
$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json)
Hash identifier: ATU05NyvOUmD/cqyAst7SDadpaJL5dFCEIOXNOy+czI=
Subject key identifier: BE:6C:30:88:49:9F:E2:17:32:EC:B0:0D:E0:89:72:7F:DF:C5:45:EF
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
Manifest number: 020B
Signing time: Sun 05 Jul 2026 03:36:28 +0000
Manifest this update: Sun 05 Jul 2026 03:36:27 +0000
Manifest next update: Sun 12 Jul 2026 03:36:27 +0000
Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: vJlIZsu0Gm29mNu9U6NF+xNgZEeWIjaDSHwOicIXjd4=)
2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: EOojy2+JzC+p+QaVV3QkjR8Q0Zfn9YjNT084DP1KFTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 03:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Validity
Not Before: Jul 5 03:36:27 2026 GMT
Not After : Jul 12 03:36:27 2026 GMT
Subject: CN=6a49d13c-ad55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:73:25:ca:d3:9a:57:00:60:66:b1:35:85:
f0:77:fc:b3:23:b5:de:c4:c2:91:16:f6:62:cb:05:
02:b1:5d:8b:0b:04:29:de:8b:cd:08:f5:8e:9d:1d:
5f:92:8d:e4:2d:a8:35:1e:c0:5a:13:be:69:4b:d4:
0f:4a:86:80:79:db:d7:96:b7:b3:4c:cb:11:1a:b7:
8f:ad:95:85:8e:35:76:7d:fd:05:50:00:e9:64:70:
0f:ea:72:da:43:80:4b:cd:23:c8:94:67:d7:c0:ba:
1b:29:e9:95:c0:1c:83:7c:54:55:fb:78:ec:5c:10:
31:e6:9c:4c:6a:a7:4f:6d:eb:1a:40:8d:1d:fb:22:
6f:23:92:52:55:e3:8f:a7:61:12:14:d4:98:c7:84:
e8:79:7d:84:9b:7a:09:47:8a:85:37:db:06:30:55:
5e:2a:26:c1:f6:fa:0d:91:03:10:f3:78:f0:e0:d7:
6e:0b:3a:98:51:b3:05:93:b2:6a:06:93:f8:f7:b8:
f3:df:99:d6:9b:4f:e9:cc:2c:63:a1:0b:c1:42:b0:
04:95:e2:38:67:d3:9e:a1:f9:c3:87:51:83:92:b1:
fb:dd:9e:f1:da:c9:a9:e1:6b:88:17:1d:3e:06:e0:
4c:1a:41:99:fe:1d:fc:25:92:1c:9b:43:06:9a:7f:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6C:30:88:49:9F:E2:17:32:EC:B0:0D:E0:89:72:7F:DF:C5:45:EF
X509v3 Authority Key Identifier:
keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a4:27:5e:04:ab:38:4c:31:ee:8e:6c:85:66:87:81:a5:9c:
4e:33:84:46:3d:51:09:7a:64:25:50:ff:68:47:a2:58:7a:af:
49:32:9e:ac:66:e3:7e:44:f1:bc:2e:69:3b:9c:33:4a:58:e0:
09:f8:31:3f:2c:02:cc:53:a7:5f:4a:2b:8b:df:c0:8f:13:18:
e8:2f:72:79:d1:9f:12:02:4c:58:c8:64:63:b1:12:05:38:4c:
51:57:ff:8d:96:d0:34:3b:60:30:4c:41:62:04:0d:9d:07:90:
26:75:07:39:a0:ba:e3:5a:22:66:81:d4:93:d4:8b:f9:47:7b:
ea:8e:03:7e:ad:60:2e:b8:d7:ff:27:15:81:d9:4e:e8:70:af:
0c:fa:b9:2d:f8:fd:e1:2a:ed:c0:63:5a:34:2e:4e:e9:34:97:
62:4d:eb:67:c6:c2:f7:6a:bb:2a:45:22:a8:24:31:cd:a4:e7:
e5:11:b6:11:a5:25:71:12:b3:7a:a2:e8:e7:41:7a:e1:34:44:
59:19:b0:5d:84:62:cb:df:66:c9:9d:b7:d1:ef:00:f7:1b:10:
cc:8d:d5:c3:43:33:bf:d5:0f:8a:ea:b5:42:4d:69:1b:66:82:
c5:5b:51:2c:9e:e2:69:4a:ff:31:a9:2a:05:25:08:d9:10:cc:
49:15:26:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0
MDIwM0UyRjkwHhcNMjYwNzA1MDMzNjI3WhcNMjYwNzEyMDMzNjI3WjAYMRYwFAYD
VQQDEw02YTQ5ZDEzYy1hZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1NJzJcrTmlcAYGaxNYXwd/yzI7XexMKRFvZiywUCsV2LCwQp3ovNCPWOnR1f
ko3kLag1HsBaE75pS9QPSoaAedvXlrezTMsRGrePrZWFjjV2ff0FUADpZHAP6nLa
Q4BLzSPIlGfXwLobKemVwByDfFRV+3jsXBAx5pxMaqdPbesaQI0d+yJvI5JSVeOP
p2ESFNSYx4ToeX2Em3oJR4qFN9sGMFVeKibB9voNkQMQ83jw4NduCzqYUbMFk7Jq
BpP497jz35nWm0/pzCxjoQvBQrAEleI4Z9OeofnDh1GDkrH73Z7x2smp4WuIFx0+
BuBMGkGZ/h38JZIcm0MGmn9ohwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5sMIhJ
n+IXMuywDeCJcn/fxUXvMB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC
NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3
cXZNblBseG11UEZBSUQ0dmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi6QnXgSrOEwx7o5shWaHgaWcTjOERj1RCXpkJVD/aEeiWHqvSTKerGbjfkTx
vC5pO5wzSljgCfgxPywCzFOnX0ori9/AjxMY6C9yedGfEgJMWMhkY7ESBThMUVf/
jZbQNDtgMExBYgQNnQeQJnUHOaC641oiZoHUk9SL+Ud76o4Dfq1gLrjX/ycVgdlO
6HCvDPq5Lfj94SrtwGNaNC5O6TSXYk3rZ8bC92q7KkUiqCQxzaTn5RG2EaUlcRKz
eqLo50F64TREWRmwXYRiy99myZ230e8A9xsQzI3Vw0Mzv9UPiuq1Qk1pG2aCxVtR
LJ7iaUr/MakqBSUI2RDMSRUmnA==
-----END CERTIFICATE-----
Generated at Sun Jul 5 12:36:50 2026 by rpki-client