
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
File: V3LjuCeMtseqvXrPnvViq1k8LoI.mft (raw, json)
Hash identifier: i73aBgjY1ghTMjIUpF2XmHBj8b1qKaO5jikeSERzCe8=
Subject key identifier: 5D:3C:D0:8E:64:AC:94:C4:9A:F6:8F:54:1C:8E:B0:00:88:6C:4C:4B
Authority key identifier: 57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
Certificate issuer: /CN=A914699C/serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
Manifest number: 04
Signing time: Fri 04 Sep 2026 02:41:45 +0000
Manifest this update: Fri 04 Sep 2026 02:41:44 +0000
Manifest next update: Fri 11 Sep 2026 02:41:44 +0000
Files and hashes: 1: V3LjuCeMtseqvXrPnvViq1k8LoI.crl (hash: Jpfbk8vKFhOaFoZpmYWGiH0rd6jfPsnPjl/ntWyoh1A=)
2: 2781681CA80A11F18FD626046A11F970.roa (hash: +M5jX9SWmjMyONwR593XK4NuqGr4X6KNIa9RCUZWpwo=)
3: A79907ECA80211F1A53A8FFC6611F970.roa (hash: q4GJ3n3nrluUWyP5K1p4wLbW632gAl3ii1+eWXdy8qo=)
4: C9444062A80911F1B773AEF56911F970.roa (hash: Gx7QSfdDQXIJhXZo7KuA4iL5KlnP875Oz/dpgPiArPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 02:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914699C, serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Validity
Not Before: Sep 4 02:41:44 2026 GMT
Not After : Sep 11 02:41:44 2026 GMT
Subject: CN=6a9a2fe9-1c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:7b:50:8c:7d:fa:83:f1:ac:62:75:25:ff:
5f:41:2a:a4:5f:6e:b4:29:e3:3a:87:8e:8f:c4:9b:
fe:ac:2c:d4:98:85:25:f5:c6:b3:f7:59:20:13:2a:
2d:04:5a:12:73:6b:5e:67:b6:27:d5:71:89:3b:96:
89:07:3b:43:ea:b4:14:b1:10:97:a7:50:32:fa:66:
85:a9:31:75:9e:2c:11:fc:e4:bf:38:92:01:ec:b2:
7b:e3:23:48:24:8c:a6:f3:45:8c:7f:2b:35:dc:da:
0a:6a:22:d5:6d:70:2e:5d:ef:8a:b9:e7:95:fa:12:
19:13:3c:7d:69:03:08:0d:db:e5:ac:2b:ab:0d:bf:
a5:5e:6e:13:f1:0a:0a:d0:e8:dd:d2:64:d1:32:2b:
77:3b:c0:74:bb:3a:6e:df:52:65:c5:07:e4:ef:1a:
f7:bd:46:df:10:90:ad:48:a8:4c:2f:dd:2e:06:da:
18:7a:fd:0f:24:dc:fa:c2:b4:ee:ce:e1:6c:7a:77:
58:4e:db:b8:f0:29:77:4d:84:62:f3:27:3f:65:bc:
ad:3d:54:bf:a6:28:d0:77:a9:94:b9:5c:d3:73:15:
73:01:1e:7d:79:14:cc:08:be:28:fb:83:70:1c:af:
eb:e1:d1:d9:a6:c3:e7:86:0c:f7:91:80:f7:39:d1:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:D0:8E:64:AC:94:C4:9A:F6:8F:54:1C:8E:B0:00:88:6C:4C:4B
X509v3 Authority Key Identifier:
keyid:57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e3:74:9e:6c:c2:dc:6c:69:e7:e1:ba:08:8d:f3:cb:50:26:
cd:8f:1e:bb:79:e6:c5:c0:5a:e0:e8:4a:fd:f9:d8:19:e2:97:
f4:5b:46:cc:7a:13:46:46:6f:6d:33:19:3c:c8:57:f6:51:30:
b8:ca:fa:1f:ba:ab:69:de:75:48:c5:1b:00:b4:0b:48:fa:71:
89:b8:0a:5b:6e:51:ad:d4:29:9e:39:81:94:6c:af:77:4d:16:
f7:b6:f2:b4:3c:9e:49:af:18:fe:6f:16:3e:7c:e2:ba:77:49:
4c:86:f9:4d:86:d8:a9:46:dd:04:6f:9c:e4:ed:1c:f0:57:1d:
ea:94:14:6d:bf:5a:76:a3:17:cf:0f:fc:b2:43:4a:8b:7e:6e:
01:2f:db:ba:e0:92:de:34:ba:d3:3b:7d:6d:d0:f1:e8:41:c6:
4c:98:9d:21:7c:20:98:c4:93:e4:9d:8f:f4:a4:90:4b:1c:d6:
39:b4:a3:ff:34:d9:eb:fb:1d:f8:3b:7d:08:c5:a7:5d:c4:27:
1e:68:7a:e5:ae:78:29:0a:94:a6:c1:c4:a2:45:f9:2b:47:08:
c0:61:9b:8f:3f:bc:a4:02:d1:f1:e0:68:fb:6b:10:8c:d0:b3:
61:ea:ef:a1:54:45:7e:37:01:09:cc:c3:a7:0e:a5:73:dc:e4:
a4:33:e2:66
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Njk5QzExMC8GA1UEBRMoNTc3MkUzQjgyNzhDQjZDN0FBQkQ3QUNGOUVGNTYyQUI1
OTNDMkU4MjAeFw0yNjA5MDQwMjQxNDRaFw0yNjA5MTEwMjQxNDRaMBgxFjAUBgNV
BAMTDTZhOWEyZmU5LTFjMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC13XtQjH36g/GsYnUl/19BKqRfbrQp4zqHjo/Em/6sLNSYhSX1xrP3WSATKi0E
WhJza15ntifVcYk7lokHO0PqtBSxEJenUDL6ZoWpMXWeLBH85L84kgHssnvjI0gk
jKbzRYx/KzXc2gpqItVtcC5d74q555X6EhkTPH1pAwgN2+WsK6sNv6VebhPxCgrQ
6N3SZNEyK3c7wHS7Om7fUmXFB+TvGve9Rt8QkK1IqEwv3S4G2hh6/Q8k3PrCtO7O
4Wx6d1hO27jwKXdNhGLzJz9lvK09VL+mKNB3qZS5XNNzFXMBHn15FMwIvij7g3Ac
r+vh0dmmw+eGDPeRgPc50ZKvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXTzQjmSs
lMSa9o9UHI6wAIhsTEswHwYDVR0jBBgwFoAUV3LjuCeMtseqvXrPnvViq1k8LoIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTlDL0Q2NkI4RkQ2QTdF
OTExRjE5RjZBODI3NEE2RUU1MjhFL1YzTGp1Q2VNdHNlcXZYclBudlZpcTFrOExv
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvVjNManVDZU10c2VxdlhyUG52VmlxMWs4TG9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
OTlDL0Q2NkI4RkQ2QTdFOTExRjE5RjZBODI3NEE2RUU1MjhFL1YzTGp1Q2VNdHNl
cXZYclBudlZpcTFrOExvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAc43SebMLcbGnn4boIjfPLUCbNjx67eebFwFrg6Er9+dgZ4pf0W0bMehNGRm9t
Mxk8yFf2UTC4yvofuqtp3nVIxRsAtAtI+nGJuApbblGt1CmeOYGUbK93TRb3tvK0
PJ5Jrxj+bxY+fOK6d0lMhvlNhtipRt0Eb5zk7RzwVx3qlBRtv1p2oxfPD/yyQ0qL
fm4BL9u64JLeNLrTO31t0PHoQcZMmJ0hfCCYxJPknY/0pJBLHNY5tKP/NNnr+x34
O30IxaddxCceaHrlrngpCpSmwcSiRfkrRwjAYZuPP7ykAtHx4Gj7axCM0LNh6u+h
VEV+NwEJzMOnDqVz3OSkM+Jm
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:48:56 2026 by rpki-client