
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File: L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier: yfvHpLzAPYN3NbX2iZfQnT4CSnrl06TqJw5HVvNlS9Y=
Subject key identifier: B6:A2:B1:0F:F2:37:C3:EC:F0:5C:D2:1E:9B:24:33:DF:CC:85:20:50
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 2621
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number: 2591
Signing time: Mon 16 Mar 2026 15:36:14 +0000
Manifest this update: Mon 16 Mar 2026 15:36:14 +0000
Manifest next update: Mon 23 Mar 2026 15:36:14 +0000
Files and hashes: 1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: Z7uO6EYE3+F0VV5ZQulvwu5eqVXN6qMNWQlU+1RgH+I=)
2: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
3: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
4: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
5: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
6: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
7: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
8: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
9: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
10: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
11: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
12: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
13: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
14: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Mar 2026 15:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9761 (0x2621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Mar 16 15:36:14 2026 GMT
Not After : Mar 23 15:36:14 2026 GMT
Subject: CN=69b8236e-e790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:43:4e:a3:41:24:50:1f:95:d7:2a:ef:a3:
cc:1e:d4:9a:f5:46:b9:8b:d2:6b:11:7f:3a:05:a4:
26:7f:8c:20:03:a9:89:98:87:58:27:b1:13:f6:27:
13:9e:ca:a1:0a:70:10:db:12:6f:dc:3a:96:8e:df:
90:eb:4e:91:c7:96:93:2b:71:51:00:81:7e:53:84:
07:79:99:98:1e:22:11:9b:4d:2a:43:d8:ee:86:a8:
bb:b4:99:ae:e5:53:37:eb:89:89:76:61:34:3f:bb:
7b:95:1f:2f:f6:ae:43:7a:9f:d2:24:1d:10:ed:d3:
23:5c:cc:85:51:59:b2:66:2e:c6:e7:66:72:f4:1f:
5f:f6:81:11:e3:09:e1:18:0e:b4:d4:70:b1:5b:5e:
62:96:11:b1:25:df:76:c2:a0:7d:c4:7d:b3:2c:94:
78:7f:b7:3a:73:98:17:7b:59:34:e6:1a:29:94:37:
be:c9:5d:2a:af:ee:b0:ef:45:87:32:7e:77:b4:5a:
8f:64:77:72:9e:ea:4e:a4:d2:ae:1c:e7:24:0e:77:
22:58:0a:d8:d6:ae:52:a9:6c:c3:0e:a2:2a:3f:6b:
c7:fd:d7:1a:ae:04:bf:5e:f4:f7:1a:d3:75:52:62:
db:8e:a1:50:d4:a2:3f:d5:16:ed:9b:79:e3:0c:66:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A2:B1:0F:F2:37:C3:EC:F0:5C:D2:1E:9B:24:33:DF:CC:85:20:50
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a9:e4:1e:d2:53:cd:8c:c3:44:08:05:43:0c:bc:c6:4a:00:
84:30:a6:58:e7:85:c6:77:a0:d5:b1:19:23:1c:a5:49:9f:7c:
d9:6e:3d:c5:2e:41:44:1c:3f:38:c2:29:69:92:ac:cd:4d:5f:
61:b7:03:bb:df:a4:14:8a:2c:b4:ca:b1:40:89:e6:d0:a3:aa:
c0:ad:68:0b:ff:bb:05:15:cc:4d:24:1a:fc:8d:2c:df:d8:eb:
c1:66:f5:d7:e3:8c:ab:4a:1a:4b:2b:ad:e6:69:8b:fb:ef:f4:
4b:ef:b3:05:27:37:b4:e5:fb:66:64:3e:7f:36:94:6c:a5:b6:
65:8a:79:8e:45:f1:50:97:ca:ab:7e:24:b9:c6:e5:b9:f9:44:
53:5a:71:36:f9:4c:e3:af:ca:09:e4:a2:18:d8:79:42:30:19:
61:8a:ad:d5:78:8e:54:fa:a7:50:8f:84:46:6c:a5:f3:7d:a7:
b2:8a:11:1d:5c:f5:85:4b:19:78:8b:31:bb:df:61:ee:a8:3b:
49:25:99:c2:f6:af:3c:dd:eb:ab:59:58:bc:83:14:29:ea:42:
4a:2e:e7:29:9e:fb:19:2a:1f:c1:92:f4:4a:32:a3:c1:6a:69:
0f:24:17:33:65:f4:c2:58:10:19:51:dc:2b:41:1f:1a:60:e2:
b0:4d:52:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjYwMzE2MTUzNjE0WhcNMjYwMzIzMTUzNjE0WjAYMRYwFAYD
VQQDEw02OWI4MjM2ZS1lNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwRDTqNBJFAfldcq76PMHtSa9Ua5i9JrEX86BaQmf4wgA6mJmIdYJ7ET9icT
nsqhCnAQ2xJv3DqWjt+Q606Rx5aTK3FRAIF+U4QHeZmYHiIRm00qQ9juhqi7tJmu
5VM364mJdmE0P7t7lR8v9q5Dep/SJB0Q7dMjXMyFUVmyZi7G52Zy9B9f9oER4wnh
GA601HCxW15ilhGxJd92wqB9xH2zLJR4f7c6c5gXe1k05hoplDe+yV0qr+6w70WH
Mn53tFqPZHdynupOpNKuHOckDnciWArY1q5SqWzDDqIqP2vH/dcargS/XvT3GtN1
UmLbjqFQ1KI/1Rbtm3njDGaJeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaisQ/y
N8Ps8FzSHpskM9/MhSBQMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkQ1NC9EOTAxMTI4NDNGNEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZm
UmpMem5Wb3h3cVVVakd0UG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADqnkHtJTzYzDRAgFQwy8xkoAhDCmWOeFxneg1bEZIxylSZ982W49xS5BRBw/
OMIpaZKszU1fYbcDu9+kFIostMqxQInm0KOqwK1oC/+7BRXMTSQa/I0s39jrwWb1
1+OMq0oaSyut5mmL++/0S++zBSc3tOX7ZmQ+fzaUbKW2ZYp5jkXxUJfKq34kucbl
uflEU1pxNvlM46/KCeSiGNh5QjAZYYqt1XiOVPqnUI+ERmyl832nsooRHVz1hUsZ
eIsxu99h7qg7SSWZwvavPN3rq1lYvIMUKepCSi7nKZ77GSofwZL0SjKjwWppDyQX
M2X0wlgQGVHcK0EfGmDisE1SDQ==
-----END CERTIFICATE-----
Generated at Tue Mar 17 08:40:32 2026 by rpki-client