
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
File: TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft (raw, json)
Hash identifier: NEjGXnxFLMvwI/8qFfg34eECmBA0+6Cf6ly7E7wQD2E=
Subject key identifier: 6F:7C:29:20:29:72:C0:BA:1A:95:A2:7D:34:AE:1D:A1:1A:60:91:5F
Authority key identifier: 4D:19:95:A9:E6:79:37:67:2F:2C:4F:27:86:0F:52:B7:D6:26:D4:0F
Certificate issuer: /CN=A91F110A/serialNumber=4D1995A9E67937672F2C4F27860F52B7D626D40F
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
Manifest number: 17
Signing time: Mon 27 Jul 2026 11:27:43 +0000
Manifest this update: Mon 27 Jul 2026 11:27:43 +0000
Manifest next update: Mon 03 Aug 2026 11:27:43 +0000
Files and hashes: 1: TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl (hash: jNlnDCHJYmScGbOyuez/tBhZ9qeXY4ADzj0eMkx+Z1c=)
2: 9175DEAA7C1411F18096A0D294A30FBC.roa (hash: cp+vN6cTIS/69N+GxuJvTs1MveCOnCGKIrNsu4gNmRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl
rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F110A, serialNumber=4D1995A9E67937672F2C4F27860F52B7D626D40F
Validity
Not Before: Jul 27 11:27:43 2026 GMT
Not After : Aug 3 11:27:43 2026 GMT
Subject: CN=6a6740af-5575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:dc:34:0c:9b:b4:1b:93:fc:2a:d3:25:1a:
32:bb:f2:33:16:fd:bc:83:24:d6:e0:d2:c6:26:fe:
00:8a:a3:92:16:56:b7:df:ca:54:9a:0b:db:d4:d7:
47:0c:75:5d:25:46:93:a2:94:7d:42:49:b9:62:71:
0f:01:a7:35:8d:64:3d:8a:64:f2:18:44:82:ab:0c:
37:e8:f5:50:ae:d7:35:07:91:c6:4e:84:83:d2:8c:
be:ae:ae:92:b3:40:8a:95:48:2e:8d:d8:a3:40:5f:
d7:a0:ea:0f:60:33:60:26:51:85:20:6c:1f:e0:fb:
84:b3:68:00:6a:c0:ed:1e:24:b3:2b:ae:6e:4c:33:
bf:06:16:a5:72:73:5a:99:21:ed:c4:7d:61:68:26:
b1:ce:6d:5b:63:c4:f5:6e:a4:bb:c1:68:cc:64:dd:
7d:45:5f:60:5b:7d:1b:ff:6d:dd:33:4a:a8:2c:15:
ee:3b:52:46:07:62:f7:57:39:20:fb:e3:a2:b0:fa:
40:0b:ee:a5:5f:56:02:1a:91:68:25:61:cb:bb:12:
06:da:85:23:98:cd:f3:4d:70:e4:bc:81:d1:0b:a6:
1d:d5:44:8f:55:16:c7:c7:a6:10:64:ab:16:fc:ed:
8f:f2:e2:6d:16:96:e4:2c:4e:4c:25:38:f2:ed:22:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7C:29:20:29:72:C0:BA:1A:95:A2:7D:34:AE:1D:A1:1A:60:91:5F
X509v3 Authority Key Identifier:
keyid:4D:19:95:A9:E6:79:37:67:2F:2C:4F:27:86:0F:52:B7:D6:26:D4:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:91:a5:02:5c:09:08:eb:d7:85:68:32:ef:e9:18:92:7b:ba:
fb:49:65:f8:2f:f2:6b:e4:ca:c0:3f:dc:89:0f:66:cb:ef:1b:
d6:8d:6f:1a:d6:78:8f:39:c6:40:73:0a:2b:6e:bc:cf:82:56:
97:df:9d:ad:c7:36:f3:e7:94:48:81:25:21:22:aa:85:f5:e5:
57:52:a4:9c:e5:a7:4f:05:c7:66:9c:39:22:2e:86:00:1d:15:
57:85:11:93:6b:bc:eb:91:33:3f:f0:1c:38:40:c6:e5:dc:24:
05:56:a7:05:50:eb:3c:e5:ae:b6:4a:b9:f6:03:64:0b:9a:1c:
48:0a:28:a0:a9:2d:a8:1c:4f:75:23:21:dd:90:b6:b3:cd:6f:
41:d2:8e:1f:84:e4:19:ab:f5:38:c3:3b:f2:48:ce:3d:54:7c:
95:e6:8e:fe:80:f1:b3:22:e7:5c:c1:dc:c9:f8:8b:2d:f5:04:
44:53:be:ba:60:6b:7c:d7:84:75:77:69:1e:e0:e4:1b:2a:80:
b8:bb:34:e9:6a:4d:08:97:7e:45:2d:6a:a0:42:a6:4d:58:4b:
8a:0f:1c:93:20:dc:21:88:87:ff:ae:26:f7:f5:45:50:3d:89:
63:ad:91:d4:4b:f0:6b:e2:78:34:7b:f4:57:67:2a:a9:2d:3d:
a4:dd:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:42 2026 by rpki-client