
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
File: TrnMSjh3s_-dQLwbs-YMkK36zVM.mft (raw, json)
Hash identifier: iTbiu87Dx5nmk6KMwS7bO1XjIqoz0BfLS+EbJ0qHhrE=
Subject key identifier: EC:C0:E5:4E:78:36:B0:20:59:1B:5E:F3:9F:70:08:6E:19:0F:F4:87
Authority key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
Certificate issuer: /CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Certificate serial: 0B4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
Manifest number: 0B41
Signing time: Thu 16 Apr 2026 19:10:16 +0000
Manifest this update: Thu 16 Apr 2026 19:10:16 +0000
Manifest next update: Thu 23 Apr 2026 19:10:16 +0000
Files and hashes: 1: TrnMSjh3s_-dQLwbs-YMkK36zVM.crl (hash: SJgXMxxIDZxkgu7/wBRRi0YPVo3vaJiuCKVOv6p7Kg4=)
2: 1979A7C0586111EA9FC98555C4F9AE02.roa (hash: DHpveC2DBL4gVq9gAp9i6p0IPtXQ+xG1GbXA8h9vNTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2891 (0xb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F104D, serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Validity
Not Before: Apr 16 19:10:16 2026 GMT
Not After : Apr 23 19:10:16 2026 GMT
Subject: CN=69e13418-7a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:51:15:7d:28:28:a3:01:74:0c:d5:82:b3:
61:19:33:0c:3a:e3:7b:69:93:29:74:cf:af:f2:d0:
d4:71:60:2a:6a:f2:15:ef:ca:55:3e:da:e0:15:c2:
90:7d:3f:7b:1d:6e:a7:b5:39:72:a9:e0:3e:90:9d:
bc:b1:73:f0:fe:e0:f3:5b:60:d2:4c:e0:2a:24:aa:
22:d3:80:d2:a9:e0:d0:e4:7e:83:6a:9a:1a:83:56:
1d:e5:d9:b1:f9:4d:ab:4b:dd:20:47:8a:5f:4d:6a:
a5:08:d7:11:b6:5f:00:47:76:c6:be:08:fe:d4:65:
6a:bd:93:a3:ca:de:f3:96:1c:7d:66:e4:c6:a7:59:
bb:0c:2a:63:8b:30:7e:d7:4d:a1:7e:3d:08:59:61:
9a:8f:a3:74:b7:f7:48:ab:14:22:5c:c5:d9:9c:b1:
9e:91:36:87:c1:99:2c:72:a1:73:6f:a6:a3:c9:5e:
e5:4e:1e:88:db:a8:77:31:d9:03:b8:e6:15:26:f5:
4f:3c:ff:c8:70:cf:21:a1:0c:de:e4:c7:a5:a3:a6:
7a:5c:64:c4:1f:51:d0:96:8a:0e:f7:78:47:ba:a2:
1b:d5:33:e4:b7:34:ae:0a:71:e5:83:1b:fd:24:e7:
64:35:37:4f:7d:ba:65:46:64:87:96:f9:fb:7d:35:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:E5:4E:78:36:B0:20:59:1B:5E:F3:9F:70:08:6E:19:0F:F4:87
X509v3 Authority Key Identifier:
keyid:4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:74:f1:34:a2:e9:4e:8d:75:ce:0f:93:a0:ba:47:7c:4d:01:
64:9c:cd:05:0b:a6:7d:b8:54:3e:77:32:45:7b:c6:6a:e1:8c:
b0:7d:c8:5f:41:6b:e2:d9:9e:8a:e5:ef:a4:f0:b1:75:42:6b:
f9:ff:3a:02:9d:30:99:da:39:6e:a8:fa:27:6b:99:1c:19:2f:
b8:35:42:5d:22:55:af:81:a0:ba:2d:f5:9f:7f:b1:96:4b:6e:
3a:79:ba:1d:8b:d8:4d:b6:6b:01:b4:26:df:c2:1f:72:47:df:
94:00:e8:99:cb:a3:55:4d:74:e3:e7:18:00:a4:c0:f9:5d:4d:
dd:9b:a2:01:d4:9b:3f:33:e6:7f:a0:5d:e7:cf:77:b2:85:7f:
aa:12:04:2d:9f:f3:a9:62:99:52:63:fa:e8:6e:0b:ec:58:f1:
14:2e:77:66:2f:02:19:e0:fd:10:ea:eb:bc:f9:e7:65:18:9a:
3d:b5:a2:b6:fc:f0:df:b1:ac:6e:b9:47:a4:59:cf:67:2a:02:
24:84:78:6b:af:00:81:9a:31:28:77:2f:2d:04:2a:3b:5d:9e:
97:27:6e:0b:33:d2:02:43:9c:1f:9a:b7:a7:99:41:70:d8:92:
b0:ba:f6:60:26:6a:d2:36:dd:b9:bd:45:b5:2d:f9:c0:d9:91:
12:12:0f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:18 2026 by rpki-client