
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json)
Hash identifier: NvqcHFKe4WdSVFHVAp4gW2mXj9OD4AQRF1aUWzJMkqs=
Subject key identifier: D6:72:CC:75:36:20:D8:33:9A:CF:7E:93:54:81:46:44:57:5A:C8:F2
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 02B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
Manifest number: 024F
Signing time: Sat 03 Oct 2026 04:18:50 +0000
Manifest this update: Sat 03 Oct 2026 04:18:50 +0000
Manifest next update: Sat 10 Oct 2026 04:18:50 +0000
Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: ET8iT1UvcU4WfLwHBWGDFZq9/3pEpXgZs+aKjZ2SlR0=)
2: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=)
3: 9ADAB6A4835411F18D13EB1962A30FBC.roa (hash: RcYGheWGYiRTsVY9x6EMArDSWaBIhGM9FHGfaEWR5rU=)
4: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=)
5: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=)
6: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=)
7: 450423809C5611F1BDCBB6734311F970.roa (hash: zdj9DDRUrEWIkqR0GDuFCwSRJwXNhwULOy3idgsHXrk=)
8: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=)
9: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=)
10: 2F5755A29C5611F183B20B674311F970.roa (hash: XoFt6d27uwyJT0/BvhZSIQHqgFAFCPy92uoA6tI+Zz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Oct 3 04:18:50 2026 GMT
Not After : Oct 10 04:18:50 2026 GMT
Subject: CN=6ac0822a-1b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:11:e3:91:2a:02:a1:9d:2d:f9:62:4c:8d:
ed:26:14:e6:69:5c:ab:46:25:2d:81:e6:ac:77:27:
5a:7e:91:b0:b6:f4:db:3e:b0:3c:b5:c3:10:96:7b:
95:71:0c:93:8b:d3:8d:65:fb:d2:52:72:ff:2f:08:
3c:c2:cb:06:60:83:f2:02:ad:85:02:fe:0b:b5:4a:
8d:7e:78:07:d5:6f:01:3f:11:bd:34:bb:2d:31:ba:
32:24:35:3a:15:16:f9:b6:89:c4:c8:e9:47:52:d0:
60:b7:52:5b:f5:91:a8:8c:81:73:e0:3b:20:7a:a3:
5a:d9:9b:54:c9:c4:52:bf:6c:f1:68:21:a6:5f:67:
48:b8:fb:f7:af:b1:70:59:7f:68:05:9c:7b:82:b8:
37:28:b2:4f:10:bb:c1:71:a7:15:20:55:24:7b:5b:
73:50:42:e8:ec:a6:6b:2d:11:a0:f7:fa:5f:0b:22:
b4:b4:c7:64:c7:3d:ae:68:f6:66:95:86:84:aa:c3:
16:c5:2d:d9:a6:27:c7:5e:f8:48:f2:8f:8a:ef:6f:
77:f7:91:99:45:a9:33:4f:79:ab:26:7b:b9:94:aa:
9d:5e:55:d5:79:fd:dc:69:63:fd:19:cc:95:47:6c:
c5:9d:bd:bf:76:2c:3d:ac:12:6e:37:f7:21:b5:93:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:CC:75:36:20:D8:33:9A:CF:7E:93:54:81:46:44:57:5A:C8:F2
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:2e:e1:d5:42:68:91:3e:dd:7a:0f:22:cf:0d:b6:f0:b2:c9:
4f:49:55:71:77:35:f3:4e:fb:59:68:d2:2e:15:65:83:95:47:
f4:54:17:66:2d:eb:e3:49:11:b2:94:2f:0f:d8:ed:dd:4b:5b:
53:dd:af:9d:67:f8:b0:56:a6:73:a9:15:98:83:96:0e:b8:5d:
30:db:88:ec:9f:d1:12:40:75:98:5e:76:25:70:52:03:b6:ae:
8f:e2:55:d0:d4:50:e3:7f:2c:dd:42:cc:3c:a6:21:32:49:53:
bb:d9:1c:c1:00:36:97:0f:77:3a:09:67:77:74:74:97:f0:6e:
1a:29:a7:41:ab:95:88:0e:73:6b:35:3e:a0:00:87:59:79:d1:
6a:e0:03:65:a9:7d:5a:67:9e:77:4e:e5:af:17:72:ad:b9:0e:
62:02:27:4c:9d:6d:68:c2:59:06:ca:1b:be:d1:37:1f:d9:f1:
a6:5a:8d:9f:12:39:6b:9c:82:db:d3:b4:a0:fa:e1:5e:37:f5:
80:8d:1f:4c:2e:32:de:9c:8e:7b:9a:af:d3:d5:1f:d5:06:92:
b1:c0:fc:a9:d4:24:d7:fe:de:0a:d2:22:cf:56:f6:02:d6:3e:
9d:df:37:df:00:25:60:69:ad:b2:2d:26:10:59:13:5c:27:ed:
09:ac:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:59:50 2026 by rpki-client