
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json)
Hash identifier: HoGsrLAOgPbAdznBPcurVrr7lTma84HU15AaWIgeKO4=
Subject key identifier: EE:91:8F:A0:44:51:06:84:75:59:80:65:9E:0D:A1:4F:38:D0:D3:16
Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
Manifest number: 0296
Signing time: Thu 21 May 2026 01:46:11 +0000
Manifest this update: Thu 21 May 2026 01:46:11 +0000
Manifest next update: Thu 28 May 2026 01:46:11 +0000
Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: 930b5jQ41oF1DTHAOmPYqGHcr/owACx0oL1Ye3QA/xM=)
2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: jlEGSFgrtpFxgrLft8aSqTV3lW+FCxpfsVhhvgy0Afc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl
rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFA83, serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Validity
Not Before: May 21 01:46:11 2026 GMT
Not After : May 28 01:46:11 2026 GMT
Subject: CN=6a0e63e3-1189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3e:13:bc:49:7f:7b:70:ad:3b:14:6f:aa:48:
9e:7d:fc:da:2f:8a:46:d0:21:6e:d1:4c:de:99:e4:
52:18:58:9d:3c:57:4d:ff:48:b5:15:b0:0a:fd:82:
9f:49:9e:01:fc:8e:27:7a:ac:45:29:38:30:8e:66:
8f:1c:fa:14:98:74:47:b4:67:a4:06:26:96:24:47:
92:56:50:a8:ac:b4:f6:67:15:04:16:e0:66:60:36:
10:44:06:30:4f:8a:31:50:c9:9e:6d:15:e1:41:71:
0b:9e:d7:4c:6f:e5:b2:89:f7:8a:38:f6:87:ff:a1:
e9:92:d2:8d:b6:a1:d8:d7:76:f6:e1:fb:f5:88:d1:
16:6c:1e:7c:5e:5b:0c:f2:c8:5b:2e:15:09:fd:28:
0c:ab:d2:d3:ea:eb:12:eb:c6:4a:14:2a:3b:1a:66:
68:7c:92:72:b0:cc:43:39:20:a9:19:e4:12:bf:85:
24:d3:31:4e:16:ae:95:96:18:29:85:0a:64:66:87:
a6:59:06:a4:c7:b5:9e:08:32:28:01:82:bd:7d:67:
05:71:b1:79:18:35:c0:83:d2:eb:9a:1a:59:e9:0f:
1c:51:22:0b:87:7d:c0:76:ae:cf:dd:58:12:c8:1b:
c7:0e:83:a5:f5:76:da:40:52:7c:61:b4:1e:29:d5:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:91:8F:A0:44:51:06:84:75:59:80:65:9E:0D:A1:4F:38:D0:D3:16
X509v3 Authority Key Identifier:
keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a1:fa:7c:10:f7:81:b3:ce:13:a6:21:1d:2a:dc:5c:04:f5:
0f:60:72:47:78:d6:db:31:2e:98:90:04:8b:e6:a6:aa:b4:14:
3c:6a:c4:22:43:b9:e3:eb:ae:65:3c:aa:5f:c7:53:dc:e8:f4:
c3:b0:46:da:39:89:ae:ed:4b:60:32:f8:6b:45:96:90:03:da:
29:71:88:06:c2:da:26:05:4c:46:b5:b8:83:95:a7:f9:32:cc:
c4:36:5f:56:d4:21:a8:7c:39:7a:9d:6c:3b:8e:db:e8:15:91:
41:34:9e:19:38:67:e7:c4:4b:a3:11:0c:c2:59:ac:e3:11:8c:
ca:de:53:56:f1:9c:e1:c4:17:3e:71:11:b4:c5:27:cd:38:2a:
d2:5d:02:25:1f:68:97:c4:41:fc:41:73:1d:59:8a:12:b6:80:
0b:b0:2f:69:f4:cd:8a:2d:47:28:0c:30:a5:89:3c:e4:5f:e9:
d4:bd:e4:99:af:ea:4b:aa:45:d7:a6:27:4d:d6:32:61:c7:69:
65:3a:41:91:17:fd:94:fe:72:5b:f0:3f:56:61:ac:c3:c3:39:
d8:43:08:72:fb:57:70:ed:39:9e:f6:b1:fc:74:3b:3b:c2:e6:
de:40:37:f4:ed:5e:7c:d5:b6:51:61:7e:94:0f:06:2e:2d:bf:
43:4b:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:53 2026 by rpki-client