
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier: LcWSJm6CYkHPXDJG3k8kBCv/brPCkjlNwsUQVspGQXE=
Subject key identifier: 72:27:7A:C1:0A:96:5C:C9:02:47:9F:AE:44:F3:A0:57:81:B3:09:70
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial: 039E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number: 0A84
Signing time: Thu 10 Sep 2026 22:05:42 +0000
Manifest this update: Thu 10 Sep 2026 22:05:42 +0000
Manifest next update: Thu 17 Sep 2026 22:05:42 +0000
Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: jbj1X83c+aa/VmqZm45jrJU4MK7uYrRwFWg/zVPdsjk=)
2: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: mD0truY139TasISWyGrYu2Hz7EW2kY2oOZUl6qnCEFQ=)
3: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: xGANVjy2VvXNk071/ARO9hOsZlt0dX8oI6u/EpvRYNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Validity
Not Before: Sep 10 22:05:42 2026 GMT
Not After : Sep 17 22:05:42 2026 GMT
Subject: CN=6aa329b6-8de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:ac:19:36:5b:98:ef:9f:db:29:53:30:1f:
78:01:06:fb:f4:df:86:e5:0c:c6:1b:28:d2:8d:5a:
e4:75:d9:29:eb:c9:36:a5:80:58:e9:85:ac:05:72:
ed:b4:e9:20:3c:6a:a1:ab:15:60:4a:cf:b7:93:6e:
b1:6c:02:41:2b:7b:12:1b:13:01:bd:f3:3f:d3:64:
30:9d:08:7b:5a:2e:7e:19:1a:c0:2e:60:7b:fe:ae:
7a:ac:c9:5c:0e:1f:d3:08:ff:66:b9:42:81:5c:ee:
4c:f7:a8:07:e1:cc:2a:fd:e9:8f:c4:2d:cf:9e:be:
1e:f7:27:67:2f:f1:f4:5f:e7:c3:a0:64:dc:ab:6b:
03:c3:de:ef:85:76:db:8b:a0:6a:c5:d0:e0:2c:02:
a4:61:8a:9b:11:86:0f:c2:8a:22:ad:e9:c7:37:7f:
54:9a:9b:42:dc:35:29:5b:ef:4f:7e:32:ba:99:9d:
76:d8:8a:7e:f2:cd:d4:8b:d6:6b:67:9f:84:e4:25:
55:f0:db:6d:ea:7b:73:24:97:05:6b:38:10:3e:3c:
92:7b:32:49:cf:58:21:76:b8:bb:2f:4d:b2:12:c5:
45:be:b8:c4:5c:3c:ad:be:e3:2c:3d:cb:0a:3f:c5:
88:66:f9:31:83:fe:c0:2e:09:65:8c:7e:ba:c9:d8:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:7A:C1:0A:96:5C:C9:02:47:9F:AE:44:F3:A0:57:81:B3:09:70
X509v3 Authority Key Identifier:
keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:76:14:02:9b:b8:50:cf:db:e5:3b:d6:1d:3a:d8:c1:36:
f2:50:e4:16:48:34:1e:6b:7e:54:87:e5:a0:f4:12:85:ab:e3:
0b:48:50:62:7d:d5:97:29:e3:4d:3a:12:22:24:f4:55:33:63:
e9:98:f6:56:ef:5b:f5:f3:0c:90:f2:2e:87:25:8a:7c:d6:d7:
84:f6:a1:9b:8c:37:98:7c:8b:4e:a1:47:62:b1:b2:37:56:89:
09:7e:aa:9b:16:b2:9f:f0:61:6b:18:ff:45:70:24:76:3c:3f:
e1:04:6d:c9:9a:b2:68:2f:35:2f:a7:8d:9d:ab:f6:92:63:35:
ef:d2:80:21:9f:d4:88:e2:11:6a:a3:2f:28:f4:68:f5:99:91:
90:f8:10:e7:8c:8a:9f:ee:73:bb:70:e6:d9:09:4b:f2:75:38:
86:2b:60:a6:d5:43:a6:37:61:b7:04:e9:10:d9:ef:43:e7:9a:
89:04:b7:17:51:58:9c:3a:42:bb:e3:7a:f2:b7:15:dc:b1:4b:
54:3c:87:4f:45:16:db:47:77:5a:1f:cd:c0:d5:2d:57:c0:f0:
6f:20:a9:be:d7:bf:dd:93:4e:9a:f2:92:bd:cc:0c:e8:ef:ce:
6c:f9:01:7e:2f:30:b7:be:1e:3d:01:a4:b8:07:89:df:fc:8f:
8d:c1:80:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:39:37 2026 by rpki-client