
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
File: TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft (raw, json)
Hash identifier: brNEJUBcTYXXahBenPpVUusBRahNln8pKpMQe//g3ok=
Subject key identifier: 65:67:53:D9:62:35:B8:E3:7E:6B:07:94:4C:27:43:44:06:22:B5:6B
Authority key identifier: 4D:19:95:A9:E6:79:37:67:2F:2C:4F:27:86:0F:52:B7:D6:26:D4:0F
Certificate issuer: /CN=A91F110A/serialNumber=4D1995A9E67937672F2C4F27860F52B7D626D40F
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
Manifest number: 15
Signing time: Thu 23 Jul 2026 11:11:07 +0000
Manifest this update: Thu 23 Jul 2026 11:11:06 +0000
Manifest next update: Thu 30 Jul 2026 11:11:06 +0000
Files and hashes: 1: TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl (hash: kJJozRiQIJjDDQnY8Ya+cYyLoWILGfojtZRwSkrmC04=)
2: 9175DEAA7C1411F18096A0D294A30FBC.roa (hash: cp+vN6cTIS/69N+GxuJvTs1MveCOnCGKIrNsu4gNmRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl
rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F110A, serialNumber=4D1995A9E67937672F2C4F27860F52B7D626D40F
Validity
Not Before: Jul 23 11:11:06 2026 GMT
Not After : Jul 30 11:11:06 2026 GMT
Subject: CN=6a61f6ca-e00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:f5:72:99:bf:40:b8:5a:27:27:0d:6b:ce:
e9:b8:24:7f:59:0a:81:90:74:cf:02:df:1e:c2:bc:
57:13:b6:bd:a3:94:2d:99:9c:c3:cc:27:e2:17:0e:
8f:41:8b:ab:9e:42:e6:75:bf:9d:fc:f2:04:46:3f:
8a:d5:da:21:42:c3:89:da:04:94:a0:55:a0:4c:93:
e9:18:a4:2c:50:d3:39:61:b1:c2:b4:ef:0f:83:bd:
b0:44:ba:b1:1d:00:ee:75:95:a4:17:09:60:9b:9e:
99:d8:1a:2a:a0:e9:0d:70:2c:e0:6c:aa:d5:22:fa:
14:83:29:3b:6a:3d:da:8d:64:c3:a2:8f:8d:66:01:
1b:e7:e2:b4:29:53:7c:3c:21:dc:80:a7:5e:9e:81:
6e:65:e8:f8:50:f3:db:82:a4:05:3b:8c:ee:93:c2:
9c:23:f2:72:a6:c4:cb:aa:78:db:08:cf:ad:09:33:
f9:d3:6e:f9:c3:8b:c4:e2:8e:e8:8e:3f:37:2b:fc:
23:da:5f:2b:af:15:f1:1d:71:10:6e:8b:bf:db:45:
7f:89:3a:d5:d5:ae:60:35:54:12:d0:e6:70:b4:44:
85:fa:1c:0a:5f:dc:8a:5e:11:df:74:08:f5:7a:8d:
d7:f2:19:5e:1d:17:2b:10:4a:7f:a3:19:07:3f:c8:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:53:D9:62:35:B8:E3:7E:6B:07:94:4C:27:43:44:06:22:B5:6B
X509v3 Authority Key Identifier:
keyid:4D:19:95:A9:E6:79:37:67:2F:2C:4F:27:86:0F:52:B7:D6:26:D4:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:8d:0c:32:8d:9d:71:c7:41:11:3e:1e:a9:f5:2a:a1:8f:4d:
c9:b4:f7:3f:a0:c4:c5:34:be:94:5e:ff:a9:17:f4:fb:ed:c6:
30:f3:43:12:53:17:21:78:60:41:bb:47:da:64:ce:ef:0f:41:
7e:e8:aa:2c:06:db:95:51:12:88:9c:c0:8d:3e:7c:f0:20:34:
c2:4f:3e:d7:df:9b:32:2d:5d:bd:a5:a8:2d:42:9e:60:56:ea:
c0:3c:f5:4a:b6:85:c3:c2:44:5d:ea:ee:b2:7a:f4:7a:ef:b3:
88:2c:90:1f:2d:7e:30:ba:32:a0:3d:c3:3f:9d:fb:2c:eb:dd:
30:48:e7:83:0d:12:5a:55:7d:bb:73:db:1d:86:aa:8c:3a:50:
b3:47:cc:ff:e4:c5:d9:63:6b:fb:67:da:a3:cc:e5:fd:6a:41:
8c:8a:cd:2f:ac:dd:68:98:5f:4e:e0:2d:01:d7:21:63:50:e1:
eb:5a:16:f7:f3:87:69:b3:43:b0:c4:db:38:e0:03:a5:3f:f0:
a0:e9:62:30:71:e0:6f:24:25:34:f3:61:c8:c5:f9:d1:e3:19:
af:5d:43:8c:28:40:50:06:40:fc:9e:10:91:b8:b0:d6:ce:12:
d7:fd:3c:fe:e9:33:f7:44:84:9f:17:f3:f3:2c:97:d3:fd:5d:
ed:f5:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:23 2026 by rpki-client