
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json)
Hash identifier: SbVxoa/McjG82dgA1G6Yu9akkwqXQs5i3zvOFU/GRvg=
Subject key identifier: 5B:7B:77:79:82:6D:49:DD:31:5D:CA:41:E0:ED:AB:D5:94:66:A7:52
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial: 0513
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
Manifest number: 0505
Signing time: Wed 19 Aug 2026 00:03:03 +0000
Manifest this update: Wed 19 Aug 2026 00:03:02 +0000
Manifest next update: Wed 26 Aug 2026 00:03:02 +0000
Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: JYwlgOsQjMuk/3bL59nZQqqz3RiqWXEaNRGgyEHjZSc=)
2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: Cnel+OeT3oP8Ba57DN2AfJdE9d8ywFeBBz6sL8SdLcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1299 (0x513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Validity
Not Before: Aug 19 00:03:02 2026 GMT
Not After : Aug 26 00:03:02 2026 GMT
Subject: CN=6a84f2b6-4d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:bd:22:ef:8e:63:3a:88:87:68:f6:aa:31:
ba:52:f2:99:d8:1b:d2:be:25:a5:92:98:17:81:52:
02:24:99:fa:20:d3:28:86:25:5c:15:f1:79:90:66:
2a:34:21:85:0b:41:f5:07:8e:b9:ac:80:0d:a0:ce:
8a:b4:8c:6f:3a:94:20:e0:0a:18:a3:1f:db:d5:86:
5a:3f:d7:27:a9:b0:31:79:a6:c7:3b:66:1d:0b:eb:
cc:cf:97:d1:33:46:a2:22:02:35:a1:38:27:b6:6e:
ec:4c:82:2e:70:ab:d4:85:c0:66:3d:07:00:83:32:
8d:75:bf:76:55:aa:ad:f6:b3:b0:c2:24:b4:1b:e3:
af:eb:5c:5d:4e:47:5e:92:ca:14:0a:df:1c:ac:1d:
40:8e:76:8b:08:13:0e:b1:5a:45:a9:ec:a3:c5:53:
d8:4c:b2:3b:29:dc:6c:d7:82:e6:22:66:d4:d8:61:
44:15:05:76:49:88:54:0c:8f:8c:35:d2:7b:30:77:
80:cb:f1:90:53:36:b6:86:15:6c:5d:b6:ea:51:f3:
dc:bf:0b:ea:bf:e2:4d:8b:fe:72:6a:e4:3b:1b:6d:
9f:d1:ca:6b:47:f2:7a:75:88:e5:66:c0:75:65:0c:
3e:ae:d6:14:ed:38:b9:74:43:36:a9:62:34:8f:9b:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7B:77:79:82:6D:49:DD:31:5D:CA:41:E0:ED:AB:D5:94:66:A7:52
X509v3 Authority Key Identifier:
keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:53:c7:50:7c:8c:56:57:3f:b3:52:41:64:a0:2d:63:15:93:
0a:25:32:98:e6:e5:16:49:80:a9:5b:18:58:db:36:50:a3:1f:
70:40:64:f8:9b:8a:47:77:8a:1a:16:44:20:90:0e:73:be:24:
9c:3b:74:6e:ec:99:26:9c:5b:fb:2e:10:9e:46:b1:65:12:5d:
b8:ab:7f:69:68:fa:82:45:f4:61:84:fd:5c:f4:48:03:a2:49:
2e:39:00:d4:17:e1:b5:59:5e:85:57:15:49:5e:59:d4:7b:57:
5b:e4:a1:29:36:19:0b:ef:f6:82:51:10:5d:67:b6:7e:2f:fe:
8a:31:0f:54:85:be:68:3e:7b:db:b7:72:7d:36:aa:bc:a7:63:
cf:f9:e3:d8:59:8a:ef:d8:91:6a:c3:29:bf:c9:21:07:a8:8b:
fd:c0:7a:c6:f5:27:df:42:49:32:a8:7a:81:d6:11:69:34:fa:
7b:eb:b7:44:d5:94:80:dd:9c:8c:7c:d8:c3:75:4c:86:64:02:
20:ec:51:74:27:dd:fd:cc:c6:70:d3:08:11:9a:d9:5a:5e:80:
6e:4a:c7:c3:7f:02:5c:55:5d:b8:59:32:2c:4b:b7:df:8d:18:
2f:60:c1:ae:19:90:9e:d2:39:36:80:1f:96:3a:10:20:f4:f1:
5d:cd:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:15 2026 by rpki-client