
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
File: TrnMSjh3s_-dQLwbs-YMkK36zVM.mft (raw, json)
Hash identifier: MUayUVg4/GVeAjaiX9KUk9w5kF0PQdFfRtiHf2c1kLk=
Subject key identifier: F3:E3:11:85:41:C7:C5:8E:7C:E0:BA:8F:73:8C:D0:BE:F8:69:D2:AF
Authority key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
Certificate issuer: /CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Certificate serial: 0B5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
Manifest number: 0B52
Signing time: Wed 20 May 2026 19:14:30 +0000
Manifest this update: Wed 20 May 2026 19:14:29 +0000
Manifest next update: Wed 27 May 2026 19:14:29 +0000
Files and hashes: 1: TrnMSjh3s_-dQLwbs-YMkK36zVM.crl (hash: 7snTEog/bBXz2PjoNM7fdBrLqWtcOrywIA0I9QWLFSo=)
2: 1979A7C0586111EA9FC98555C4F9AE02.roa (hash: DHpveC2DBL4gVq9gAp9i6p0IPtXQ+xG1GbXA8h9vNTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F104D, serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Validity
Not Before: May 20 19:14:29 2026 GMT
Not After : May 27 19:14:29 2026 GMT
Subject: CN=6a0e0816-1317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:c5:67:66:37:3d:61:f8:82:0c:8a:d1:d8:
ee:87:42:ba:c3:94:27:ba:c1:d2:41:21:09:19:46:
63:7f:4d:25:b3:b7:a6:6d:8f:d1:22:22:3c:ac:99:
67:97:97:21:c0:90:c2:5e:cf:05:83:2a:12:74:f8:
91:ea:4a:90:96:45:fe:75:44:f8:e3:2d:d4:41:f5:
1e:4f:92:27:43:48:87:64:a2:57:55:56:58:fa:9a:
1b:1b:d2:42:12:63:e7:eb:4b:bf:95:13:2b:a0:c6:
f0:77:45:c3:fc:c5:b7:2c:3c:9d:b5:57:8d:10:91:
c0:58:ad:b0:9e:9a:92:62:47:e7:9e:83:23:cb:8d:
24:01:1a:1d:2a:ba:07:ab:7c:93:4e:2c:55:97:90:
e3:1f:8d:ab:79:a2:c1:e0:2c:ac:99:ae:2d:a0:1a:
0a:be:3b:c4:99:e7:1d:b0:02:fb:ed:ad:68:bf:ec:
6c:6c:4a:ca:98:01:ec:c3:d3:4f:3e:e1:7a:11:8c:
71:be:f3:65:7a:47:4c:e3:6c:8b:c8:37:36:d5:cb:
6a:db:94:d4:72:44:d3:bc:52:7c:96:2b:4e:df:cb:
69:62:53:c0:6b:2b:8d:ea:16:9f:19:48:55:29:18:
dd:af:5f:10:79:d4:fb:94:91:4c:6a:49:5d:3c:d0:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:11:85:41:C7:C5:8E:7C:E0:BA:8F:73:8C:D0:BE:F8:69:D2:AF
X509v3 Authority Key Identifier:
keyid:4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:e0:f3:48:50:4e:d1:55:08:00:d3:ed:df:62:98:6a:18:5f:
8a:15:1c:7c:cb:b3:52:c3:95:ec:58:9c:73:74:dd:3c:b4:99:
41:74:2a:ca:84:c9:aa:87:08:be:28:7d:b4:4d:d2:c2:47:95:
d9:e6:b3:19:cb:a6:a6:f4:68:84:dc:e7:e0:99:bb:77:08:ae:
93:1f:a3:bf:2b:2c:c3:e4:24:10:92:4a:12:60:61:f4:b0:6a:
00:ae:e6:f9:fc:d7:e9:36:9c:2e:86:fc:a0:4e:da:ae:1d:18:
13:23:76:a3:3e:75:d4:c6:f1:fa:43:a5:d2:71:c2:56:08:2c:
c3:f6:f3:93:0d:10:11:4a:3e:f2:f9:af:21:c4:00:d8:e7:b9:
46:61:b5:8e:9d:ea:b1:71:99:cb:e2:6a:08:40:d9:08:f4:df:
09:79:ad:f0:2a:b2:d7:62:72:57:eb:9c:fe:7e:79:7f:c2:9b:
0e:52:fc:c0:d2:14:64:80:d3:d8:69:ce:a1:af:d4:33:2c:fd:
79:27:49:0b:63:e6:c0:cb:ce:f6:e4:9b:b3:86:69:14:fb:5e:
4a:9f:05:91:e2:ce:1b:c5:a9:ec:13:6f:c6:d6:27:3e:79:fe:
5a:e7:92:3f:63:19:9a:5f:fe:3e:ab:5c:3d:5e:0d:a8:9e:80:
ec:77:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:45 2026 by rpki-client