
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917559F/69FF3158ABFA11F183BC45A46911F970/llUJncEBy87IG3rIBzR108z8gN8.mft
File: llUJncEBy87IG3rIBzR108z8gN8.mft (raw, json)
Hash identifier: JqDTKmSJkfeAh1Z+CAu9v2Jmu4oI8UFx+Q45sojimXE=
Subject key identifier: 02:15:F5:5A:42:8A:18:0B:48:85:90:46:05:CE:F5:41:C3:35:6F:DD
Authority key identifier: 96:55:09:9D:C1:01:CB:CE:C8:1B:7A:C8:07:34:75:D3:CC:FC:80:DF
Certificate issuer: /CN=A917559F/serialNumber=9655099DC101CBCEC81B7AC8073475D3CCFC80DF
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llUJncEBy87IG3rIBzR108z8gN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917559F/69FF3158ABFA11F183BC45A46911F970/llUJncEBy87IG3rIBzR108z8gN8.mft
Manifest number: 10
Signing time: Sat 03 Oct 2026 09:52:48 +0000
Manifest this update: Sat 03 Oct 2026 09:52:47 +0000
Manifest next update: Sat 10 Oct 2026 09:52:47 +0000
Files and hashes: 1: llUJncEBy87IG3rIBzR108z8gN8.crl (hash: qjnfm3komZzcsKvZNiEgAlKsFkfsgaWNtgf2lFkAA2w=)
2: B6B30178ABFA11F1AA2D28C66911F970.roa (hash: 7K0s8PKnCZoz+K5gK2x2m+423CdhjoArv3HOI4Wo3FI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917559F/69FF3158ABFA11F183BC45A46911F970/llUJncEBy87IG3rIBzR108z8gN8.crl
rsync://rpki.apnic.net/member_repository/A917559F/69FF3158ABFA11F183BC45A46911F970/llUJncEBy87IG3rIBzR108z8gN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llUJncEBy87IG3rIBzR108z8gN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917559F, serialNumber=9655099DC101CBCEC81B7AC8073475D3CCFC80DF
Validity
Not Before: Oct 3 09:52:47 2026 GMT
Not After : Oct 10 09:52:47 2026 GMT
Subject: CN=6ac0d06f-8ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:11:d5:76:4e:fc:fb:96:51:1b:6e:9f:de:
87:73:6b:03:6a:3d:52:03:04:c3:05:df:bd:0f:e9:
05:2e:b0:32:db:72:ea:5c:b4:bb:dc:84:d1:ad:d5:
20:ef:16:02:5d:9f:40:26:69:d4:56:9e:66:7b:af:
a8:fe:86:9a:fb:9d:8f:05:5f:68:e4:1a:c3:83:5d:
7f:94:2b:c4:1e:b9:f0:21:07:62:2f:d1:dd:d6:db:
3b:d9:ee:36:38:25:57:a6:22:32:05:60:b3:a2:7d:
9e:e6:17:c8:d2:56:82:0d:0c:7a:96:b9:2e:a8:a7:
ff:e8:c8:b5:e4:81:c9:0a:4c:64:af:bd:91:18:81:
ef:e3:49:fe:90:58:d9:5d:86:cf:f2:32:0b:a5:48:
b9:57:55:73:24:aa:38:e5:17:63:2c:25:53:9e:c6:
48:3d:0c:8f:2d:e1:7d:bb:19:cb:54:ac:a4:7b:ce:
06:00:f1:dc:c6:34:49:68:86:2f:58:70:d7:86:a4:
3e:ac:14:1c:e0:79:20:ff:70:7a:82:50:b3:c9:77:
1e:d7:90:bc:c4:29:64:13:da:07:c3:08:71:1a:d3:
60:7a:72:d9:dd:bf:7e:4a:12:04:3a:25:4d:25:0c:
ba:ef:f2:9b:f6:b1:20:1d:5a:7a:d6:38:ae:a0:cf:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:15:F5:5A:42:8A:18:0B:48:85:90:46:05:CE:F5:41:C3:35:6F:DD
X509v3 Authority Key Identifier:
keyid:96:55:09:9D:C1:01:CB:CE:C8:1B:7A:C8:07:34:75:D3:CC:FC:80:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917559F/69FF3158ABFA11F183BC45A46911F970/llUJncEBy87IG3rIBzR108z8gN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llUJncEBy87IG3rIBzR108z8gN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917559F/69FF3158ABFA11F183BC45A46911F970/llUJncEBy87IG3rIBzR108z8gN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1e:c9:51:6a:02:d2:a5:16:2b:fe:5f:95:39:ea:96:0c:04:
dc:17:c0:e3:63:f5:16:02:2a:f8:e5:45:c6:9c:06:2a:c3:84:
0d:87:b7:a7:e8:35:19:af:6c:58:ce:a6:ef:68:4f:90:df:32:
9f:3f:de:09:43:c4:fc:9b:4c:78:a7:e2:1b:8e:d4:48:f3:0d:
c3:7f:a4:83:e3:a8:f2:e4:86:8e:e5:f6:8c:e2:ed:95:45:b4:
ae:e6:1c:ef:d0:82:35:fa:e0:aa:83:ef:71:04:27:f0:fa:f8:
29:2b:87:8f:b7:35:b3:80:e6:d2:96:b7:03:33:84:36:19:6a:
5b:9d:41:2e:2c:56:b4:5c:f9:83:da:42:f1:6d:01:2a:f1:30:
ea:f6:c5:2e:40:85:60:5e:34:ac:ed:e5:47:97:8d:df:ba:e8:
47:5c:d5:65:93:32:5d:fe:ed:ab:a3:a3:7a:a1:df:bc:7d:1b:
9e:2e:e3:b1:00:22:b0:e5:0a:9a:d5:16:9b:5f:f5:ae:d9:db:
08:d8:22:ad:36:ee:cb:60:0f:ac:12:3f:ae:9b:36:7c:b9:7f:
4d:1e:91:45:0f:85:61:87:57:fa:a8:0c:94:ef:ac:52:6e:33:
65:82:c9:5d:58:14:5f:1c:9e:44:d7:40:2f:88:8b:9a:0a:cd:
19:f1:bc:04
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NTU5RjExMC8GA1UEBRMoOTY1NTA5OURDMTAxQ0JDRUM4MUI3QUM4MDczNDc1RDND
Q0ZDODBERjAeFw0yNjEwMDMwOTUyNDdaFw0yNjEwMTAwOTUyNDdaMBgxFjAUBgNV
BAMTDTZhYzBkMDZmLThhYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+PxHVdk78+5ZRG26f3odzawNqPVIDBMMF370P6QUusDLbcupctLvchNGt1SDv
FgJdn0AmadRWnmZ7r6j+hpr7nY8FX2jkGsODXX+UK8QeufAhB2Iv0d3W2zvZ7jY4
JVemIjIFYLOifZ7mF8jSVoINDHqWuS6op//oyLXkgckKTGSvvZEYge/jSf6QWNld
hs/yMgulSLlXVXMkqjjlF2MsJVOexkg9DI8t4X27GctUrKR7zgYA8dzGNElohi9Y
cNeGpD6sFBzgeSD/cHqCULPJdx7XkLzEKWQT2gfDCHEa02B6ctndv35KEgQ6JU0l
DLrv8pv2sSAdWnrWOK6gz0UVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAhX1WkKK
GAtIhZBGBc71QcM1b90wHwYDVR0jBBgwFoAUllUJncEBy87IG3rIBzR108z8gN8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NTlGLzY5RkYzMTU4QUJG
QTExRjE4M0JDNDVBNDY5MTFGOTcwL2xsVUpuY0VCeTg3SUczcklCelIxMDh6OGdO
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbGxVSm5jRUJ5ODdJRzNySUJ6UjEwOHo4Z044LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1
NTlGLzY5RkYzMTU4QUJGQTExRjE4M0JDNDVBNDY5MTFGOTcwL2xsVUpuY0VCeTg3
SUczcklCelIxMDh6OGdOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBvHslRagLSpRYr/l+VOeqWDATcF8DjY/UWAir45UXGnAYqw4QNh7en6DUZr2xY
zqbvaE+Q3zKfP94JQ8T8m0x4p+IbjtRI8w3Df6SD46jy5IaO5faM4u2VRbSu5hzv
0II1+uCqg+9xBCfw+vgpK4ePtzWzgObSlrcDM4Q2GWpbnUEuLFa0XPmD2kLxbQEq
8TDq9sUuQIVgXjSs7eVHl43fuuhHXNVlkzJd/u2ro6N6od+8fRueLuOxACKw5Qqa
1RabX/Wu2dsI2CKtNu7LYA+sEj+umzZ8uX9NHpFFD4Vhh1f6qAyU76xSbjNlgsld
WBRfHJ5E10AviIuaCs0Z8bwE
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:46:40 2026 by rpki-client