
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json)
Hash identifier: A+3tXKVBOEzfIC/hMe/uMiTXukR1iCmlMJgeJbvb5no=
Subject key identifier: A8:FA:8E:03:81:CC:D2:A4:AF:09:F1:47:E2:CF:2A:6F:26:D2:2D:86
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
Manifest number: 020E
Signing time: Sat 13 Jun 2026 04:16:41 +0000
Manifest this update: Sat 13 Jun 2026 04:16:41 +0000
Manifest next update: Sat 20 Jun 2026 04:16:41 +0000
Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: DNezYUxG5xHtnqsNNh+FZcZWNwwWgTa2S5ToP0XhVfo=)
2: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=)
3: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=)
4: A562D2B20C4111F1A1A27D5E0E3D8C67.roa (hash: QLkjHyRkvA9YbmHmikqdDsD4DAHlBTN2EdsuEF0kfO0=)
5: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=)
6: 186CFB6440DD11F1A8025F1AA6833773.roa (hash: ExyVp+3BEiYoIGyxcmeHrI1eINQHaGYAun96Y5CYXGk=)
7: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=)
8: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=)
9: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Jun 13 04:16:41 2026 GMT
Not After : Jun 20 04:16:41 2026 GMT
Subject: CN=6a2cd9a9-9c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:91:08:b6:89:97:5d:b5:20:5e:aa:b9:2c:
2d:d2:42:5f:a6:c2:bf:ae:01:5a:c5:56:10:56:b0:
01:7d:ad:ad:d8:4a:48:8e:b7:ff:b7:4b:3d:68:d9:
4e:4a:8d:af:35:25:8a:6a:a3:a4:0c:50:ac:da:ef:
ee:54:8e:39:8a:e5:c1:59:31:98:1f:f8:35:de:d2:
fe:37:e2:aa:20:08:50:4c:ae:03:20:92:2a:78:08:
d5:3a:3f:d8:1f:90:a8:dc:08:ba:a4:f5:bc:f1:75:
b1:87:b5:66:88:92:a6:f9:fe:66:56:b1:15:28:cb:
a9:ee:1f:9c:83:63:1b:73:ee:80:49:4a:eb:52:93:
9c:4b:a2:6f:37:27:80:32:38:a4:f0:5d:fa:3f:5c:
d5:a6:fd:2b:77:94:4d:ff:a3:ac:d8:f4:ec:b1:c7:
2c:2a:e2:35:cc:ad:21:76:6e:31:de:24:0a:51:3d:
da:1b:d8:0f:e1:f4:03:bb:97:a6:a4:9a:95:64:1d:
c1:4f:50:eb:29:e6:3b:22:23:55:42:fd:ef:07:8a:
7b:bd:dd:78:c8:2c:f3:5d:84:c9:64:db:0f:d6:9e:
80:ae:77:73:ac:ce:d9:b4:fc:a0:d6:08:76:31:af:
70:2c:58:77:ef:7b:04:ed:ae:73:3a:fc:0e:f5:2d:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:8E:03:81:CC:D2:A4:AF:09:F1:47:E2:CF:2A:6F:26:D2:2D:86
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:fe:c0:f7:75:b2:ed:60:4f:f4:55:76:09:15:de:ba:0d:39:
60:b5:2d:0f:53:84:dd:89:e9:c1:ea:19:a8:fb:e4:9c:2a:08:
25:77:31:e4:a1:f6:5b:c6:34:35:83:f1:01:e2:d7:7e:a3:b5:
d8:12:f7:3b:8e:7e:73:d2:c0:6d:1b:bd:43:c5:52:72:d6:b6:
b8:8d:3f:8e:5f:6b:02:3a:8d:de:89:ef:16:f1:cf:62:38:1f:
e8:8c:67:0c:e9:3e:99:11:c5:58:0b:80:2b:df:90:9e:af:90:
a4:75:b3:b8:34:41:a1:a9:09:47:0d:c3:fe:43:7a:aa:12:f5:
0a:b9:03:ad:5d:7a:3b:0e:81:2a:43:86:24:a6:86:7c:93:a0:
a6:46:8e:3b:f3:38:23:7b:0a:1a:7c:63:b4:33:d4:64:ad:ea:
d3:e4:52:b0:02:09:37:be:20:7c:a1:6c:b6:54:20:75:bd:65:
fa:7f:55:eb:a0:c9:00:61:9e:72:83:d8:95:c9:f4:eb:67:d4:
07:9a:dd:4a:d6:75:a6:a5:aa:89:13:59:35:df:49:93:c6:fa:
c0:ec:80:1f:3e:de:f5:a0:e6:ff:62:55:57:19:50:97:a4:d6:
55:43:9b:39:34:a0:d8:25:27:f7:0e:e8:3b:30:13:04:19:4a:
87:52:47:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:00 2026 by rpki-client