
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: zUry96Efe5JX0QcP3CUQM7xJ+s/+//EIPaf8lTO4jVI=
Subject key identifier: A5:CA:97:CA:59:AB:6E:00:92:4D:A9:90:9D:41:C1:9E:9C:3A:79:91
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 02F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 02C0
Signing time: Sat 05 Sep 2026 01:16:24 +0000
Manifest this update: Sat 05 Sep 2026 01:16:24 +0000
Manifest next update: Sat 12 Sep 2026 01:16:24 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: WmvAuSqoRgq7mdybLyuGvg6n67PwU/n39qO7TEz+CY0=)
2: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: UTHobHs4mZ75Li/c4ZWnYTJJw1N7jQT2yw1kRGz49v4=)
3: C3481400917811ED904ACF83C4F9AE02.roa (hash: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=)
4: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: rX8iAImSKJ7BiKpMtoKCx7hmjEJ7mmhaIkBGctc7F3w=)
5: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: UJJEQF3bRcxEzs9FxUgqB61bTKSaDvDmCO8VGSiwpHY=)
6: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg=)
7: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=)
8: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: nquKdBYb17f91RwkbMJz0YJOyUNBfY9B+zJHnQj7Zk8=)
9: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Sep 5 01:16:24 2026 GMT
Not After : Sep 12 01:16:24 2026 GMT
Subject: CN=6a9b6d68-780e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:bd:8e:4a:d3:5c:9f:39:eb:23:e7:6f:35:8b:
2b:bc:b3:35:c2:f4:c2:1e:0d:18:18:b5:3e:78:6a:
bc:84:a9:c1:11:83:22:bc:49:52:40:32:50:27:c7:
c4:56:0e:51:a2:10:3f:9b:85:5e:76:11:1b:37:b7:
0c:32:97:0b:33:0a:26:d4:bc:b0:d6:22:04:49:1c:
14:13:ab:7e:6e:69:8d:5b:b6:58:3a:7c:8e:00:f9:
48:28:eb:9c:0b:ff:e2:a1:05:87:bb:a7:84:f8:3a:
f2:14:13:50:5d:73:37:08:47:5b:ba:ce:d5:ef:2a:
28:55:aa:46:4c:b5:b7:93:50:63:06:c6:cb:25:e1:
2e:e2:df:01:0f:c1:97:b6:1a:3f:f3:04:00:96:5c:
02:2c:f3:1e:d1:d2:67:f0:80:7f:08:43:57:33:48:
cb:ff:11:65:09:82:fe:6c:73:a6:d1:f7:46:f4:99:
6c:e5:9c:7a:ba:26:53:bf:9e:df:5b:e1:37:55:44:
4f:bf:ed:da:1a:53:45:be:dc:41:b0:cf:1c:fd:57:
62:33:bf:bd:09:ed:d0:77:bc:7a:07:95:bc:3f:d5:
79:68:4d:2a:38:82:7d:36:34:ad:51:ed:8e:e3:e3:
2d:3f:58:0a:ea:e8:46:ad:41:3b:e5:e5:c3:fc:f1:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:97:CA:59:AB:6E:00:92:4D:A9:90:9D:41:C1:9E:9C:3A:79:91
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ab:42:61:80:92:5f:f1:91:4b:f9:e5:4e:44:e2:bb:11:11:
6a:4e:d0:b3:28:bb:8e:4b:be:b6:b3:55:07:46:a8:be:19:c4:
43:be:e8:3a:4f:5e:eb:2f:1d:ed:f8:3f:b3:0c:0b:d5:87:4f:
e3:95:5d:6a:66:85:9f:7c:5e:21:14:1c:33:09:b4:ba:69:b3:
5e:f5:87:60:09:fd:e1:9b:58:5e:96:ad:59:50:27:45:87:d9:
28:ba:b8:4b:97:26:6d:6b:16:c2:23:77:55:35:52:be:95:8f:
f5:24:7a:9f:f9:0a:ca:dc:ae:5b:53:c1:9d:a5:8b:e8:f5:72:
18:f3:ba:ac:34:36:31:ff:40:b8:0e:68:6f:4f:7d:aa:6e:52:
6a:39:b8:90:68:2c:57:d9:46:49:03:7a:38:f3:82:76:9b:bf:
a7:bc:09:c5:08:09:d1:a3:f9:f1:2e:c6:1f:f4:d1:e5:85:db:
1a:6d:25:99:3c:6b:87:2b:c7:0c:a1:2e:e3:c5:68:91:87:01:
4a:f5:5b:bd:ec:9b:ce:d1:3b:6a:3f:8c:a9:59:f3:d5:65:7e:
a6:0c:aa:ca:1a:a6:15:d9:47:d7:83:1f:97:f8:46:73:16:7f:
17:db:4c:d4:0a:aa:b5:a5:31:2b:eb:a2:78:49:1f:fd:4b:64:
32:38:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:34:06 2026 by rpki-client