
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json)
Hash identifier: n6z9Qr/bkZCbUL41L/3sMRlS1GZS+zZ81MsRfc6ephw=
Subject key identifier: 54:D9:4E:73:96:87:88:10:B6:DE:28:E3:CB:B5:08:B1:3D:FF:4F:8F
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 055B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
Manifest number: 051B
Signing time: Sat 24 Oct 2026 23:33:53 +0000
Manifest this update: Sat 24 Oct 2026 23:33:53 +0000
Manifest next update: Sat 31 Oct 2026 23:33:53 +0000
Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: USj43ZgYrUq3khbJglGTOVQ77aLHYbfsOQjlDZwE6g8=)
2: 2D6288A4AE0611F1BEA6785E4B11F970.roa (hash: XFW6SnFPAV4WXehvZc70rBV7iQTFvf7ToBkJjvUsDGg=)
3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=)
4: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=)
5: ABDFBE34A75A11F1AF10EB3B3411F970.roa (hash: lcUds1gRLf7ptoRIc8Q0v3/2oJ+IL+a0fqYf/i4R1v8=)
6: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=)
7: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=)
8: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=)
9: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 23:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1371 (0x55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Oct 24 23:33:53 2026 GMT
Not After : Oct 31 23:33:53 2026 GMT
Subject: CN=6add4061-200c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:57:1f:b6:b4:93:1f:68:38:34:0a:0f:18:
e0:8b:7a:5a:c1:71:b6:c0:89:4d:27:02:be:14:8d:
82:da:9b:7d:3a:98:0d:40:9a:6c:a2:5b:79:34:c7:
40:5a:d0:c1:7e:ca:1b:ee:bf:71:c2:64:2d:c1:8e:
be:ab:1a:b7:17:ab:64:56:53:ce:7e:9a:39:c8:08:
21:c9:c9:3f:63:33:7d:bb:71:1b:42:7b:d8:18:ea:
48:fe:4a:7a:57:2e:55:c4:61:b1:37:18:69:60:cf:
64:8d:4f:55:e9:6f:57:21:6c:4e:59:5e:11:59:af:
88:69:22:bb:59:c5:e8:aa:fd:d0:d1:03:cd:f7:9d:
33:41:62:8b:8d:5c:8d:b6:9a:c4:a9:98:08:d4:8f:
7f:e4:15:12:05:3c:fe:d7:dc:63:b6:08:38:84:78:
fb:fc:8e:37:ee:39:bf:9a:8a:da:3b:c2:68:a3:f7:
8d:63:ee:b7:07:d2:00:5a:61:62:47:f6:b7:fc:5d:
a7:4a:15:62:6f:66:b0:ea:48:1e:fa:f2:97:de:2f:
9c:51:a1:4c:30:fe:72:6c:6c:d1:0e:19:b8:5f:13:
27:2f:ff:d9:05:d5:63:c2:05:93:df:55:8e:7e:e7:
f4:01:f3:06:f5:71:49:ea:30:15:3c:fa:5e:9f:5d:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D9:4E:73:96:87:88:10:B6:DE:28:E3:CB:B5:08:B1:3D:FF:4F:8F
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:0b:ab:f1:81:46:bd:a7:9f:d4:b6:ef:cb:10:c5:6c:10:0c:
77:1d:5e:d4:3e:07:3c:ba:89:62:a8:75:f5:b5:ce:fd:23:b3:
ee:a1:da:b8:dc:bb:da:74:a7:b1:e1:89:d7:31:40:47:5d:85:
d4:4a:50:06:95:fb:f1:71:35:74:d2:29:ba:da:e6:d1:74:84:
8f:c5:aa:96:e5:20:aa:5f:8c:97:05:cd:ac:29:82:dd:ba:96:
27:2a:94:c1:0e:61:2d:6e:d6:e9:d9:1b:ae:c3:fa:32:3d:30:
d9:b8:d5:0a:5d:9c:0f:82:fc:3c:c2:e5:70:01:f5:09:96:54:
6a:cb:4e:7f:01:bc:1e:57:a6:d9:bf:09:84:16:d5:e3:40:4e:
7c:17:72:57:63:61:b4:ac:5d:53:8e:11:b9:f6:89:26:7b:ac:
3e:4a:33:8e:7e:c4:e7:a1:50:44:b1:23:3e:c0:e7:0e:0d:67:
6b:df:4e:6b:f2:09:55:97:b2:45:db:29:a7:a7:aa:9c:1d:69:
43:c3:20:e3:dd:ef:50:bc:f2:93:eb:1b:c7:da:e6:14:4c:7f:
8f:85:b3:2b:72:3a:84:86:30:f4:19:15:04:55:3d:51:4d:f9:
9e:ee:e9:d4:bf:fc:7d:59:18:c0:d5:ec:56:44:b0:a9:ff:c4:
7a:68:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:57:21 2026 by rpki-client