
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier: 2E1nLgeiwXzVZP7V/beMd2V71NjgfTctOIu2hS1+I4g=
Subject key identifier: 72:69:90:0F:5C:3A:4F:B5:CC:93:B9:DC:3F:8A:69:61:D9:69:25:0D
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial: 03B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number: 0AB4
Signing time: Wed 28 Oct 2026 22:21:34 +0000
Manifest this update: Wed 28 Oct 2026 22:21:33 +0000
Manifest next update: Wed 04 Nov 2026 22:21:33 +0000
Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: Loxmxvydv7pAHHvcRCoT1QN2x2rq8JPmcDbT6XruQQk=)
2: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: xGANVjy2VvXNk071/ARO9hOsZlt0dX8oI6u/EpvRYNA=)
3: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: mD0truY139TasISWyGrYu2Hz7EW2kY2oOZUl6qnCEFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 22:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Validity
Not Before: Oct 28 22:21:33 2026 GMT
Not After : Nov 4 22:21:33 2026 GMT
Subject: CN=6ae2756d-36d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:65:fc:1f:b7:2e:d0:03:f2:23:78:da:34:
a2:0e:91:c5:91:27:06:6f:a2:99:4e:63:4d:f7:49:
bb:84:9d:15:bd:ea:cc:87:e6:48:7a:04:12:33:2e:
b7:36:56:b0:5c:06:02:73:6b:f7:29:88:1e:a0:f9:
d2:a2:65:f7:3c:19:91:ae:69:b5:dd:ae:d9:5f:f7:
46:59:7b:7a:25:68:a9:5d:84:fd:90:c7:cb:a8:d6:
fb:cf:74:50:d4:c1:28:df:1e:8b:63:80:83:f3:24:
52:b1:0a:b7:76:36:0b:70:74:94:8e:07:8c:fd:59:
1c:6e:11:10:4c:0f:24:37:02:7d:ee:05:c8:b5:5d:
b4:4a:e1:df:0a:49:82:eb:97:f4:e2:65:b7:ce:0d:
4a:05:3c:4a:be:44:40:77:32:12:96:ab:08:e6:56:
75:31:d8:ec:53:90:7a:74:40:00:02:56:76:c1:12:
a8:36:5b:e2:5f:f0:f2:a1:df:d3:ce:42:11:07:3c:
d7:99:71:e7:9e:a6:ce:07:4b:50:a2:a1:93:80:82:
e0:44:7e:81:0a:a0:88:eb:68:36:b3:a7:08:87:08:
9e:98:81:0e:30:46:34:e7:ba:bf:1b:db:ac:4b:61:
61:f1:e6:f5:86:78:34:37:20:9d:4c:e5:70:e1:26:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:90:0F:5C:3A:4F:B5:CC:93:B9:DC:3F:8A:69:61:D9:69:25:0D
X509v3 Authority Key Identifier:
keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:2d:7f:90:63:ca:12:7b:45:d5:55:29:0b:cc:5f:1f:61:ae:
5a:5e:da:eb:99:90:52:75:68:dd:2c:44:cb:14:32:aa:a8:df:
8d:64:84:53:a6:00:87:8a:e4:bf:b4:0d:17:c6:3e:1a:59:74:
2e:b5:cb:fb:05:37:16:f0:ea:8f:1c:f2:2f:36:62:d1:a2:44:
84:4e:a3:3c:89:75:48:d5:7e:45:86:8d:f2:85:26:9b:02:20:
3f:75:66:33:9c:e3:60:8c:00:31:85:55:ec:9f:15:10:00:40:
4c:41:dd:48:80:7d:cd:34:42:85:35:24:23:9f:fd:f4:fd:a0:
46:73:5f:15:36:06:41:f0:c3:ea:24:42:40:ea:fd:25:0e:99:
8a:2f:a2:0c:4d:f7:5e:12:e0:33:2a:41:81:44:e8:f8:08:7f:
f8:b1:03:b5:b8:6c:fc:36:6e:e7:f0:a6:26:70:4c:b0:fb:d4:
b8:6e:45:1d:d9:1d:f3:04:06:50:61:d9:5c:28:b2:07:37:40:
50:ac:d5:03:c0:44:b2:2f:08:22:9b:58:48:4a:20:a4:24:ed:
dc:49:b3:38:b3:cd:24:2f:ca:3f:b7:5d:5d:fe:5f:b6:51:92:
46:14:20:39:f0:8b:00:fb:01:aa:39:47:cc:00:6b:69:6c:f5:
10:11:d2:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NUYxMTAvBgNVBAUTKDREMTRFMUFGMjJGNTNCMjJGNTZERUYwMkVCNzJFQTVE
RDZCRTc3RTIwHhcNMjYxMDI4MjIyMTMzWhcNMjYxMTA0MjIyMTMzWjAYMRYwFAYD
VQQDEw02YWUyNzU2ZC0zNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1pBl/B+3LtAD8iN42jSiDpHFkScGb6KZTmNN90m7hJ0VverMh+ZIegQSMy63
NlawXAYCc2v3KYgeoPnSomX3PBmRrmm13a7ZX/dGWXt6JWipXYT9kMfLqNb7z3RQ
1MEo3x6LY4CD8yRSsQq3djYLcHSUjgeM/VkcbhEQTA8kNwJ97gXItV20SuHfCkmC
65f04mW3zg1KBTxKvkRAdzISlqsI5lZ1MdjsU5B6dEAAAlZ2wRKoNlviX/Dyod/T
zkIRBzzXmXHnnqbOB0tQoqGTgILgRH6BCqCI62g2s6cIhwiemIEOMEY057q/G9us
S2Fh8eb1hng0NyCdTOVw4SbTowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJpkA9c
Ok+1zJO53D+KaWHZaSUNMB8GA1UdIwQYMBaAFE0U4a8i9Tsi9W3vAuty6l3Wvnfi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5
RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95TDFiZThDNjNMcVhkYS1k
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RSVGhyeUwxT3lMMWJlOEM2M0xxWGRhLWQtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95
TDFiZThDNjNMcVhkYS1kLUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIS1/kGPKEntF1VUpC8xfH2GuWl7a65mQUnVo3SxEyxQyqqjfjWSEU6YAh4rk
v7QNF8Y+Gll0LrXL+wU3FvDqjxzyLzZi0aJEhE6jPIl1SNV+RYaN8oUmmwIgP3Vm
M5zjYIwAMYVV7J8VEABATEHdSIB9zTRChTUkI5/99P2gRnNfFTYGQfDD6iRCQOr9
JQ6Zii+iDE33XhLgMypBgUTo+Ah/+LEDtbhs/DZu5/CmJnBMsPvUuG5FHdkd8wQG
UGHZXCiyBzdAUKzVA8BEsi8IIptYSEogpCTt3EmzOLPNJC/KP7ddXf5ftlGSRhQg
OfCLAPsBqjlHzABraWz1EBHSPg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:06:41 2026 by rpki-client