
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json)
Hash identifier: 37yR9ljqawIIEdd7VTAaSC0kck3nkYqLTlfGi0jxgwY=
Subject key identifier: FD:0D:4E:97:CA:CC:B4:30:03:F3:C0:DA:8C:62:E0:8E:17:65:31:AA
Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Certificate serial: 0DD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
Manifest number: 0D80
Signing time: Sat 10 Oct 2026 18:17:58 +0000
Manifest this update: Sat 10 Oct 2026 18:17:58 +0000
Manifest next update: Sat 17 Oct 2026 18:17:58 +0000
Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: pcOLUDevSqJ1LL7g+OsxACIABrlaH+tR2HdLPeFrOiE=)
2: B64A364EA60911F18684AA644611F970.roa (hash: Yhzu3EEtztbhJR6dKRXKOq7uPqc63g/g/wW5ua5XriQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 18:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3539 (0xdd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Validity
Not Before: Oct 10 18:17:58 2026 GMT
Not After : Oct 17 18:17:58 2026 GMT
Subject: CN=6aca8156-f0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:b8:7c:5c:62:1f:67:7a:20:98:d4:db:ee:
47:ff:4a:2b:4e:67:a7:24:0f:33:b5:20:c1:61:d6:
48:c4:c2:dd:fd:48:5c:53:f1:7e:2f:8d:f1:33:de:
43:cf:3b:64:94:ad:a1:5e:d3:b1:a2:ff:76:76:66:
1e:ae:4b:8e:39:bb:98:b4:f9:49:e1:bf:2a:60:a0:
f2:e5:e2:86:43:b1:ca:33:46:23:54:d2:fd:ed:6b:
67:72:f7:53:6d:67:5f:c7:a7:39:31:c9:17:ec:9b:
fc:1a:20:7b:eb:0e:c7:f1:7d:21:08:9b:23:89:7c:
7d:86:60:df:3e:8b:11:fd:69:7a:dc:19:a8:d3:7c:
dd:e7:95:b7:5f:b6:00:53:9a:8a:04:21:14:fd:7d:
5f:a7:1e:06:0c:56:25:cc:69:ae:ae:73:60:00:32:
bb:b1:92:b2:f6:a6:67:6d:05:87:a9:4c:77:ed:aa:
db:99:2a:ef:48:f6:a8:04:c9:6b:99:ab:59:05:f1:
70:fc:91:d2:c5:a7:4e:9f:5c:44:00:a7:30:3e:a7:
07:10:ba:7d:4d:f3:99:73:b5:2c:8d:59:bf:9e:c6:
cf:a5:b0:a5:60:cd:93:a1:6a:90:a4:52:41:bc:ea:
ca:82:eb:b8:5c:7d:24:85:27:ba:73:97:bc:43:0e:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:4E:97:CA:CC:B4:30:03:F3:C0:DA:8C:62:E0:8E:17:65:31:AA
X509v3 Authority Key Identifier:
keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1c:de:04:2d:7f:ea:a9:2a:fe:89:14:ad:1a:7a:85:03:ca:
1c:64:35:55:0b:4a:2f:40:50:a7:26:c9:2e:45:0e:2c:43:83:
fa:6e:d7:49:9d:42:2b:ca:83:61:0f:48:89:20:b2:32:91:56:
d9:8b:05:88:96:ef:4b:b6:31:a1:4d:5b:01:d4:30:03:b9:3e:
cd:40:db:8d:2c:1e:77:c3:9c:32:21:7b:23:cb:6d:97:d1:39:
04:4d:e7:5a:fd:77:6f:4f:6e:b9:b9:54:75:29:ea:84:b9:cf:
45:51:59:de:39:63:50:54:22:80:1c:0e:13:af:3d:94:8b:e1:
d4:a0:16:be:4b:ab:96:25:42:10:11:4f:7d:fb:fd:d3:28:62:
99:aa:31:0a:ad:00:a3:e0:9c:58:9f:f8:a0:e7:5e:c8:38:62:
2d:59:62:c5:58:f4:2d:60:18:98:cc:20:aa:8b:69:60:31:f4:
db:b2:fe:86:63:07:a3:c0:19:e7:4e:6c:b0:e4:89:04:fa:0b:
cd:bc:c4:30:41:29:ca:39:c9:53:be:25:e4:e5:2c:f8:67:20:
46:de:b5:73:32:25:ec:19:0a:33:69:2d:e5:56:ed:8e:17:a3:
0b:ad:54:3e:4c:05:4c:7d:d2:d8:91:ff:e5:15:93:fb:94:4f:
14:d6:95:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:01:47 2026 by rpki-client