
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json)
Hash identifier: jjzB0RnmPXqnVrxvYTmSJqr30c/2z8anASAvAUDNujE=
Subject key identifier: 6B:A2:48:0A:D1:95:AA:97:C2:1E:49:7E:77:33:82:DA:38:B5:2B:29
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
Manifest number: 0203
Signing time: Thu 21 May 2026 04:26:49 +0000
Manifest this update: Thu 21 May 2026 04:26:48 +0000
Manifest next update: Thu 28 May 2026 04:26:48 +0000
Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: DB9g0nF3yOL25gml1eCVSAxs129OC9uYgTuQpaBOuAk=)
2: A562D2B20C4111F1A1A27D5E0E3D8C67.roa (hash: QLkjHyRkvA9YbmHmikqdDsD4DAHlBTN2EdsuEF0kfO0=)
3: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=)
4: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=)
5: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=)
6: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=)
7: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=)
8: 186CFB6440DD11F1A8025F1AA6833773.roa (hash: ExyVp+3BEiYoIGyxcmeHrI1eINQHaGYAun96Y5CYXGk=)
9: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: May 21 04:26:48 2026 GMT
Not After : May 28 04:26:48 2026 GMT
Subject: CN=6a0e8989-f334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:8c:4b:49:1a:7c:49:2f:bd:c7:50:c9:00:
05:25:af:c9:8b:b7:91:cb:ed:22:19:e1:38:b9:b2:
95:ea:b7:90:3b:4e:76:05:31:30:f1:ef:18:1a:f9:
5e:ed:f6:f3:76:55:ad:9f:c6:62:26:21:20:2d:fb:
38:6a:d7:7c:3a:3d:a1:15:07:4c:08:40:0f:05:71:
ff:5d:c9:99:56:f2:ba:5b:cd:6c:96:23:93:85:ff:
d6:83:01:31:ee:1d:b7:22:6b:58:12:26:fc:a4:76:
11:7c:66:f4:69:54:fc:de:c5:c4:be:a1:5a:62:3a:
5c:83:02:45:c3:d5:8c:5b:5c:24:91:fd:45:1a:cd:
70:1c:b4:14:de:02:9d:2b:73:e2:3a:17:55:ce:a8:
d8:71:86:c7:9d:98:85:08:b7:44:f8:5e:7e:4f:b8:
19:25:2c:ee:f7:6b:24:2f:bd:24:72:5f:f3:b4:33:
7b:84:e6:d9:13:d6:ec:3c:c8:90:a1:d9:14:ba:8a:
8f:4f:51:71:f1:85:37:b5:f8:7f:30:22:85:ce:1c:
f6:f2:05:ec:30:85:79:9a:de:f4:33:df:1a:f6:28:
c5:60:c1:d0:7f:d3:25:6a:ef:24:5c:ef:08:ab:f9:
18:9e:9c:4c:c0:c9:38:ee:c9:d0:ef:89:b2:22:8e:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A2:48:0A:D1:95:AA:97:C2:1E:49:7E:77:33:82:DA:38:B5:2B:29
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:99:e0:90:3b:d4:87:15:11:47:0e:5c:68:5d:75:23:3f:40:
24:d2:33:17:af:82:31:97:fb:28:9f:5d:8d:57:e6:ae:c2:97:
d8:38:a8:a9:12:18:2a:b8:b7:51:44:16:b2:2e:23:9a:aa:92:
a6:23:29:e8:44:22:5c:35:ed:ad:dd:42:00:58:07:73:71:bf:
55:80:e2:66:1f:ca:e5:4c:5e:e8:d0:b2:e3:23:7c:42:c5:73:
79:12:0a:f7:d4:32:ae:fd:39:5a:ec:0a:7c:ad:39:f9:d8:20:
a5:d3:9b:f3:f6:30:ec:c0:c9:5b:6e:76:2f:b1:c2:e8:21:91:
7c:6e:e1:67:ce:5e:5f:70:28:64:01:c8:e4:c8:80:fe:e3:6e:
7a:0b:6b:09:96:88:c6:68:bb:fc:b2:12:eb:df:27:74:42:e2:
98:9f:f1:e3:ab:15:a0:65:47:47:e1:13:42:69:27:73:e6:88:
74:01:af:32:81:4f:b1:cc:22:7b:40:45:1e:41:16:06:fe:f7:
13:19:ca:60:ef:c3:0d:b5:2e:01:40:b0:5c:8a:d0:5b:75:d0:
58:f8:e9:04:9b:9b:be:d6:4b:c8:ca:c0:9e:79:54:4b:d8:a0:
8c:7f:13:4c:9f:db:df:44:74:c0:9d:fe:b1:fe:91:b4:42:6c:
20:4a:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:16 2026 by rpki-client