
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json)
Hash identifier: 8XUS2thIRLyM2GKNzRZLiwcJ7SrkL8Nt2LHysc104N8=
Subject key identifier: FE:FD:ED:BD:A4:F0:4B:0F:2C:48:0A:83:99:39:E8:1A:A8:91:12:FC
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 02AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
Manifest number: 024A
Signing time: Wed 23 Sep 2026 03:34:02 +0000
Manifest this update: Wed 23 Sep 2026 03:34:01 +0000
Manifest next update: Wed 30 Sep 2026 03:34:01 +0000
Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: +Jm2kG/YujB0LIpmt2kHd2ItPluKn99fuKWaYV+B+wU=)
2: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=)
3: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=)
4: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=)
5: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=)
6: 2F5755A29C5611F183B20B674311F970.roa (hash: XoFt6d27uwyJT0/BvhZSIQHqgFAFCPy92uoA6tI+Zz8=)
7: 450423809C5611F1BDCBB6734311F970.roa (hash: zdj9DDRUrEWIkqR0GDuFCwSRJwXNhwULOy3idgsHXrk=)
8: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=)
9: 9ADAB6A4835411F18D13EB1962A30FBC.roa (hash: RcYGheWGYiRTsVY9x6EMArDSWaBIhGM9FHGfaEWR5rU=)
10: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Sep 23 03:34:01 2026 GMT
Not After : Sep 30 03:34:01 2026 GMT
Subject: CN=6ab348aa-6f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:c5:72:60:ba:0b:ad:f6:5e:2e:8c:8a:b6:
cc:bd:50:9b:27:af:37:c5:54:63:7a:33:12:b6:77:
79:12:59:60:f1:03:cb:68:52:3a:b7:5d:f4:72:17:
75:c0:f6:81:71:1b:f2:e3:3b:8a:ef:71:6c:25:8a:
40:57:b8:c4:85:dd:bd:b1:28:3c:e4:16:eb:d2:cb:
1d:cc:07:c3:22:d8:85:70:23:94:a2:38:1f:06:11:
5c:1b:99:38:1b:f6:88:82:0a:88:52:f6:72:a9:9b:
51:f9:a4:e9:40:07:29:67:43:a1:9f:0e:f1:42:d3:
41:a2:8e:a4:ce:a8:39:2d:38:f0:16:63:01:dd:4b:
42:e3:b1:66:f6:05:cb:37:d8:a4:4e:ea:1d:ff:72:
a5:f8:93:ad:61:d4:c0:48:a2:6c:a7:d1:23:fc:e6:
30:a8:b9:26:a5:40:e1:56:db:5a:cc:90:b5:d9:f3:
45:69:c5:21:90:80:ce:93:d1:32:6e:e0:47:7b:bd:
d1:77:ee:9b:98:b8:d3:4f:96:d4:92:b2:7f:70:3f:
f6:8b:77:67:fd:17:f6:3e:c2:79:66:29:9f:77:5a:
21:8b:09:37:5d:5a:72:91:61:bb:73:b3:e0:e1:04:
7a:51:dc:64:ce:ee:a9:42:5b:e8:29:a2:97:49:a4:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:ED:BD:A4:F0:4B:0F:2C:48:0A:83:99:39:E8:1A:A8:91:12:FC
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:df:74:2a:4a:d2:2c:0f:d5:7b:01:c3:bb:51:3d:a6:b8:2b:
70:5e:86:24:59:14:07:ca:da:4d:86:f7:8e:b3:8e:37:dd:81:
1f:53:3f:99:9d:c0:e6:28:ec:e3:ee:d4:43:e0:69:f2:4c:c6:
3f:60:f4:32:ec:aa:5e:f8:8c:80:33:a2:ce:c3:3b:49:18:fd:
40:ed:ca:3c:dc:b3:b5:b0:16:f4:24:e2:b6:85:5a:00:6f:9e:
83:14:1b:03:f3:c6:25:92:0f:24:a8:9b:65:35:1b:07:46:9b:
30:0e:cd:f2:8c:5b:7e:d3:fe:c7:f8:b0:9b:9b:d4:cd:f7:22:
ca:38:ba:f2:71:9d:a2:df:66:bf:8c:aa:b8:1b:6b:17:eb:f4:
e3:d3:7e:fe:ca:50:7c:65:41:07:4f:40:99:d3:91:93:1d:46:
81:76:01:71:1c:74:01:c6:ea:0b:33:c2:bd:45:be:48:81:b0:
1c:47:f1:f5:f0:25:1f:bc:b7:45:f3:30:6c:f0:82:36:92:00:
44:8f:fa:4b:8b:fe:19:69:69:72:0f:c2:83:cf:e9:0f:35:55:
32:02:03:95:0b:41:0d:db:31:d4:43:39:bf:e7:b7:91:3c:50:
57:56:b6:43:d6:5c:0f:14:ec:d8:76:3d:92:01:ca:2a:97:ec:
29:ba:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:22:14 2026 by rpki-client