
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json)
Hash identifier: 4mZXJ85zNcr9zP+BtrDbi1VM28IxQPoucLCeumcchhw=
Subject key identifier: 16:FB:C7:3F:3F:B6:4D:13:21:24:71:86:49:31:76:F6:05:21:4E:AD
Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
Manifest number: D8
Signing time: Fri 09 Oct 2026 07:18:59 +0000
Manifest this update: Fri 09 Oct 2026 07:18:59 +0000
Manifest next update: Fri 16 Oct 2026 07:18:59 +0000
Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: YGE0Y337fKnZwrY4xWXnHe6qVk6VlKVjK7aVsnmEIFk=)
2: 442749147D6311F0BC413466C4F9AE02.roa (hash: pZzQ3wcf5NhKLhQ5y0SYHfcdZzM5PRL9cbkeNwOsguc=)
3: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: 0u1ZLLqCampcdXnPq/pBAes2DhVX2vLtj9KlG8BoPAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Validity
Not Before: Oct 9 07:18:59 2026 GMT
Not After : Oct 16 07:18:59 2026 GMT
Subject: CN=6ac89563-4928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:f4:3e:cc:b2:2a:6b:d1:a1:dd:64:62:98:
a8:c0:1d:c5:1b:e9:cd:25:f0:ea:44:31:65:f6:10:
7d:da:d3:a2:1b:e2:8a:64:07:b1:95:31:49:55:76:
d3:e4:c8:46:e0:a2:28:53:aa:cb:41:7e:71:9c:02:
51:74:af:31:64:42:9b:4a:4f:33:2e:72:c1:73:5c:
3e:5b:25:6c:08:8d:20:40:df:de:5d:d7:1b:87:bd:
af:be:8b:af:2c:4d:b6:47:6e:13:e5:95:c3:f5:16:
b1:c1:5a:8d:74:b6:40:77:84:e7:ce:77:30:d1:71:
dc:c3:8e:25:39:c0:8b:25:3b:ef:48:82:96:0c:2a:
61:39:cc:cf:6c:52:c4:21:d1:77:06:3e:39:82:66:
3e:06:88:ab:d3:b1:64:2c:8e:ab:2a:c7:07:ff:9a:
e2:84:cf:59:c3:b3:c7:d7:76:39:f5:94:77:21:31:
4c:67:ce:c1:fe:b9:c2:54:ab:b7:25:09:45:34:bf:
d4:d6:3f:78:3e:0c:3e:bd:a8:9c:4b:5a:f2:84:2b:
08:6b:d7:47:98:40:e0:da:de:2a:34:98:91:f9:4b:
e3:ed:ca:a8:80:e1:fd:5d:f4:ab:f1:56:8a:77:e3:
c7:c8:6e:23:1e:41:9f:90:05:dc:cb:b9:e0:bc:00:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:C7:3F:3F:B6:4D:13:21:24:71:86:49:31:76:F6:05:21:4E:AD
X509v3 Authority Key Identifier:
keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:04:d8:8d:06:9e:dd:1b:69:bf:63:6f:5d:4f:14:47:fe:1d:
34:93:0b:c8:39:31:9f:83:48:af:53:53:e1:d4:fe:0d:3a:fc:
05:e5:7a:ec:37:eb:c7:29:0e:e4:d4:a1:29:5f:e3:36:a8:cc:
8f:1d:a1:43:0a:0e:07:a7:bc:17:84:9f:56:46:b8:1a:90:c4:
83:f6:0c:5b:f9:cb:a2:d3:1e:fc:fe:25:cf:be:a8:d7:d6:04:
26:d3:19:fd:a4:86:d9:3d:1b:86:4e:f1:59:6b:c5:da:cf:85:
8f:61:99:23:ab:e3:2e:de:61:78:b9:fc:73:3d:cd:63:fa:60:
43:75:f9:60:99:de:56:24:43:42:ce:3b:29:71:eb:20:aa:6b:
d7:79:ca:69:f2:87:48:d9:6e:75:1a:01:b9:c6:e3:cb:8c:09:
a1:2a:2b:c2:8e:54:ab:e3:0d:e8:56:7e:12:c4:79:1c:55:6a:
cb:3a:74:81:12:da:02:e3:1a:ea:ec:27:23:0e:80:93:64:c6:
94:c8:49:11:4b:ad:46:b5:04:28:e0:85:b3:90:47:f4:52:3e:
df:da:dc:7a:b5:ec:02:9b:fc:39:b8:d4:db:81:16:a2:4a:99:
b0:b8:7a:79:b3:74:1c:f3:a7:a0:86:aa:c7:4e:7e:06:e0:59:
57:f0:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:41:14 2026 by rpki-client