
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json)
Hash identifier: 9m9XBDzQJVDqr2BDP+Lo3F5MxdppYjE2bbtRIY2EsoU=
Subject key identifier: E3:FA:E9:EE:89:F7:58:C7:68:43:87:45:D3:ED:41:79:CE:FA:F4:0F
Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
Manifest number: 026B
Signing time: Sun 01 Mar 2026 02:41:34 +0000
Manifest this update: Sun 01 Mar 2026 02:41:33 +0000
Manifest next update: Sun 08 Mar 2026 02:41:33 +0000
Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: JGi5eZGimLe1kBQ9h2KGRXH7txZf8M2OpLvxt89G9Y8=)
2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: gyfrniVm6CPH5FR/fJTUgaFc0xIrHd21T4X/z509bUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl
rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFA83, serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Validity
Not Before: Mar 1 02:41:33 2026 GMT
Not After : Mar 8 02:41:33 2026 GMT
Subject: CN=69a3a75e-2b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:8e:56:d4:84:00:fc:e4:ab:46:76:62:03:
d9:0a:aa:31:ae:ea:99:dc:c0:a0:7f:b0:91:a3:ef:
6a:9f:17:78:f4:53:5c:fb:9f:53:fe:f5:20:65:75:
58:e0:3b:01:ec:97:ef:6f:a3:aa:fe:91:e1:bb:8b:
2a:0e:96:64:72:86:37:82:70:13:ba:64:66:7f:ad:
16:09:de:a6:91:82:3e:c1:3a:33:31:0e:a5:b1:af:
02:d2:65:fc:61:14:cb:4f:87:3d:23:e6:3e:60:fe:
27:92:12:61:70:88:a8:12:a1:da:7a:87:ac:3a:71:
65:04:0e:52:de:69:5f:13:b0:92:8d:ba:d1:d7:b7:
d9:82:fc:10:f4:f7:6c:a2:f6:10:3c:2e:4d:3e:45:
f2:2f:49:42:04:1f:0f:c7:d4:b4:1c:87:a8:1f:38:
ae:c2:78:60:d3:ae:90:85:5c:e3:25:24:9f:9b:69:
f2:0c:95:d8:96:e5:ec:99:41:fa:e8:c7:83:a5:98:
44:75:41:aa:c2:ec:9e:98:34:fc:ea:bd:cc:4c:bb:
07:d2:65:c1:a3:9c:5e:4f:30:4c:a4:d4:b3:cd:88:
3a:0c:a9:f6:c6:96:44:0e:3e:b9:43:c6:0d:8f:30:
b7:02:b0:99:93:ce:ed:5f:60:b9:96:26:49:2a:75:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:E9:EE:89:F7:58:C7:68:43:87:45:D3:ED:41:79:CE:FA:F4:0F
X509v3 Authority Key Identifier:
keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:74:d6:b8:be:9b:ce:8a:a7:73:ce:f3:19:2e:aa:53:c2:fd:
20:0e:f7:f6:a0:60:5d:f1:c9:ef:08:59:98:88:a7:a3:93:5e:
28:73:b5:ff:23:1c:c0:da:e8:f8:3c:51:1b:87:03:f3:69:38:
d0:53:62:b5:49:f9:9d:d2:6c:fa:ab:49:fa:78:6c:0c:71:f7:
7f:08:2a:c2:48:95:b9:f1:7b:b7:e4:74:f5:be:e1:cb:59:21:
3e:c6:7b:62:f6:9b:ff:35:9b:47:98:c8:67:99:69:69:aa:e7:
66:d0:89:f9:a2:e0:5d:df:06:b6:13:58:06:ae:21:ad:0b:19:
0f:64:bf:bd:7e:73:eb:86:30:cc:44:5c:80:ae:f1:92:a9:42:
13:ac:15:15:86:e3:e9:77:e8:82:30:92:5d:b6:25:59:f6:96:
8e:21:9b:e0:6f:ec:7d:45:a9:d5:66:a4:13:e1:db:7f:bb:ca:
6d:2e:4c:37:82:80:d0:e2:3f:9e:72:0f:3c:20:01:91:36:75:
d3:8c:3f:b2:16:b4:52:6d:81:26:cf:ba:5a:5c:d1:d3:8a:71:
60:5c:f1:f5:92:d8:e7:7a:91:9f:67:38:9f:8b:f2:a0:73:d6:
5f:9d:d5:5b:da:e8:e7:2e:4a:5d:ec:a2:05:38:ce:5d:ac:e3:
36:75:d6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:37 2026 by rpki-client