
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json)
Hash identifier: DfW1IZDuRhyo/c1nYrOuLne1FrE/0krbYJ1zdjPc2wQ=
Subject key identifier: F2:9D:CF:C8:51:8B:38:E8:3B:96:8C:89:5F:0C:0F:12:B4:34:2F:7C
Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
Manifest number: 0285
Signing time: Fri 17 Apr 2026 01:38:54 +0000
Manifest this update: Fri 17 Apr 2026 01:38:53 +0000
Manifest next update: Fri 24 Apr 2026 01:38:53 +0000
Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: NxDCkQkAYHpuvk3MVTNr0NHfnSH5wToLRw6mE7QpoKs=)
2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: jlEGSFgrtpFxgrLft8aSqTV3lW+FCxpfsVhhvgy0Afc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl
rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFA83, serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Validity
Not Before: Apr 17 01:38:53 2026 GMT
Not After : Apr 24 01:38:53 2026 GMT
Subject: CN=69e18f2e-89e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:db:e4:d2:75:9b:e9:5d:db:8a:7b:91:19:
d1:65:8d:06:3d:49:e2:f0:2f:d2:01:91:3e:9a:9a:
70:3d:81:0b:39:b6:d5:4d:c6:88:82:cf:cd:2c:38:
92:b0:1b:a1:fb:72:10:10:fd:95:ed:e8:40:98:ca:
c2:f6:e8:c9:b8:60:14:88:c6:ea:c1:d0:f5:e9:e7:
03:9d:9f:a8:b1:9b:01:2c:76:ad:2a:35:6a:53:cf:
fe:8c:eb:6e:8d:d5:c0:69:76:f3:02:6f:59:95:be:
24:e1:fc:64:3b:99:d8:28:f1:1c:a4:3a:da:be:59:
58:6f:f0:e9:a2:92:92:58:d4:db:40:1f:38:a4:01:
68:88:92:09:c9:44:be:01:7a:06:a4:88:56:3d:d3:
96:11:8d:7f:bf:f4:83:2c:56:92:68:67:53:d1:54:
bb:d1:c7:27:33:72:0a:9e:83:3f:5b:ec:56:80:c0:
3e:a3:96:e7:19:50:ea:72:a1:be:d3:c8:7f:47:25:
4b:f7:0a:f7:0d:9a:51:d1:2a:76:77:4f:d3:08:da:
ad:23:09:ba:a4:4b:4d:6b:60:19:7a:b2:a4:38:7c:
4c:d4:9f:dd:b7:88:8e:8a:2a:f6:13:e4:56:2e:74:
62:24:fc:7e:55:c6:fa:4c:cf:7b:39:db:82:aa:44:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9D:CF:C8:51:8B:38:E8:3B:96:8C:89:5F:0C:0F:12:B4:34:2F:7C
X509v3 Authority Key Identifier:
keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:28:b7:2b:4c:b1:c8:1d:71:f3:64:d4:5f:03:9b:a8:a1:55:
f7:f3:a6:b9:0e:15:ef:61:a3:a9:45:33:ef:93:06:eb:3c:4e:
84:95:7b:1f:4b:62:75:02:43:aa:2e:08:b1:9a:4c:0c:93:1c:
a3:91:6f:85:9b:ea:03:6a:04:fa:10:b0:aa:0d:38:a2:ea:40:
ca:ac:2d:14:a0:e8:b8:39:2f:1f:6a:e6:ab:79:3c:c8:d5:07:
15:8e:79:f0:91:e2:53:19:bd:dd:a6:1c:2a:f3:94:4b:5d:60:
0f:8b:b2:40:50:74:89:e7:10:a2:1f:88:c7:1f:fe:3f:a1:ac:
29:97:81:82:93:0f:52:a5:c1:cb:63:c5:a4:79:d7:f7:60:5c:
c5:b1:0d:0f:41:41:c0:90:b0:b6:58:ce:ae:20:93:3c:01:f2:
42:83:de:f6:13:b3:3c:4c:39:56:eb:d4:a8:ba:92:58:01:f4:
e5:e9:40:06:86:9c:d9:b3:e6:18:f5:d3:f7:97:72:cd:67:3b:
88:ce:65:5f:6c:38:a0:bd:c2:c2:6f:ec:85:90:f5:08:5c:b6:
be:c3:eb:d6:58:24:d5:3c:08:a0:88:1a:68:d3:f1:e3:57:b6:
f5:c6:81:34:f4:b9:c0:6f:9b:31:e6:72:fa:c9:4a:fa:67:d1:
27:cb:2b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:00 2026 by rpki-client