
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
File: TrnMSjh3s_-dQLwbs-YMkK36zVM.mft (raw, json)
Hash identifier: YyeJLdvTHYqt5Bbd3KTUYsut9OO9pi2qLJvCjWucVMo=
Subject key identifier: 02:38:DC:55:09:2A:BD:09:2F:B0:F9:07:F4:CF:A2:CC:F7:AF:5A:1F
Authority key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
Certificate issuer: /CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Certificate serial: 0B58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
Manifest number: 0B4E
Signing time: Tue 12 May 2026 19:17:01 +0000
Manifest this update: Tue 12 May 2026 19:17:00 +0000
Manifest next update: Tue 19 May 2026 19:17:00 +0000
Files and hashes: 1: TrnMSjh3s_-dQLwbs-YMkK36zVM.crl (hash: wz46F5v6CsvopyDfDOF7ewtXBAl5ixVcF0vycT8slb4=)
2: 1979A7C0586111EA9FC98555C4F9AE02.roa (hash: DHpveC2DBL4gVq9gAp9i6p0IPtXQ+xG1GbXA8h9vNTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2904 (0xb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F104D, serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Validity
Not Before: May 12 19:17:00 2026 GMT
Not After : May 19 19:17:00 2026 GMT
Subject: CN=6a037cad-cccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:b6:28:2b:ed:7e:5c:8f:2f:be:03:fe:7d:
57:77:a4:87:5d:29:bc:53:40:62:b2:ff:41:51:77:
d3:63:3c:1a:ec:bb:7d:2e:0f:62:98:8e:46:6f:81:
74:cd:a2:fb:e7:92:dc:3c:75:25:f0:dd:72:59:b4:
ad:2a:ff:35:ad:7a:0b:27:15:a7:ef:a9:6d:03:ed:
65:7b:3f:b6:42:16:df:ad:08:e9:2d:ac:97:50:c7:
34:16:9c:da:38:79:94:fd:e5:c1:e4:0c:fa:f8:9d:
f1:f0:c1:ef:52:96:2e:56:66:4e:31:50:81:24:fc:
ef:52:f0:a0:c7:ad:7d:5a:f8:ea:18:c3:2c:dc:c3:
08:90:20:68:a8:49:64:a3:ad:3a:fd:e6:56:0b:68:
35:60:1a:99:93:4c:4d:01:fe:8a:b0:5c:8a:83:b4:
b4:0a:ef:f5:8b:0b:57:7c:36:9a:a3:44:99:84:71:
9c:02:b0:60:36:df:18:69:71:b3:c5:bd:8e:95:02:
12:a5:c4:89:8b:0d:bc:72:9d:4e:f5:f0:b6:eb:0f:
0e:9e:b1:39:74:2c:c9:d3:53:c9:8c:60:46:c5:4b:
21:aa:2c:11:4a:51:7d:ca:92:05:91:48:8a:52:f3:
cf:9f:9f:bc:a6:9a:e2:45:17:db:04:c9:1f:f9:94:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:DC:55:09:2A:BD:09:2F:B0:F9:07:F4:CF:A2:CC:F7:AF:5A:1F
X509v3 Authority Key Identifier:
keyid:4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a0:5e:d2:aa:4f:e4:5b:e6:e7:fa:31:3f:e5:7c:83:35:e8:
ed:bc:95:b6:38:34:62:51:f5:db:94:b3:69:21:d1:c9:ed:6b:
31:46:17:4e:b9:fb:a3:51:fd:c3:43:6a:6a:56:e3:d4:b9:60:
d2:45:bf:c7:a4:0d:f6:73:bf:0d:67:5b:45:99:1a:57:69:5a:
7a:8e:42:1b:78:db:22:16:eb:ba:61:81:07:03:c5:9c:87:21:
f8:4a:3f:71:95:18:fd:e5:1d:e9:42:36:42:59:4c:9d:b1:5d:
66:ae:42:e5:58:85:51:1b:79:4a:bb:32:a8:63:c1:24:64:44:
e6:6c:14:45:23:a3:c2:43:44:9b:c5:72:f5:06:ab:aa:a6:37:
e2:73:c2:34:30:15:bc:80:89:0b:08:51:34:eb:ad:87:65:90:
6e:b4:29:69:4a:23:50:9e:f1:d1:53:54:6e:c7:96:81:8f:ef:
ce:d7:09:06:8a:eb:bc:e2:3a:ce:87:27:b6:6d:4d:f5:4e:be:
75:7f:8f:f3:fd:fe:cf:5a:2c:7b:c2:1e:08:c4:55:6a:ee:4d:
e8:36:a4:a8:a2:cc:19:69:92:35:1b:b7:89:5e:00:c6:e3:65:
d0:06:7c:6a:36:d4:cc:43:bf:b2:9d:1d:15:95:7d:86:3e:49:
39:cc:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:36 2026 by rpki-client