
$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json)
Hash identifier: BGA+29s4Dy/CeUuvtXx7aTyXzFBRL3P7r8rkH4sVXP0=
Subject key identifier: 78:29:DD:E3:69:42:9A:07:98:6D:0B:21:2E:C8:7F:20:8C:2F:4A:43
Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Certificate serial: 0D2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
Manifest number: 0CFE
Signing time: Sat 04 Apr 2026 18:12:46 +0000
Manifest this update: Sat 04 Apr 2026 18:12:46 +0000
Manifest next update: Sat 11 Apr 2026 18:12:46 +0000
Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: amb/jhu1vQPgP2/0yXKJSitjh9aNM9DRQ3niIzWTLUM=)
2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: 8PpRKr88j1UQz0on0wf3wxEYqhe8qTzmSyhtAroOiwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3375 (0xd2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Validity
Not Before: Apr 4 18:12:46 2026 GMT
Not After : Apr 11 18:12:46 2026 GMT
Subject: CN=69d1549e-fa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:14:53:2d:76:61:4e:bb:d2:7a:37:49:6b:
60:5c:dc:b4:2e:28:7f:d8:8e:06:a2:6f:78:e5:ba:
ce:2b:d4:e4:27:13:1f:fc:6f:24:b9:cb:ef:54:78:
d7:2e:aa:48:d0:4c:08:07:88:bc:c3:8c:cc:b9:ff:
77:c3:95:74:1b:4c:7d:84:69:15:a9:63:8c:67:e2:
2b:08:44:96:c6:af:3e:3f:61:33:ab:0e:eb:6f:e0:
ad:ed:18:1a:ea:6a:96:b0:27:69:25:ed:fa:81:50:
bf:26:c7:c1:72:e7:55:39:05:4c:a0:bd:5a:59:d6:
ef:88:c0:4d:15:f4:da:46:f7:40:fc:be:0d:61:3b:
c5:06:62:f2:cc:0d:b3:64:ce:a1:3c:04:d7:c0:2e:
59:8a:6b:20:24:ba:44:f8:7f:f2:fb:df:81:f3:3a:
56:67:ff:ec:1d:9a:20:7b:10:86:c5:f8:44:c9:1b:
bb:4d:9a:09:28:b8:b9:4e:b1:e9:55:05:ab:04:e4:
f6:75:e8:94:7a:85:35:8c:6c:24:22:90:fd:32:77:
f2:a9:b8:64:14:52:76:98:6a:e0:83:bb:e0:65:2b:
85:9d:ba:37:ca:5c:b2:12:7c:fb:ba:45:76:c0:a4:
e7:88:81:37:59:95:f4:7d:f4:2d:d1:bf:36:0c:85:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:DD:E3:69:42:9A:07:98:6D:0B:21:2E:C8:7F:20:8C:2F:4A:43
X509v3 Authority Key Identifier:
keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:8a:04:b2:49:7b:a9:d8:e6:be:c1:06:1a:2d:69:29:a3:d3:
e1:e0:07:8a:76:c2:8b:d7:3b:5c:d4:4c:ef:71:f5:e8:4d:a2:
0e:ac:cb:7a:f1:56:6d:a5:bb:2d:07:b3:2f:06:4d:97:10:fa:
1b:78:46:aa:7e:19:a4:33:ee:51:3a:a7:9b:1b:b8:4a:ce:32:
1f:a6:9c:39:03:3f:0e:75:97:35:c5:54:37:fc:e6:71:f1:34:
eb:c0:b7:5b:ac:3a:f4:c9:4a:42:a4:71:8b:7c:ec:d2:30:ee:
82:ec:21:da:61:6f:45:3f:43:7f:aa:46:e7:e1:3d:78:e5:16:
5a:5d:26:db:ff:d1:d0:cd:5c:f3:1a:78:98:8a:25:a4:f7:44:
56:cc:69:bd:dd:ca:28:b7:eb:f7:e5:85:2a:7a:c5:52:9e:9c:
6e:5b:8d:48:7a:ef:50:7e:5e:6d:8d:0e:a3:18:03:d0:b9:44:
b6:f5:b6:34:0f:0a:23:65:d8:38:20:f5:ff:70:40:79:08:31:
20:8e:f4:43:85:88:71:18:fa:7c:b7:f2:32:fc:d2:86:73:3d:
e2:6e:a6:6f:85:36:71:b1:8e:8e:b5:e5:e0:fc:17:d6:0e:d6:
77:c5:df:40:50:39:d1:8a:92:7e:97:3b:d5:5e:0a:43:45:24:
6e:17:cd:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz
NkREOENBMzQwHhcNMjYwNDA0MTgxMjQ2WhcNMjYwNDExMTgxMjQ2WjAYMRYwFAYD
VQQDEw02OWQxNTQ5ZS1mYTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwxoUUy12YU670no3SWtgXNy0Lih/2I4Gom945brOK9TkJxMf/G8kucvvVHjX
LqpI0EwIB4i8w4zMuf93w5V0G0x9hGkVqWOMZ+IrCESWxq8+P2Ezqw7rb+Ct7Rga
6mqWsCdpJe36gVC/JsfBcudVOQVMoL1aWdbviMBNFfTaRvdA/L4NYTvFBmLyzA2z
ZM6hPATXwC5ZimsgJLpE+H/y+9+B8zpWZ//sHZogexCGxfhEyRu7TZoJKLi5TrHp
VQWrBOT2deiUeoU1jGwkIpD9MnfyqbhkFFJ2mGrgg7vgZSuFnbo3ylyyEnz7ukV2
wKTniIE3WZX0ffQt0b82DIWSuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHgp3eNp
QpoHmG0LIS7IfyCML0pDMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5
NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo
cThqNHo5YjJZaWMyM1l5alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkooEskl7qdjmvsEGGi1pKaPT4eAHinbCi9c7XNRM73H16E2iDqzLevFWbaW7
LQezLwZNlxD6G3hGqn4ZpDPuUTqnmxu4Ss4yH6acOQM/DnWXNcVUN/zmcfE068C3
W6w69MlKQqRxi3zs0jDuguwh2mFvRT9Df6pG5+E9eOUWWl0m2//R0M1c8xp4mIol
pPdEVsxpvd3KKLfr9+WFKnrFUp6cbluNSHrvUH5ebY0OoxgD0LlEtvW2NA8KI2XY
OCD1/3BAeQgxII70Q4WIcRj6fLfyMvzShnM94m6mb4U2cbGOjrXl4PwX1g7Wd8Xf
QFA50YqSfpc71V4KQ0UkbhfNAA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:46 2026 by rpki-client