:e0:87:b9:02:76:0d:2d:33:c5:e9:8e:5e:95:e9:
57:c1:aa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:26 2026 by rpki-client