
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier: 4iZ2qggGGIYF8s2xktA10oUo1gC1a/A0jQXi7d12CyE=
Subject key identifier: C3:C4:85:6B:36:74:C6:99:1F:65:BC:F8:09:12:A6:E0:A6:99:81:AC
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial: 0D4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number: 0D34
Signing time: Sun 04 Oct 2026 18:19:02 +0000
Manifest this update: Sun 04 Oct 2026 18:19:02 +0000
Manifest next update: Sun 11 Oct 2026 18:19:02 +0000
Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: ssp+QVPKhPQOHCJWpUd/f5iq2LSoBTJPQ4h/L0de3is=)
2: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: PU5K85ByPeJlmo+7kA0ZUbRl2pb30nPNJ3u58gZkpSk=)
3: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: /MtJQ2aFPi8HYTchwzSmXpRAnCoGqWuQ+vHypfNM8zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Validity
Not Before: Oct 4 18:19:02 2026 GMT
Not After : Oct 11 18:19:02 2026 GMT
Subject: CN=6ac29896-4c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d4:af:be:5f:4c:e1:1c:d5:06:fe:61:23:6c:
d0:bc:f8:08:aa:02:f5:a7:0a:0f:7b:38:0a:93:1f:
dc:65:6b:0a:46:b3:e8:93:3c:f2:a9:9b:d3:32:72:
22:fe:85:e0:62:ca:2f:89:2b:fb:31:cc:c7:4b:a0:
be:e3:11:03:2c:26:d9:9d:59:f6:83:f6:5e:16:ae:
55:fc:52:1a:3e:9e:a9:7d:0e:df:4f:f3:4a:1f:38:
f3:f9:ad:fa:ab:5d:a1:26:e1:cb:25:43:bb:cb:e8:
0f:ad:46:08:13:ae:86:58:e7:98:80:86:99:9a:1b:
e6:85:db:33:c2:92:fe:2c:59:a4:eb:a7:a7:fb:1e:
82:38:14:ce:d7:73:48:4f:b9:c3:97:d8:05:2e:55:
fa:50:a8:0e:72:76:d9:7c:84:84:2e:59:32:11:09:
c1:5a:90:ac:83:8e:d7:33:84:a1:56:b0:74:4a:47:
20:5b:68:94:b1:6d:8f:d3:80:72:aa:79:ac:06:78:
b0:81:14:b4:e4:8d:52:b5:d2:d8:9f:c0:01:f0:0e:
31:9e:a6:3f:bd:6d:ab:aa:fc:e0:fa:9f:e1:4f:54:
25:37:20:fa:b7:50:cd:68:3c:5a:a2:f5:ca:3d:f5:
aa:e1:ae:86:5f:d5:25:94:cb:c8:98:ce:4d:e5:4a:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C4:85:6B:36:74:C6:99:1F:65:BC:F8:09:12:A6:E0:A6:99:81:AC
X509v3 Authority Key Identifier:
keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:15:54:7a:3f:3a:55:8c:c2:60:db:90:ef:9b:f9:b7:20:78:
30:9c:33:10:bf:33:04:d4:9c:4e:7c:0b:d2:91:16:42:59:a8:
37:9f:ad:0d:c1:97:8e:93:d8:a8:27:e5:e5:69:e7:56:45:f6:
35:23:87:8e:f4:61:90:e1:9f:55:64:bf:87:43:e9:20:4b:4d:
78:46:38:4a:e9:d9:63:c9:84:10:f5:1a:4b:47:8e:78:68:71:
cc:c6:d3:f0:52:aa:d1:39:d5:ed:e4:9c:df:8a:2d:5e:c3:ee:
88:6f:39:18:64:74:c2:de:44:21:28:1a:aa:55:57:8b:06:d5:
a3:33:1f:11:32:7a:e0:3f:99:23:af:6b:d8:3a:ec:6a:7d:c3:
b5:6a:96:db:c9:75:5d:2a:89:4b:7f:7f:17:cf:01:c3:4e:e2:
54:5a:c2:a9:c8:9f:36:37:08:fa:a3:ea:36:84:68:3a:dd:e2:
d8:8c:f3:5c:bc:8c:6a:03:08:60:a8:ce:17:90:b4:0b:97:42:
56:ae:97:62:53:aa:0b:90:da:02:1e:8f:8f:30:d5:9e:a0:c4:
e3:7a:53:77:9a:e9:e7:60:40:2e:9c:b2:2c:35:75:c5:4d:59:
70:6e:61:0b:93:fe:61:d8:69:c8:1f:73:db:b4:a7:f5:fa:63:
30:ca:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:26:28 2026 by rpki-client