
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
File: lslPY1zHgehZd0oRr3Nii2CmVs8.mft (raw, json)
Hash identifier: Cbq5kN/X5fNCs+qAYvawPFbutc7AwfE5W5SDjrCI2FU=
Subject key identifier: F4:D4:04:98:9A:29:87:6F:AA:E3:2C:B8:BF:F5:7F:26:88:FC:04:3C
Authority key identifier: 96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF
Certificate issuer: /CN=A9181803/serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
Manifest number: 88
Signing time: Wed 21 Oct 2026 08:14:47 +0000
Manifest this update: Wed 21 Oct 2026 08:14:46 +0000
Manifest next update: Wed 28 Oct 2026 08:14:46 +0000
Files and hashes: 1: lslPY1zHgehZd0oRr3Nii2CmVs8.crl (hash: ZMOrHr0giIZaI5Ot09EpojKEnAHnYFJt/B02hUc6IYM=)
2: 38D7A57E02B311F1B5A042A33E3D8C67.roa (hash: i+cONdh4kL/zy5o+bEmmDqg3gYQAN5WXBgxD3TrRI7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl
rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181803, serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
Validity
Not Before: Oct 21 08:14:46 2026 GMT
Not After : Oct 28 08:14:46 2026 GMT
Subject: CN=6ad87477-8dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:fa:2e:1b:fa:3c:c5:bd:73:64:69:e1:15:
1a:a6:b5:db:8d:33:a9:84:b9:8e:32:4f:bc:9b:0d:
85:f7:66:39:49:29:63:15:28:b3:72:b4:2e:69:17:
d3:b4:cc:6d:87:2b:70:76:91:fa:7b:a4:7c:92:a2:
49:a0:00:f9:b3:b8:eb:82:ed:50:cf:f8:e0:6e:dd:
53:f9:0f:6b:27:64:f8:69:b0:f4:3b:36:1e:2d:15:
bf:5d:0d:2d:4c:fa:70:11:63:4b:c8:56:a2:ec:e5:
a8:56:70:2e:56:d0:9f:3e:c3:b6:9d:bd:6c:8d:22:
13:99:0e:bd:42:93:f1:cc:39:e8:ef:c5:4c:eb:dc:
82:13:f0:73:19:d7:8a:0a:a4:80:ad:b7:a3:04:02:
cd:5f:83:5c:a3:d1:8f:c9:85:61:6a:0c:9c:24:59:
52:37:4f:11:80:36:78:79:32:3f:39:86:e7:96:5f:
44:e6:b5:e1:15:7d:9c:dd:40:2e:54:22:a4:fe:2a:
6a:78:df:b7:1a:5f:0a:55:b7:89:87:f3:8f:e5:5f:
ed:4b:cf:d6:3b:bc:72:f3:5e:62:8a:84:ee:a4:8f:
1f:90:c7:4f:84:59:83:04:b5:7c:b9:37:c2:2c:a1:
4d:75:c0:7a:ed:4a:63:b9:e8:49:1f:4a:c2:36:ce:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:04:98:9A:29:87:6F:AA:E3:2C:B8:BF:F5:7F:26:88:FC:04:3C
X509v3 Authority Key Identifier:
keyid:96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:54:15:a5:90:9b:90:8e:c5:04:a3:c0:3f:36:54:da:e6:6a:
71:47:89:b8:4e:e6:50:5d:e5:55:91:8d:8e:9c:fb:1b:f8:c5:
07:62:86:58:74:a8:26:66:4e:8b:1a:eb:38:3d:87:0d:ed:08:
b0:de:79:fb:a6:ad:80:30:70:d6:61:32:4c:a8:b7:93:6a:fb:
c7:86:2e:ee:e1:8e:39:20:5b:16:db:4f:d4:f2:12:bc:ce:1e:
47:aa:bb:5f:51:34:58:0e:27:2a:a4:f3:01:d8:77:73:b9:6f:
ff:fb:0f:b5:99:2b:e0:d0:2f:55:8a:8c:fb:f7:7e:ba:5d:d3:
31:02:58:e6:eb:b2:52:2c:2c:47:d4:cf:1b:a7:a2:58:c6:66:
48:d5:9d:16:af:30:fb:37:b6:0a:72:26:a9:e1:6c:07:11:b3:
c4:eb:0f:75:dc:dc:71:ce:eb:96:3d:79:c9:62:89:b2:d8:47:
2d:2e:73:20:23:0d:27:39:3d:6e:f9:f6:5f:d4:02:d3:5f:1d:
98:1d:08:6a:04:94:3f:b3:a9:fc:7b:e6:a6:88:84:aa:73:7c:
d9:43:f9:fd:c4:3d:8c:c9:27:f9:73:96:c4:06:cb:4e:dc:8f:
ce:84:2c:4f:6b:54:38:c8:a2:6f:9b:30:de:7a:b7:a4:52:ad:
43:61:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 00:08:03 2026 by rpki-client