
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
File: TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft (raw, json)
Hash identifier: RPtbCag9q4pXRdTB0AgwMr/uCxHbLT/rjqLnw1I6JIk=
Subject key identifier: 28:4B:28:7D:DA:C5:FC:C2:51:99:10:98:FC:35:72:69:38:C9:28:8E
Authority key identifier: 4D:19:95:A9:E6:79:37:67:2F:2C:4F:27:86:0F:52:B7:D6:26:D4:0F
Certificate issuer: /CN=A91F110A/serialNumber=4D1995A9E67937672F2C4F27860F52B7D626D40F
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
Manifest number: 14
Signing time: Tue 21 Jul 2026 11:00:03 +0000
Manifest this update: Tue 21 Jul 2026 11:00:03 +0000
Manifest next update: Tue 28 Jul 2026 11:00:03 +0000
Files and hashes: 1: TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl (hash: YzfRkIjEtcMSEWgSiJyXmi4SAn/rFrdtm0vmNH+SDL8=)
2: 9175DEAA7C1411F18096A0D294A30FBC.roa (hash: cp+vN6cTIS/69N+GxuJvTs1MveCOnCGKIrNsu4gNmRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl
rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F110A, serialNumber=4D1995A9E67937672F2C4F27860F52B7D626D40F
Validity
Not Before: Jul 21 11:00:03 2026 GMT
Not After : Jul 28 11:00:03 2026 GMT
Subject: CN=6a5f5133-ea78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:f5:09:0c:94:03:52:26:f2:7d:0c:90:6b:
67:06:68:8b:21:48:56:06:cf:c4:b4:d3:b3:2a:89:
61:6c:ad:13:e4:1d:8e:6d:c5:4a:4e:4c:67:5b:be:
bd:ee:eb:54:e3:b4:84:32:f0:ad:66:2b:5e:58:fb:
bd:82:67:56:d6:5f:44:09:18:a9:bc:df:0b:01:8f:
b7:6c:98:91:38:8b:7c:9d:75:03:36:74:36:d7:38:
7a:59:44:09:24:8a:c3:a1:f0:33:e5:4d:c7:29:c2:
1f:49:a6:8a:7f:94:dc:11:ac:7a:dd:98:07:93:00:
07:80:0f:a6:6c:bf:e1:ea:f9:35:28:2f:d4:70:2e:
ba:f7:0a:78:72:38:12:68:e8:8c:71:64:c6:f8:d7:
4a:72:8b:f8:0b:d5:10:91:90:24:68:f3:c7:08:89:
44:8b:b1:6c:9c:94:08:9c:3e:d6:46:fe:66:62:9e:
11:2b:07:a1:68:13:71:c8:99:88:b1:b8:9c:25:00:
21:b8:18:8a:71:19:fc:77:e6:82:96:b4:57:47:14:
cd:e1:5e:5a:0a:46:9c:f3:0c:6c:7a:96:08:e7:59:
47:65:31:40:e4:02:dd:de:31:38:c1:8a:07:f0:c6:
f7:c3:ba:73:4d:91:2c:63:2f:c5:71:15:3a:7a:40:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4B:28:7D:DA:C5:FC:C2:51:99:10:98:FC:35:72:69:38:C9:28:8E
X509v3 Authority Key Identifier:
keyid:4D:19:95:A9:E6:79:37:67:2F:2C:4F:27:86:0F:52:B7:D6:26:D4:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:89:33:81:c5:28:88:5f:ea:b8:f9:bd:9a:6d:1f:6f:d1:07:
32:96:fc:70:34:b9:a0:10:65:db:37:dc:8b:a1:be:ac:6c:a7:
36:8c:8a:56:b4:bf:12:05:6e:32:90:3c:1e:62:02:e3:07:55:
77:43:e3:02:47:72:0b:61:db:52:d8:ff:29:9d:47:d8:46:6e:
69:f5:19:94:4f:1d:d9:5b:79:d0:0d:ce:35:84:39:17:32:eb:
4b:75:a2:3c:8b:9a:51:8f:4c:88:b3:58:89:e7:ff:aa:a1:44:
bb:92:14:8d:35:1e:48:b9:51:f2:5a:ca:54:6e:0e:cd:05:24:
34:01:bb:4f:71:32:89:01:64:e0:94:25:f6:27:71:30:4a:9b:
98:bc:45:cb:67:c5:43:fc:5e:10:27:0b:5c:b2:5b:ce:a0:fb:
ec:03:1e:44:b9:52:ad:be:9b:5d:fd:4f:e3:4d:a7:36:54:78:
1b:79:9d:a2:b8:5a:4f:e7:33:bb:48:07:56:0d:1c:fb:0e:3f:
cc:74:8b:4c:bf:94:f4:2c:c2:72:68:a6:91:be:56:2b:1b:9e:
4e:8f:b5:79:f6:7b:eb:5a:23:d2:7f:19:97:52:5f:d3:50:f1:
78:27:1e:d4:08:b1:97:11:08:29:08:c5:47:51:72:3d:1b:f7:
96:83:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:19:00 2026 by rpki-client