
$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json)
Hash identifier: OB4mb8vbv3Z+n5pMZzAxEGZN4A0SsUnj0yZVAlXirkI=
Subject key identifier: CE:E9:73:5B:0C:41:F1:6B:E2:A7:06:B9:FC:1E:EC:26:C3:BF:F1:F6
Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA
Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
Certificate serial: 0C31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
Manifest number: 0C1A
Signing time: Tue 18 Aug 2026 19:05:31 +0000
Manifest this update: Tue 18 Aug 2026 19:05:30 +0000
Manifest next update: Tue 25 Aug 2026 19:05:30 +0000
Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: QeRvlDLfiUuhTdQkwDMfOi9FrPBg8kHlexqy43o/+f4=)
2: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: hU7OMHsTj6hL7vgEEXYSl72Q/STHSktutJc1O2+u9S4=)
3: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: 9OFSK2ChXxMiDwCW+T5F/rViLCQZW9lND/if0koTJTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl
rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3121 (0xc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
Validity
Not Before: Aug 18 19:05:30 2026 GMT
Not After : Aug 25 19:05:30 2026 GMT
Subject: CN=6a84acfb-9623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:72:f6:a0:27:32:16:6e:f7:2f:a0:99:a6:
e6:2b:9a:92:3d:17:d1:c9:a1:c7:ae:ac:44:e4:e4:
0d:2c:87:21:e3:d7:65:bc:3c:36:7a:d5:3c:25:9a:
d6:82:3b:e3:e5:0c:b6:14:8b:61:2e:a5:62:7f:3d:
84:eb:3f:ff:4a:2c:69:aa:0b:a3:9e:d3:1a:b9:82:
09:18:c5:e7:f7:f1:0d:2d:73:0d:31:5f:a4:d4:89:
1c:8b:ac:e3:9b:68:6a:ef:7c:66:75:0a:5d:11:6f:
1b:91:b8:1a:38:e3:72:14:ec:18:66:fb:68:89:24:
d8:ea:3b:d5:af:b8:fa:79:1d:3b:88:6e:7f:cc:63:
08:8d:f5:a3:44:5c:84:11:81:ac:d1:d3:f7:c0:6c:
d0:ed:e1:ee:60:1f:49:40:d5:2e:3f:cd:d2:ac:b1:
2c:fc:9e:c1:08:bf:91:fc:8d:3e:a5:76:a0:0d:e2:
83:d6:ed:d9:5c:47:29:1d:b2:18:ba:c3:b7:47:5f:
fa:dd:b6:54:e8:cd:07:f4:b5:f2:14:00:31:f5:eb:
26:cf:8b:08:5f:24:52:34:0e:6f:46:30:af:ae:85:
ce:24:06:e9:37:cb:e0:8c:ea:b0:e0:ad:ea:22:2a:
14:c2:da:1e:11:66:22:dc:ae:77:27:64:45:20:52:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E9:73:5B:0C:41:F1:6B:E2:A7:06:B9:FC:1E:EC:26:C3:BF:F1:F6
X509v3 Authority Key Identifier:
keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:fe:5b:54:e5:b0:a9:a5:30:85:1f:36:43:f1:c1:9e:08:80:
d6:92:f0:1b:9d:6c:a6:d6:5f:7f:67:f5:d4:3e:91:1d:67:00:
51:b5:1f:21:04:75:d9:69:cb:85:56:f0:63:86:cb:2e:1d:17:
7f:c1:6f:c5:ba:af:bf:d1:86:1f:c0:7c:ab:84:18:48:0a:6e:
dd:78:56:93:e1:18:2d:04:dc:fe:54:f4:d3:d5:3e:a7:48:c7:
a7:e3:e2:db:36:05:ca:7a:7f:58:2a:a1:a1:be:da:7b:1a:a7:
78:62:dc:6f:47:33:e4:50:7a:10:3f:37:8e:f8:dd:6e:4a:e1:
e2:07:14:89:22:1e:c7:df:c0:54:88:d2:a0:d7:e4:49:6e:de:
e7:29:70:3e:7d:20:df:67:33:68:a2:96:9f:10:2e:98:b7:4f:
c3:7f:69:a5:06:c2:e8:c8:53:fe:23:82:25:51:a3:82:14:d0:
81:80:37:0a:61:c2:72:a9:47:be:a3:af:ac:07:9f:f8:07:07:
ec:09:2f:7c:8d:77:24:20:ff:6b:b6:9b:e7:da:9a:d2:79:af:
82:98:df:3a:3d:50:13:60:3e:50:df:47:17:6d:62:84:2c:75:
c1:72:67:1e:c9:73:ad:36:e2:21:59:56:3d:87:79:60:f5:fa:
fd:ba:1f:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3
RDEwMkVBQ0EwHhcNMjYwODE4MTkwNTMwWhcNMjYwODI1MTkwNTMwWjAYMRYwFAYD
VQQDEw02YTg0YWNmYi05NjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4KRy9qAnMhZu9y+gmabmK5qSPRfRyaHHrqxE5OQNLIch49dlvDw2etU8JZrW
gjvj5Qy2FIthLqVifz2E6z//SixpqgujntMauYIJGMXn9/ENLXMNMV+k1Ikci6zj
m2hq73xmdQpdEW8bkbgaOONyFOwYZvtoiSTY6jvVr7j6eR07iG5/zGMIjfWjRFyE
EYGs0dP3wGzQ7eHuYB9JQNUuP83SrLEs/J7BCL+R/I0+pXagDeKD1u3ZXEcpHbIY
usO3R1/63bZU6M0H9LXyFAAx9esmz4sIXyRSNA5vRjCvroXOJAbpN8vgjOqw4K3q
IioUwtoeEWYi3K53J2RFIFKEZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7pc1sM
QfFr4qcGufwe7CbDv/H2MB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC
NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0
QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0f5bVOWwqaUwhR82Q/HBngiA1pLwG51sptZff2f11D6RHWcAUbUfIQR12WnL
hVbwY4bLLh0Xf8Fvxbqvv9GGH8B8q4QYSApu3XhWk+EYLQTc/lT009U+p0jHp+Pi
2zYFynp/WCqhob7aexqneGLcb0cz5FB6ED83jvjdbkrh4gcUiSIex9/AVIjSoNfk
SW7e5ylwPn0g32czaKKWnxAumLdPw39ppQbC6MhT/iOCJVGjghTQgYA3CmHCcqlH
vqOvrAef+AcH7AkvfI13JCD/a7ab59qa0nmvgpjfOj1QE2A+UN9HF21ihCx1wXJn
HslzrTbiIVlWPYd5YPX6/bofYQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:34 2026 by rpki-client