
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json)
Hash identifier: kk7oUP63NqHs0//VgpYLrDOGygUL8/zvvaWtNTEsknE=
Subject key identifier: BD:6C:28:C6:C1:B8:F8:80:72:9F:A5:F6:D0:C7:C8:FC:D4:C5:59:69
Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Certificate serial: 0AC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
Manifest number: 0AB9
Signing time: Tue 06 Oct 2026 19:36:15 +0000
Manifest this update: Tue 06 Oct 2026 19:36:15 +0000
Manifest next update: Tue 13 Oct 2026 19:36:15 +0000
Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: W6XHyaG+MP45szLpOohM7NtDzHsB/KUqy0GjPw3Jp7c=)
2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: gfXrnN3jQkJVV0wj646OBjzyC1W/Dpnz2lbxL1Z1Wig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2755 (0xac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Validity
Not Before: Oct 6 19:36:15 2026 GMT
Not After : Oct 13 19:36:15 2026 GMT
Subject: CN=6ac54daf-b47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:5b:0e:f0:7c:69:c8:06:69:b8:7c:c3:f8:
04:d3:19:2e:7c:41:05:72:c1:71:7c:22:94:78:c4:
5c:21:8c:d8:85:2e:44:f9:fe:9a:46:ea:1c:76:b0:
d5:16:15:9b:46:14:3b:46:7f:4c:a0:72:21:83:c5:
e9:03:49:24:bd:99:9e:75:8b:c0:1f:0a:14:09:03:
fd:09:c5:3a:da:29:40:c1:c8:73:88:f8:8d:6a:e5:
4d:4a:79:a8:83:58:bd:02:81:15:e0:87:8a:8a:cc:
e8:f2:a5:6f:a4:a5:70:2c:a4:d2:e8:95:d1:23:57:
d5:ab:5b:79:7a:57:13:98:4e:ba:bd:00:d2:33:9f:
ce:7a:14:2d:34:d4:ab:72:d0:91:c5:4b:9e:91:53:
6f:10:c9:36:5a:2d:b6:a2:18:65:34:ec:55:01:e4:
26:c6:75:c8:2a:8d:32:f0:46:4b:c4:e8:28:4f:02:
e0:72:af:d5:78:b2:4b:95:5f:bb:88:6c:91:34:f6:
3f:15:9e:ce:94:55:e9:c3:f5:b4:16:5a:7a:d2:3b:
4c:65:63:96:83:6f:0b:39:52:f1:77:d2:9b:e1:77:
e4:19:5d:bb:38:2e:43:cd:9f:c6:6d:a0:5c:19:ce:
b3:7a:ee:1e:89:fc:2e:9d:00:72:18:fc:83:3c:05:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6C:28:C6:C1:B8:F8:80:72:9F:A5:F6:D0:C7:C8:FC:D4:C5:59:69
X509v3 Authority Key Identifier:
keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:47:c3:50:66:34:76:53:8b:51:66:57:e8:c6:2e:d1:e5:12:
ee:d0:b7:19:9e:66:61:78:cf:30:02:a4:03:dc:32:e6:61:1c:
a5:af:83:9b:a8:90:7f:2c:01:53:75:3d:39:a6:b1:b4:e5:dc:
a3:37:23:15:48:b4:26:86:e4:9a:ce:01:93:36:71:37:b7:38:
7a:d0:7d:f2:1e:bc:ef:5e:90:a9:fc:1b:78:69:15:30:e2:b4:
b8:9d:51:ba:aa:b0:14:50:96:3b:3c:81:15:55:d3:04:a3:17:
6c:3c:ef:31:0a:b7:8d:6e:48:a6:81:4b:57:28:88:09:ab:1e:
b9:1f:f6:1a:93:3b:4e:34:3a:19:6c:6b:f0:7a:ce:5d:51:22:
83:88:ed:72:3e:b6:60:9b:c8:3b:16:66:d1:33:08:c6:e6:14:
a7:ea:c4:3b:08:79:59:cf:f0:67:fa:8e:99:a7:2e:f1:15:71:
e9:7d:4f:b3:6c:13:c6:7e:9f:36:0d:6e:36:47:f1:0f:8b:5b:
8d:b1:cc:61:06:8b:10:62:03:23:b3:b4:78:56:4b:37:d1:d3:
d5:f5:d3:e2:42:b2:73:96:e2:d6:dd:e2:a9:a4:1d:51:bb:5c:
ad:cd:f0:e2:f2:2c:23:b5:ab:b7:d9:af:f4:f5:35:a5:b9:ce:
4f:db:b3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:09:52 2026 by rpki-client