
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
File: LlZ8tNZla-4M-dworw3nIVt_Z-g.mft (raw, json)
Hash identifier: /Sm2s/35EZHVHGN8S/mECZZmRd0FcqJYajGdeg7kDBk=
Subject key identifier: D8:0F:0D:C7:0E:59:DC:03:5B:52:D9:56:6C:1E:92:6E:9E:AD:CC:25
Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
Certificate issuer: /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
Manifest number: 7E
Signing time: Sat 03 Oct 2026 08:28:37 +0000
Manifest this update: Sat 03 Oct 2026 08:28:36 +0000
Manifest next update: Sat 10 Oct 2026 08:28:36 +0000
Files and hashes: 1: LlZ8tNZla-4M-dworw3nIVt_Z-g.crl (hash: cER0Jxk5arDJ06UOMbNOZMBIiM4ArnsQYt68HpLgnsM=)
2: F7C02BF6885911F1B22A50DC5811F970.roa (hash: /wR6FGdhOPqF6g3hYPb/kar7/EqNQG1KP1NPSwyZHb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl
rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
Validity
Not Before: Oct 3 08:28:36 2026 GMT
Not After : Oct 10 08:28:36 2026 GMT
Subject: CN=6ac0bcb4-b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:33:09:44:4f:5a:96:74:e2:f8:2c:71:59:
5b:9e:99:31:7b:ff:b5:58:99:a9:d9:4a:23:d6:4c:
d8:6f:95:23:bd:cf:68:45:4c:d7:81:27:df:de:93:
a0:b1:bb:8d:6c:4a:99:88:03:ad:15:e8:07:b6:a6:
17:21:ab:6e:85:8e:52:df:91:20:e8:38:68:30:71:
c7:f5:f8:8b:8c:ef:56:d6:c6:6b:c5:5e:f3:f1:ef:
b1:19:35:01:a4:9c:12:21:83:47:ca:0e:34:37:03:
9a:a4:5f:eb:45:6f:ff:0f:fd:e7:8a:2e:0b:a5:7e:
c6:4d:00:6b:30:6a:53:b4:24:10:94:6e:39:53:91:
c1:0d:72:0c:ff:1b:55:39:67:d1:9a:a2:04:4d:65:
a6:a5:26:ad:4b:8e:03:88:bb:9a:b4:4e:7b:ef:e4:
58:a4:8d:53:18:2a:f6:81:d7:69:7a:be:ae:53:ea:
66:4e:bb:f8:5d:01:48:04:39:9d:c1:7d:43:33:7d:
61:39:02:96:8e:93:7d:b8:66:03:53:b4:cd:d2:cf:
71:06:44:32:77:cd:ef:cd:99:3b:74:23:c2:ba:23:
85:49:ba:39:92:1a:15:c2:69:06:d9:9e:cc:b3:e4:
4d:dd:06:fa:7d:cc:02:2e:2c:26:0d:17:f2:f0:e8:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:0D:C7:0E:59:DC:03:5B:52:D9:56:6C:1E:92:6E:9E:AD:CC:25
X509v3 Authority Key Identifier:
keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:0a:df:27:81:e5:22:56:9d:8b:94:80:92:d2:cf:6e:ca:2c:
30:aa:54:d0:32:2a:a7:85:34:3f:54:24:42:d7:93:68:3a:73:
03:49:9c:cf:de:cf:39:54:bd:9e:e0:24:c7:a0:ab:bf:b0:07:
7e:71:86:17:cc:ef:ff:b0:7c:61:dc:72:f8:d2:e9:bc:29:47:
e4:6f:15:8f:2c:ce:29:19:31:59:22:dd:3b:78:66:b8:fe:b9:
ae:4f:2b:fb:5b:be:d1:90:08:45:0f:67:98:77:f1:b3:ae:9c:
54:16:e3:10:9e:90:93:33:c5:b7:12:75:67:28:b6:56:e3:fc:
1e:43:e9:2a:4f:91:a2:ec:27:b7:11:0e:2b:5d:7e:82:eb:90:
9c:fd:40:5e:28:55:47:d9:fd:4b:6e:0c:66:d2:54:ef:da:f9:
26:7a:27:33:30:3b:f2:41:c2:e6:74:fa:4b:5d:74:1b:a2:17:
62:ed:79:7f:14:d6:fa:23:e9:4f:5c:63:c1:1d:d5:6f:b6:4a:
08:12:73:4a:f0:1c:ed:4b:18:ca:a7:a6:0f:71:6e:d7:0e:e3:
9c:7a:3c:11:25:3b:1a:a4:c8:93:ff:3c:dd:a9:97:73:83:9a:
d3:4f:cf:b9:a5:ee:ce:9a:ad:41:bb:c1:37:31:d0:57:23:30:
7c:c8:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:09:54 2026 by rpki-client