
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: G9yIPzn39677LyKWhazmS+ZrAH1wH+soQvoEuvxVFIs=
Subject key identifier: 3A:C5:87:39:62:AA:61:51:4C:91:A6:26:B5:BE:65:F6:42:E1:47:73
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 0313
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 02DA
Signing time: Tue 27 Oct 2026 01:22:21 +0000
Manifest this update: Tue 27 Oct 2026 01:22:20 +0000
Manifest next update: Tue 03 Nov 2026 01:22:20 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: uS5+lpi2xwbnmRXbdaR2IQCtwzPAaD8o08SEkvW4hIs=)
2: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg=)
3: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: nquKdBYb17f91RwkbMJz0YJOyUNBfY9B+zJHnQj7Zk8=)
4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: UTHobHs4mZ75Li/c4ZWnYTJJw1N7jQT2yw1kRGz49v4=)
5: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: rX8iAImSKJ7BiKpMtoKCx7hmjEJ7mmhaIkBGctc7F3w=)
6: C3481400917811ED904ACF83C4F9AE02.roa (hash: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=)
7: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: UJJEQF3bRcxEzs9FxUgqB61bTKSaDvDmCO8VGSiwpHY=)
8: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M=)
9: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787 (0x313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Oct 27 01:22:20 2026 GMT
Not After : Nov 3 01:22:20 2026 GMT
Subject: CN=6adffccc-825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:79:35:af:e4:ce:35:3a:8d:cc:12:47:57:
fb:d9:50:04:69:6a:48:f4:6b:66:0e:86:38:53:0a:
8d:83:b9:44:18:c2:c0:68:6a:2a:a5:33:64:23:3b:
82:bc:dc:c8:ee:12:04:7a:72:ac:45:df:14:22:55:
e0:21:3b:62:77:81:ac:03:ef:35:e4:ff:58:07:8d:
3f:10:b7:97:0e:71:cf:f8:5c:5d:c3:13:64:8d:eb:
7f:a7:cc:7b:ef:2e:d5:98:12:07:22:6f:b2:e7:52:
ba:7b:0c:de:42:6d:ec:a6:51:8a:39:1c:9e:85:d8:
03:48:1c:7c:f9:b4:e8:1a:73:98:38:ca:bf:1c:ee:
51:50:94:37:35:bd:9f:75:39:c7:bd:6a:3a:07:b9:
9a:02:6d:ed:69:e1:64:7f:b4:ec:24:85:38:cf:4b:
34:50:c3:1f:6c:71:a4:b1:3c:2d:9d:bb:ec:dd:ea:
72:16:03:a5:a4:3b:dd:c9:12:2f:88:71:a4:9a:a9:
92:96:97:18:f3:d1:9a:ef:56:e2:c1:24:9a:6c:21:
0c:ff:74:e3:db:72:87:ce:13:61:a7:f4:ea:e5:11:
78:59:11:a5:f7:34:47:f6:cc:48:17:0c:97:f5:c3:
57:9f:a0:5d:55:23:b8:7e:5f:af:03:56:52:88:6f:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:87:39:62:AA:61:51:4C:91:A6:26:B5:BE:65:F6:42:E1:47:73
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:19:18:73:12:d6:70:93:a9:83:bb:84:59:68:a6:6f:02:4b:
73:ec:c4:1f:07:82:7c:d4:db:90:87:c2:2f:f4:60:49:28:f3:
6e:5d:93:51:cf:62:f6:c4:4a:29:4d:6b:c6:3a:ef:0c:64:69:
61:c0:fc:85:8f:01:64:16:24:da:46:85:4d:a5:f9:9a:1b:a1:
f1:b1:4a:9c:5d:56:70:f3:d6:5e:75:8b:1c:d5:60:cd:71:15:
0f:e1:43:93:02:d2:22:e4:6b:d1:6e:f5:e4:cd:2b:4d:62:0d:
03:2e:9e:cb:09:5f:cf:af:09:46:a7:2c:cc:85:cd:b3:42:a0:
47:03:16:16:47:26:be:3a:a9:29:8d:11:ef:3d:f0:bf:c1:40:
f1:ff:20:37:15:03:a2:5e:ec:88:a3:8a:eb:dd:f4:5a:ef:31:
1e:d6:f6:d7:2a:e8:c4:ec:24:fa:5e:26:7b:ff:f2:5a:78:6f:
4e:42:2d:74:4f:2e:9c:4d:7b:2f:bd:2f:bf:45:ba:c8:e3:9e:
f1:b1:df:75:3b:ac:fa:e7:15:95:76:ca:e9:0a:8b:ee:4a:9c:
8d:64:ba:0c:4e:91:1f:97:3d:74:fa:3d:65:d2:4b:1d:4b:07:
12:4a:ff:e0:04:67:ef:a0:89:bb:fd:6b:3d:5c:8a:a4:d9:57:
cd:28:43:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC
MThCODAzNUMwHhcNMjYxMDI3MDEyMjIwWhcNMjYxMTAzMDEyMjIwWjAYMRYwFAYD
VQQDEw02YWRmZmNjYy04MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvzh5Na/kzjU6jcwSR1f72VAEaWpI9GtmDoY4UwqNg7lEGMLAaGoqpTNkIzuC
vNzI7hIEenKsRd8UIlXgITtid4GsA+815P9YB40/ELeXDnHP+FxdwxNkjet/p8x7
7y7VmBIHIm+y51K6ewzeQm3splGKORyehdgDSBx8+bToGnOYOMq/HO5RUJQ3Nb2f
dTnHvWo6B7maAm3taeFkf7TsJIU4z0s0UMMfbHGksTwtnbvs3epyFgOlpDvdyRIv
iHGkmqmSlpcY89Ga71biwSSabCEM/3Tj23KHzhNhp/Tq5RF4WRGl9zRH9sxIFwyX
9cNXn6BdVSO4fl+vA1ZSiG/JHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrFhzli
qmFRTJGmJrW+ZfZC4UdzMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG
RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx
Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaBkYcxLWcJOpg7uEWWimbwJLc+zEHweCfNTbkIfCL/RgSSjzbl2TUc9i9sRK
KU1rxjrvDGRpYcD8hY8BZBYk2kaFTaX5mhuh8bFKnF1WcPPWXnWLHNVgzXEVD+FD
kwLSIuRr0W715M0rTWINAy6eywlfz68JRqcszIXNs0KgRwMWFkcmvjqpKY0R7z3w
v8FA8f8gNxUDol7siKOK6930Wu8xHtb21yroxOwk+l4me//yWnhvTkItdE8unE17
L70vv0W6yOOe8bHfdTus+ucVlXbK6QqL7kqcjWS6DE6RH5c9dPo9ZdJLHUsHEkr/
4ARn76CJu/1rPVyKpNlXzShDjg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:25 2026 by rpki-client