
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json)
Hash identifier: gSS7C4Di2OhNsvuzYM6RMiq8mgURMhweEFLDyJvWazI=
Subject key identifier: CA:1C:53:EB:07:F6:46:AE:C6:29:9E:41:E6:47:FC:7C:24:A4:0B:94
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 027B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
Manifest number: 021B
Signing time: Sun 05 Jul 2026 04:45:25 +0000
Manifest this update: Sun 05 Jul 2026 04:45:24 +0000
Manifest next update: Sun 12 Jul 2026 04:45:24 +0000
Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: lHLiVWGsFN4pzhSbxkqTnq8+CRI46X2H+TonQ7ZeZGY=)
2: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=)
3: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=)
4: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=)
5: 4A11C6A0708911F19202AEDA7EA30FBC.roa (hash: Bsg6ZvDadIFWXxbGqZK4Dd20UQl//iWHQB+DWOxtJVE=)
6: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=)
7: A562D2B20C4111F1A1A27D5E0E3D8C67.roa (hash: QLkjHyRkvA9YbmHmikqdDsD4DAHlBTN2EdsuEF0kfO0=)
8: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=)
9: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 04:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Jul 5 04:45:24 2026 GMT
Not After : Jul 12 04:45:24 2026 GMT
Subject: CN=6a49e165-557c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:2c:52:4c:84:b4:b6:3a:1d:9b:9f:1a:02:
be:36:9c:36:64:b8:eb:ab:c0:47:0e:15:74:0c:bd:
19:db:75:8f:f2:44:27:be:ca:a2:af:d7:30:81:a7:
8a:9a:f0:a0:82:2c:52:7e:71:73:70:08:97:b5:3f:
88:4f:51:9b:a9:ef:e2:13:99:c7:f7:4a:3b:49:d2:
4a:b7:fa:3f:80:be:01:93:52:76:94:11:8b:e4:49:
40:da:77:33:3b:eb:ec:0c:58:f2:c1:87:8e:3b:aa:
d0:c6:69:c0:5c:96:e7:01:55:b3:55:2a:c1:be:75:
42:ea:ef:fb:df:75:a1:e2:00:04:2d:f9:ca:f7:f4:
3a:c6:8a:e3:4d:02:de:25:03:e2:1d:a2:d5:dc:be:
e3:f5:29:a9:03:5d:fc:5a:5f:9b:71:1b:33:8f:17:
d0:8d:de:1b:2d:d4:c9:c0:64:25:08:f8:8d:0e:94:
89:38:9c:0b:25:d9:fb:25:fd:66:00:81:5c:00:09:
61:f7:de:83:60:2c:44:36:7c:bd:42:df:07:f1:b1:
02:ec:cf:be:00:2a:4a:4b:2e:52:d2:2b:28:94:71:
68:9d:c6:c2:7e:97:2f:81:8c:0a:77:09:32:df:d0:
14:10:b3:8b:e7:4f:c8:f5:ed:80:ed:5b:b0:e4:73:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1C:53:EB:07:F6:46:AE:C6:29:9E:41:E6:47:FC:7C:24:A4:0B:94
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:f8:b2:fa:eb:8d:e4:ea:bf:4f:36:3a:a4:f9:11:2b:09:
96:b0:c7:cd:73:b5:07:7c:b1:a7:bb:7b:b8:19:15:15:2c:8b:
aa:2f:45:e8:e7:a3:b7:12:3a:42:04:06:d2:90:d7:b3:ba:bf:
52:18:6b:8c:7b:9f:f5:6c:1d:95:23:8d:2a:ab:a9:1e:68:39:
4d:0a:91:f7:8c:39:1c:36:54:a1:fa:5b:40:3a:1e:61:c2:c8:
3e:63:90:e7:ed:2f:84:62:51:f5:cb:08:dc:9d:d3:0d:1a:25:
2a:08:5a:3c:2b:14:98:1c:89:29:40:a2:12:29:2f:87:9d:2d:
73:5d:76:37:fd:61:4c:12:44:50:49:40:17:c7:0e:d1:0d:14:
e7:15:9e:70:69:ca:32:8f:5a:82:e5:61:ed:76:da:b1:f2:dd:
62:5d:13:20:56:e4:b4:14:72:15:9f:e9:27:65:b8:cb:1a:22:
2e:7e:91:2f:72:6f:82:31:56:38:9b:fb:ae:4c:bc:e1:7a:41:
fd:83:cd:d7:2f:fa:d3:7c:38:41:6b:0a:6d:2d:29:05:35:1f:
33:8c:92:31:93:5f:aa:48:03:bb:39:d5:0f:fc:82:60:d4:ff:
3e:80:3f:7d:a8:5e:75:ea:14:23:ef:d7:d8:4d:0b:c5:91:b3:
80:3b:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:34:13 2026 by rpki-client