
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json)
Hash identifier: dDBUKis1moySrPa4dOw3U3sqtF84svhx4iOIE3kDh4g=
Subject key identifier: 16:B9:30:F6:22:17:97:B8:ED:5C:53:82:11:B2:C0:02:8E:D9:BB:F2
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial: 03CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
Manifest number: 0397
Signing time: Sat 15 Aug 2026 00:46:29 +0000
Manifest this update: Sat 15 Aug 2026 00:46:28 +0000
Manifest next update: Sat 22 Aug 2026 00:46:28 +0000
Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: IU1dAjoUVlMAK9WSNFQBXYYf4xEJFGg++q4VpSnSGc8=)
2: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: WEjLCi1DlMb0pJbL9Z4xrjtw1122zr6GBemO2jaZ1hw=)
3: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: FYMzyNcEn5qwGYhJASILxE4oZoESG/51dhB+oC1Em0M=)
4: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: /voKyazUys3+SCuvprRad6peYAmU9/zZXHb+lbxgXpY=)
5: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: kqpliSLk4gpJx/EOT2g+xNj5gqC5mlAWqnW//7mPB5E=)
6: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: S96e2L/6aXmXiFJ00QZgjPrWRuJuyQ7qqjj+2N0NuLQ=)
7: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: SiY7LuS+ZlIJQnelc/yqPh4vr6EgWEyfHgpapGWLzMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 971 (0x3cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Validity
Not Before: Aug 15 00:46:28 2026 GMT
Not After : Aug 22 00:46:28 2026 GMT
Subject: CN=6a7fb6e5-2312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:9d:f8:f5:1b:de:9f:ff:2f:56:d1:bc:9f:
4c:af:00:7b:74:0d:23:e6:fe:1c:ab:eb:5f:f1:61:
7f:d8:fd:7e:3f:f0:76:da:17:55:fa:d1:e4:d1:30:
c9:aa:00:bf:e7:3e:e6:f6:d5:b0:6a:a3:7d:b7:ff:
bf:10:4e:35:b1:76:a8:dc:34:64:7e:d7:df:65:6a:
fe:95:be:ca:07:5f:42:d5:0b:fc:22:6f:1c:ad:51:
c8:ef:9d:45:68:ff:a8:03:2f:c4:4c:06:ac:90:3d:
71:f4:6e:eb:40:a5:52:79:0c:d3:51:4d:6d:62:ea:
d6:a8:43:1b:8a:e7:b6:5f:af:b1:e9:c7:d8:31:fa:
cd:09:a9:3b:24:08:fc:f8:1f:40:47:74:00:ff:06:
8d:c4:c2:22:d9:7b:2b:e6:d6:94:f7:30:e5:9e:89:
8e:f2:a7:6c:4a:35:0c:6c:aa:b0:9e:1f:ec:36:18:
28:e7:41:67:66:b6:3f:b8:2f:73:4b:74:c2:3b:c4:
d1:63:d8:8f:54:dd:c2:e0:a7:85:18:50:55:81:c1:
f8:03:db:78:82:e3:4b:8d:79:ad:49:02:fe:fc:38:
ee:4f:50:c0:8c:91:16:e2:2a:ca:ed:8a:ea:df:12:
18:0e:9f:50:ac:97:a5:04:74:32:dc:a7:6c:63:a5:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:30:F6:22:17:97:B8:ED:5C:53:82:11:B2:C0:02:8E:D9:BB:F2
X509v3 Authority Key Identifier:
keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d3:db:64:55:98:18:fd:b1:76:6f:d5:21:e6:90:9c:fc:8d:
d8:1d:a2:09:7f:bd:87:7b:4c:ef:0b:77:07:54:12:35:f2:ae:
48:72:41:16:bd:8d:c0:d7:78:e0:c5:f5:5c:88:e0:bb:74:51:
fa:8f:07:c9:12:3e:87:5d:e8:6c:2b:55:d2:af:2b:06:75:2b:
5c:82:fa:5f:f4:a1:f8:7b:e9:4a:5b:fa:82:c2:86:ba:ab:3b:
fb:ce:fa:e6:dc:b3:16:4a:cb:58:87:fb:87:b2:2a:36:2c:9e:
fc:99:b0:c3:d0:cb:e0:fd:35:29:9a:10:ec:01:8f:81:b5:db:
39:61:a1:95:db:80:c6:6d:40:df:cc:ee:a1:31:0b:d7:9c:6b:
00:3d:1f:8e:43:a6:c4:f1:25:58:4e:98:00:47:d7:59:0a:ad:
84:bd:db:89:a9:bb:3d:25:2e:20:e6:ae:b1:df:cb:b5:de:0e:
18:87:34:da:e7:57:23:99:a1:58:35:44:ec:a4:45:9f:9b:41:
bf:4e:f7:69:55:4c:0a:8f:61:45:3b:84:48:2d:b5:3a:50:7f:
2d:35:54:87:f3:43:61:38:db:86:82:e7:08:38:e0:26:20:41:
39:b0:4b:10:a6:fa:d9:68:3c:8c:4d:3b:7c:dc:ed:17:42:cc:
0d:ea:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:16:51 2026 by rpki-client