
$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
File: tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json)
Hash identifier: ci/dlZXOP58SpiL/J5It+uGyH8sFKEbb0RdyaWFx2pw=
Subject key identifier: DB:42:11:38:03:54:3F:3B:ED:81:DC:C2:D1:A8:19:34:78:89:F7:47
Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E
Certificate issuer: /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
Manifest number: D3
Signing time: Fri 27 Mar 2026 06:16:21 +0000
Manifest this update: Fri 27 Mar 2026 06:16:21 +0000
Manifest next update: Fri 03 Apr 2026 06:16:21 +0000
Files and hashes: 1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: VZgKyrvXKJB/PaKe8RHDmMOG47/OEckdsV6HteeijJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl
rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E
Validity
Not Before: Mar 27 06:16:21 2026 GMT
Not After : Apr 3 06:16:21 2026 GMT
Subject: CN=69c620b5-2b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:47:d3:a5:fd:1e:52:01:2d:5f:23:6a:8c:
a1:13:b6:54:cf:a8:60:9d:ff:a6:a0:40:e3:8d:0e:
f7:d7:2c:76:c0:46:f6:48:cf:5f:48:08:6f:e5:c4:
a0:16:7a:41:03:8e:0a:35:27:c2:75:3a:e2:8a:73:
b2:e3:8a:bc:10:43:d4:a2:8e:bd:8a:4f:4b:1c:7c:
5c:ed:53:32:a1:f7:94:e4:52:b1:c5:f2:94:ac:b5:
4f:09:e6:ea:bf:c4:b0:82:22:fc:ac:19:2b:37:e2:
75:a7:09:bd:55:cb:30:40:c3:4f:94:1d:45:eb:23:
89:60:92:45:8c:89:9f:04:dc:e3:15:f8:cc:9e:7f:
99:2e:1b:39:6a:8a:7c:77:9e:64:84:3b:b3:4a:4d:
75:36:5e:a3:dc:7f:fe:ec:77:c7:94:3e:38:28:69:
80:76:8e:25:ff:83:00:8a:81:b5:d1:7e:5f:cb:5d:
d1:2d:8e:86:6b:9b:a3:73:4f:45:5b:30:28:d0:1a:
b3:97:78:91:42:86:e1:a3:d2:0d:1d:50:1e:ec:87:
a8:8d:e6:dc:58:e1:b1:0e:d4:b1:9b:da:94:70:97:
87:a7:57:d0:06:c4:5d:f3:b2:48:40:a9:52:0d:30:
5a:87:20:f4:44:56:66:37:e2:7b:44:78:b9:5a:d3:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:11:38:03:54:3F:3B:ED:81:DC:C2:D1:A8:19:34:78:89:F7:47
X509v3 Authority Key Identifier:
keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:db:7d:51:d6:65:5d:d4:db:69:82:f8:5c:ff:14:62:f8:8f:
ae:5e:d3:1a:55:4d:8e:59:d7:59:27:96:7b:84:1e:25:f4:23:
16:6d:35:68:93:3c:cb:3d:5c:4c:1b:da:41:8f:65:06:04:80:
2d:eb:35:ee:db:65:5c:98:60:bb:52:ef:96:72:e9:4f:0d:fb:
7c:ef:54:f3:d8:e4:89:c7:ab:24:45:38:e8:d0:de:08:8c:00:
b8:88:b3:8b:bf:33:91:31:da:a1:7e:93:9d:44:51:b8:93:cf:
5b:1d:ac:40:88:71:b4:a7:c9:2a:4c:57:a9:c8:f9:8f:63:ed:
e6:7f:1d:f0:9b:c8:97:85:c9:be:d6:1d:77:75:0d:5f:c9:70:
90:ab:19:ed:68:74:a2:f3:26:89:64:7e:02:de:8a:28:f4:c8:
07:63:fb:5f:d7:15:54:f5:10:9e:b9:4b:ff:6a:96:e5:91:88:
52:7b:31:a7:42:cc:92:42:a0:c1:97:b9:13:bb:50:06:1e:cf:
73:7b:4e:40:07:eb:65:b6:14:9d:68:18:9f:3b:47:77:93:ca:
33:ec:5e:9e:1a:4e:44:f7:46:2d:a4:a1:c3:e7:21:8c:d9:a2:
30:e5:20:67:f9:9f:2d:13:49:4c:31:92:e8:ec:f4:4b:a2:8f:
d2:bb:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:22 2026 by rpki-client