
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json)
Hash identifier: 47mf8cmpo7xu32mMUNHAdKNSsggTwAn1/OO2LODhUwc=
Subject key identifier: 27:69:11:11:9D:B8:2B:31:D6:B4:41:A6:81:56:48:E4:05:B5:E9:3C
Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03
Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03
Certificate serial: 03CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
Manifest number: 03CA
Signing time: Mon 21 Sep 2026 00:20:44 +0000
Manifest this update: Mon 21 Sep 2026 00:20:43 +0000
Manifest next update: Mon 28 Sep 2026 00:20:43 +0000
Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: hbLB34Vt/3BQmcv61nAL1X+5xBq/JGE9ePrw4ZGxdvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl
rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03
Validity
Not Before: Sep 21 00:20:43 2026 GMT
Not After : Sep 28 00:20:43 2026 GMT
Subject: CN=6ab0785b-9aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:15:3a:d4:6d:40:b2:eb:c5:02:53:6a:e2:
f7:e4:6d:5b:95:10:a4:f2:a8:2c:22:54:ad:e0:45:
cf:e2:c1:87:f2:29:6d:f1:48:3c:c3:04:b8:fb:c2:
39:dc:aa:18:91:7d:0c:eb:0e:7a:fd:d7:66:a4:23:
1f:cc:23:36:e8:24:9f:2a:38:0e:ef:d4:99:97:00:
a2:56:31:a7:5d:91:ea:18:eb:cd:dc:30:07:32:a1:
ef:bf:7f:ee:70:58:3d:bf:02:9f:a8:6e:cb:06:82:
27:a0:4f:6f:53:03:75:05:c3:64:31:33:05:ab:46:
ad:4a:fd:51:c5:ac:09:4c:58:41:d5:12:de:74:0b:
57:32:44:f2:e2:1d:fa:ac:58:91:d4:34:ca:cd:23:
7a:54:e9:a4:6b:2a:a5:cd:ad:83:e9:66:b8:29:f1:
50:15:d2:a6:fb:37:76:c4:a0:d5:35:4a:b6:e3:fd:
1b:43:91:3a:97:88:48:b9:c3:1f:be:b5:63:5a:d0:
5a:f3:73:14:fc:c7:ce:4a:26:1d:96:63:40:0d:7b:
21:a5:fc:ce:d6:2f:4e:16:53:2a:99:32:c7:f4:f1:
e4:3c:78:46:75:1e:bc:53:6c:05:13:0b:6c:84:bb:
47:06:4d:36:89:c0:52:bc:09:2e:7c:db:3d:7a:52:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:11:11:9D:B8:2B:31:D6:B4:41:A6:81:56:48:E4:05:B5:E9:3C
X509v3 Authority Key Identifier:
keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:6b:65:69:31:e3:75:fd:ed:83:91:07:1d:95:d3:4a:e4:30:
1e:7f:52:7e:b8:ef:f3:30:3a:5d:f9:65:90:09:d6:8f:ad:2e:
3c:b1:04:9c:c0:66:65:73:c1:b9:ef:74:c1:ac:fc:50:97:1b:
27:bb:82:84:a6:bc:ad:38:99:75:1f:13:35:ff:bc:a2:11:a8:
a5:79:2c:57:e8:83:43:96:d7:e9:91:06:83:7e:a3:5a:d0:3f:
12:42:d5:bd:bc:f2:64:1c:d2:e9:de:ac:ca:1d:9c:3b:b7:d2:
1f:78:f9:8d:df:11:d6:f5:f0:3d:a8:21:c0:6a:46:07:d9:5c:
20:e4:4e:6a:1b:6f:63:53:a6:b0:2e:a0:6a:33:cd:7b:92:08:
5c:ef:80:81:7b:b9:0a:b4:51:de:19:81:53:68:38:95:6b:af:
d7:26:2f:63:74:32:00:cb:1f:d7:ef:99:eb:73:0b:ed:26:c1:
f8:1a:38:10:e2:a7:3b:f1:09:18:b5:65:9a:f1:51:0d:72:bf:
ce:03:48:b0:a1:8d:72:07:b9:3e:9b:c1:bf:1c:94:6c:96:32:
9f:b1:0b:80:40:70:22:9d:5c:6c:e3:9c:c2:a3:93:7c:bf:d1:
c9:04:8a:ec:c2:1d:a2:e1:ee:dd:84:31:c2:3f:ff:a8:01:9a:
8a:0d:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:36:25 2026 by rpki-client