
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File: L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier: jd0Nafyq5DoYV0K2TYdkvTEe3Yi4Yldie8yjNI2OvMQ=
Subject key identifier: 36:12:4C:19:DA:FB:EE:F5:40:C6:FC:D1:10:10:1B:C9:F9:7A:67:B9
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 26A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number: 260C
Signing time: Sat 24 Oct 2026 15:39:20 +0000
Manifest this update: Sat 24 Oct 2026 15:39:20 +0000
Manifest next update: Sat 31 Oct 2026 15:39:20 +0000
Files and hashes: 1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: 6K4z9sdJx4PzPDkDM6uuOxarIMcYjJ9OrGinN8YqzAs=)
2: 96D63300A03F11F18845DC903A11F970.roa (hash: Qn3KV4OX+7NpADy6nTakfR6jlcCtsaFA/bop6cOJpvA=)
3: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
4: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
5: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
6: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
7: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
8: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
9: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
10: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
11: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
12: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
13: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
14: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9890 (0x26a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Oct 24 15:39:20 2026 GMT
Not After : Oct 31 15:39:20 2026 GMT
Subject: CN=6adcd128-507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:6b:91:32:57:db:ca:61:f9:99:06:fa:1b:
64:36:8d:4f:07:36:0c:85:cc:a5:91:e1:f0:83:7a:
45:ed:02:e5:f6:5b:68:ff:0e:5f:2f:ac:60:a3:5c:
1e:03:b0:2f:fc:3d:57:0d:87:8b:27:eb:0b:cc:f1:
66:65:8e:e7:07:76:3b:b5:a6:ce:98:61:cb:e5:54:
b6:18:11:de:52:91:6e:27:30:89:36:8f:19:d9:00:
e0:5a:5e:6e:22:77:9c:74:f7:6c:26:d5:24:1f:38:
4f:61:84:0a:78:1f:cf:fd:a7:fc:7c:9f:0f:c1:59:
8b:10:51:90:26:62:93:25:1c:7d:76:f1:e2:8f:3f:
1d:ff:0e:27:52:e6:ef:7a:82:b6:5d:7a:17:3d:7c:
0b:25:a9:8f:62:3b:39:6d:79:aa:88:42:05:56:9b:
57:12:a7:1a:5f:00:4a:9a:25:b9:d5:29:1d:ef:03:
3e:d7:86:b4:b2:96:a7:b2:ac:d7:d1:fd:72:62:d4:
96:c3:8b:78:0d:6d:65:25:64:60:8f:6d:4d:b2:25:
38:f1:a3:dd:c6:bb:b5:92:e0:ba:da:42:5b:80:99:
e7:ee:4b:6b:09:e6:eb:e4:24:8c:fb:f5:0a:31:89:
7f:e1:b5:3c:07:57:7a:bb:dc:3d:2c:d8:3d:af:13:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:12:4C:19:DA:FB:EE:F5:40:C6:FC:D1:10:10:1B:C9:F9:7A:67:B9
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bb:0d:d9:8a:5f:41:34:1c:2f:ba:b9:3e:7b:91:fd:e7:e1:
df:b0:ff:de:25:7a:b5:18:ca:07:98:a1:07:2d:32:20:60:00:
c7:0a:b4:75:82:f6:4e:f6:0b:29:da:a0:73:64:9e:90:d1:84:
63:e7:dc:ce:ff:0f:e8:5c:89:b8:54:cc:c2:9b:82:fa:d3:d6:
14:4c:fe:33:c0:af:29:2c:3f:96:da:f9:3a:c9:36:c6:96:76:
1f:d1:75:9b:c9:b5:c3:54:8c:6e:94:8d:37:b2:5f:92:dd:2b:
8b:a0:bd:5e:2a:84:4a:52:38:82:1d:80:e7:99:16:70:62:fa:
90:c9:e1:83:cf:73:1c:79:8b:0f:c0:e9:1e:c3:53:11:d7:23:
4f:ba:06:10:ab:8e:9a:52:bd:e4:60:66:e0:c3:5e:ac:7a:62:
5e:da:23:80:cc:9e:bb:ca:99:af:49:7a:4b:54:8b:0c:77:ab:
17:47:d4:cd:99:c4:be:27:80:f6:68:c4:cf:53:61:73:7a:a3:
54:dd:da:7f:af:a3:0b:59:d0:ae:85:05:33:64:cd:54:ab:28:
95:b8:56:c0:dd:4b:3d:f6:28:7f:a7:cd:d6:9a:9f:0f:05:b9:
fa:44:d0:18:9d:8e:17:c9:f9:01:14:c3:fe:45:bc:98:3b:21:
2e:23:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 02:58:33 2026 by rpki-client