
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier: i2BRy4WCk1S+g3bxM0fgpFvBNWWpmsEj8bQZTCev49Y=
Subject key identifier: 4A:D3:34:74:39:AB:A0:6F:F5:D4:74:B2:78:73:70:32:42:1E:96:51
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial: 0333
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number: 09B8
Signing time: Sat 28 Feb 2026 23:00:14 +0000
Manifest this update: Sat 28 Feb 2026 23:00:13 +0000
Manifest next update: Sat 07 Mar 2026 23:00:13 +0000
Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: l1Tm2nojiT6KQkmB7KTsjTKbyaya5qVYkXsdsLsmlfE=)
2: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: Zn/90qwbG+0Df96/zQSMkzHyx6xwf0/RZMauir90ZH8=)
3: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 5yEwO4ZnTC2CHQn3tYL6GNEeTVAOOIXAZLN/7OfHXIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819 (0x333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Validity
Not Before: Feb 28 23:00:13 2026 GMT
Not After : Mar 7 23:00:13 2026 GMT
Subject: CN=69a3737d-aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:31:91:73:39:8b:74:a7:e4:8d:82:6b:51:
c1:d9:b2:34:03:43:8c:b3:01:6d:d6:53:1d:48:de:
e4:de:26:ef:85:96:e7:34:71:cc:e3:19:0a:09:f9:
bb:50:84:ac:54:ed:e1:0d:d8:1e:81:72:db:c9:5c:
2e:cf:d3:65:7e:e5:97:5e:b8:64:4f:80:18:01:af:
99:27:20:db:89:6b:4b:73:83:f5:23:1f:71:89:6d:
ef:bd:07:b3:b0:6d:55:e0:c4:96:e3:98:34:f0:f3:
d5:1d:20:b6:8e:67:80:c8:f9:31:36:5e:40:75:91:
8b:e7:d1:bd:ff:05:c7:87:57:d3:f8:b2:3d:10:97:
bd:e9:f0:fb:b8:20:67:cf:7e:95:99:72:57:65:0e:
9a:0c:16:f3:7c:c6:13:7a:0f:4c:1a:3d:f1:78:41:
91:67:b7:1e:64:2d:7e:e6:db:fc:33:c5:01:31:c5:
86:5e:42:01:b2:db:09:d6:96:c2:40:cb:58:ed:33:
f6:4b:7c:cc:b2:cf:79:bd:52:1d:77:e8:49:fb:76:
14:e6:c2:02:8a:cc:c5:23:0e:93:f6:1d:a5:6c:97:
1b:c4:ae:75:cd:86:c8:e2:39:6b:aa:eb:92:81:f3:
b2:c7:7f:33:c6:1c:d9:ff:0f:22:ce:9a:ab:28:a1:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D3:34:74:39:AB:A0:6F:F5:D4:74:B2:78:73:70:32:42:1E:96:51
X509v3 Authority Key Identifier:
keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:fc:ab:52:fb:99:b1:51:09:d3:05:2e:58:29:1d:16:41:
11:0b:93:a7:d8:68:a2:23:5e:f9:ec:99:ad:16:d4:71:2a:8b:
3c:19:02:12:ca:5f:4e:c4:f4:97:17:fb:18:c2:e9:6e:d6:3c:
f0:07:d2:d0:d8:33:2d:ab:40:f6:6f:7e:7f:38:4d:e7:c6:2d:
ad:ed:dd:1b:79:08:75:8c:d8:23:2b:cd:f4:03:b9:36:14:46:
3b:40:14:ae:f9:6a:68:ba:bf:e2:6e:d4:3a:aa:9f:e8:3a:9e:
6a:ac:d0:d3:87:91:cc:47:04:e2:25:ac:ea:a4:83:85:f7:39:
46:94:2b:7f:e4:cf:bf:19:3f:f6:9d:0a:4e:e7:69:42:14:f6:
0e:e3:40:98:20:53:dc:67:1d:ca:59:ab:ab:19:4d:ae:53:20:
23:9e:99:0f:8d:66:43:98:f5:a8:f4:2f:b6:14:06:ee:54:b7:
cb:2c:ca:ce:62:a9:4b:58:b7:9b:f1:dd:e0:d0:83:9c:ce:95:
ef:ec:37:41:d7:ec:90:69:2c:f0:92:c4:a5:84:e4:85:04:19:
22:1e:32:e4:eb:a7:b5:84:02:1d:52:cf:b9:32:dd:73:d7:d7:
de:52:4a:2f:34:01:80:99:be:36:73:00:4b:1d:ee:d8:9e:90:
ed:3b:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:55 2026 by rpki-client