
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json)
Hash identifier: Ueggq5w9URBZzbE3S6WA5KIgFjrcYhx97gaoYx4PX+U=
Subject key identifier: 29:BA:19:AD:6C:E5:5C:AB:C7:75:AF:B5:6F:3B:9D:6F:E2:6C:E4:E8
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
Manifest number: 0265
Signing time: Fri 13 Nov 2026 03:35:44 +0000
Manifest this update: Fri 13 Nov 2026 03:35:43 +0000
Manifest next update: Fri 20 Nov 2026 03:35:43 +0000
Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: +E0uNLCc1cQ+/xoeZKzcYkB4daFoFbSvNJxT68kLg6A=)
2: 2F5755A29C5611F183B20B674311F970.roa (hash: XoFt6d27uwyJT0/BvhZSIQHqgFAFCPy92uoA6tI+Zz8=)
3: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=)
4: 450423809C5611F1BDCBB6734311F970.roa (hash: zdj9DDRUrEWIkqR0GDuFCwSRJwXNhwULOy3idgsHXrk=)
5: 9ADAB6A4835411F18D13EB1962A30FBC.roa (hash: RcYGheWGYiRTsVY9x6EMArDSWaBIhGM9FHGfaEWR5rU=)
6: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=)
7: 40E8C60AC09D11F18CFDF4DB5A11F970.roa (hash: gmvwdrjGwMix1I5O6fjSjiG/Kwgigz34nscG++7r82o=)
8: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=)
9: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=)
10: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=)
11: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 03:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Nov 13 03:35:43 2026 GMT
Not After : Nov 20 03:35:43 2026 GMT
Subject: CN=6af6858f-d5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:09:38:ea:52:6c:ba:d2:a0:e2:a7:8f:fa:
23:f7:ec:f7:03:7b:f0:cd:4d:0d:e9:26:36:e5:16:
02:5a:cb:dd:e0:94:e9:eb:04:77:16:0a:db:4c:ec:
16:c2:97:b4:a4:45:1a:3e:f3:dd:9e:fd:04:f5:99:
51:11:60:e5:9c:d8:e0:14:da:93:75:19:e3:cf:b2:
d2:7c:ba:29:7f:9e:c9:8a:90:f4:0d:67:a8:fb:65:
08:5e:74:95:84:f7:6b:91:b7:18:27:a8:0b:e0:30:
d9:16:63:5c:15:66:2b:e6:2a:c9:c5:2f:0a:59:fd:
d6:3f:09:e2:fc:e1:2e:c0:5d:10:83:32:0c:4a:01:
33:dd:ca:03:d6:ae:2e:57:cc:70:4a:60:94:2f:47:
c4:0a:84:f9:a4:4e:ff:c9:88:20:e8:6e:90:8a:18:
d9:f2:b7:f3:10:0a:2f:30:72:67:b9:3b:82:a8:1d:
da:07:53:43:f9:61:42:77:40:11:8e:ac:03:7c:be:
e8:b8:7e:4d:59:51:03:bc:7a:e2:d2:12:ba:60:04:
b6:a0:d8:e5:39:62:73:cd:6f:03:b8:5c:23:44:92:
28:69:35:a8:60:1a:61:64:4a:a3:d1:79:c6:eb:ba:
2e:87:73:f0:84:7c:58:09:bd:14:76:eb:30:bd:21:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:19:AD:6C:E5:5C:AB:C7:75:AF:B5:6F:3B:9D:6F:E2:6C:E4:E8
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:ea:bc:88:d8:61:1d:f0:49:4e:ec:b1:cb:37:85:7d:16:
d7:fa:b9:61:c0:d0:35:a8:af:33:8c:1f:f9:32:3c:9b:0d:ac:
42:8c:fc:fe:c3:d9:51:a3:f1:b2:a0:1e:d4:37:1c:5e:70:ae:
44:5d:dd:a3:5d:53:02:9a:e3:7c:8e:3f:b4:4c:ba:ad:57:48:
53:3f:9d:76:0d:46:44:e1:35:7b:d9:71:1e:c3:97:71:ad:25:
8d:90:b0:51:8f:85:4e:ef:87:85:c5:da:fb:8a:bd:da:af:e3:
48:06:c1:20:09:a9:94:dc:4e:f2:e3:9e:e0:d4:53:41:7b:08:
ae:4a:81:e6:fc:3e:67:25:32:4a:f5:85:b4:99:2f:a6:0e:5a:
69:64:70:fe:ce:f5:99:a8:a6:13:1b:01:6b:86:54:d0:9d:82:
24:ef:78:0a:f5:f4:9a:d8:d9:b5:4b:01:89:f4:cf:49:9f:19:
69:db:48:13:d9:53:ad:4b:0f:dc:1a:7a:68:05:61:f8:6c:7c:
c3:9d:04:d0:0e:a8:82:6f:b4:1e:f0:2d:01:ae:a6:49:5d:8c:
91:f8:84:76:a3:31:9a:a9:84:6c:d9:00:ce:9b:8a:00:2d:85:
51:3f:a1:15:4f:0d:e9:1c:b8:60:9c:64:27:41:1e:52:c2:d3:
3d:07:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:28:52 2026 by rpki-client