
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json)
Hash identifier: bBrNiIWDZADOZqcQmN/xoOeTXUUIy9dSqU9jSVUROOw=
Subject key identifier: 2A:44:9D:E0:B5:91:E9:72:9E:AB:71:37:DC:DD:B3:54:EE:B2:FF:0A
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial: 09E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
Manifest number: 09D9
Signing time: Mon 02 Mar 2026 03:03:48 +0000
Manifest this update: Mon 02 Mar 2026 03:03:47 +0000
Manifest next update: Mon 09 Mar 2026 03:03:47 +0000
Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: XFSd2Qa8qcgBr8/tU/uHcsCCZl+z0zrJTAzqKX0YhRw=)
2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: L3lNIHbCxJGu/bh8hgqIeyO6qrNNfK/0DQjKxg0z0zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2533 (0x9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Validity
Not Before: Mar 2 03:03:47 2026 GMT
Not After : Mar 9 03:03:47 2026 GMT
Subject: CN=69a4fe14-9c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:a5:6b:01:92:b7:c4:90:a1:8e:e1:e8:54:
e1:9b:ba:46:3e:f5:97:1e:f6:01:00:f9:dd:aa:1b:
fd:5b:6f:4a:f5:9e:2a:51:a5:0c:5b:c7:4f:be:19:
ba:e9:28:bf:3c:a0:11:35:2f:b4:e6:9a:9b:96:96:
52:67:ed:1a:59:7e:54:66:5a:b3:86:19:16:e0:3d:
35:4e:96:d7:b4:18:87:ab:f1:13:58:d4:73:7d:d7:
b9:f5:b0:4d:80:62:ee:27:81:c4:79:c8:ea:08:9c:
ae:34:6d:de:d0:ab:ab:9f:12:8b:36:71:73:0f:ea:
c1:9a:65:68:a5:5b:79:e5:d6:55:90:91:97:e4:33:
18:87:9c:5d:de:12:85:1c:9d:38:c8:e4:ce:8b:f8:
e8:43:7c:61:01:47:68:fe:f1:1c:da:19:e2:4c:cc:
d6:63:d1:3c:29:75:2b:04:47:05:b8:87:e6:e6:80:
f7:5b:23:ef:d7:1f:b1:5e:53:f0:d5:8a:1b:3e:59:
37:8e:14:b2:1a:ff:2f:0a:b5:5c:c0:45:10:07:bd:
05:c3:e2:05:89:31:1b:9d:cb:e1:0e:f8:01:30:0c:
67:22:0a:c8:95:07:15:f3:e8:a9:28:27:be:76:12:
7b:cf:0b:c5:52:13:13:f8:2b:c4:4c:24:88:b7:33:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:44:9D:E0:B5:91:E9:72:9E:AB:71:37:DC:DD:B3:54:EE:B2:FF:0A
X509v3 Authority Key Identifier:
keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:5f:be:f0:37:4f:cc:bc:63:bf:e1:7a:dc:60:06:aa:88:f5:
31:71:af:5a:33:ae:4b:b1:8d:72:9b:da:b0:53:42:69:94:c1:
47:18:d0:b9:a7:e7:a6:13:b0:61:43:9c:d5:08:57:c2:a3:0c:
05:8f:60:23:f1:db:4a:59:e9:e4:40:90:80:b5:f7:84:ac:28:
5e:0c:27:d3:a6:19:7d:d4:f5:4d:40:71:fe:01:50:ed:db:7f:
21:c5:8d:e6:24:51:fe:36:94:a9:80:9a:22:02:08:84:a6:49:
41:6c:c9:95:2d:39:8c:5f:4c:e7:06:12:da:41:b7:53:57:07:
d9:30:37:46:bf:ba:2d:77:a9:a3:76:aa:13:46:7a:bb:ec:0a:
45:48:ba:3e:7c:cd:73:2b:9a:09:fb:e6:05:1f:6b:05:a3:0f:
af:54:17:12:bc:77:82:23:88:9c:c5:fa:4b:90:da:61:36:97:
31:94:8f:5d:8c:c6:94:7d:c3:27:bc:6d:95:42:10:84:47:73:
d1:d0:29:9a:f4:27:30:72:89:51:fa:18:1f:ba:8b:62:ee:bb:
27:59:42:c3:4c:8c:d4:46:91:77:26:ac:1c:47:38:40:24:8f:
ec:1c:19:6f:2e:d5:ee:6e:86:d5:26:69:ec:b5:6b:7f:71:92:
44:f8:22:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:12 2026 by rpki-client