
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier: jrH1esBbq03dU0aGyukmRniNj/kDw4F2pNvLU6g/lvQ=
Subject key identifier: 49:C4:0D:93:41:F6:7B:36:05:06:55:06:38:92:DA:AE:86:49:52:F7
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial: 0D74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number: 0D54
Signing time: Tue 06 Oct 2026 18:18:54 +0000
Manifest this update: Tue 06 Oct 2026 18:18:53 +0000
Manifest next update: Tue 13 Oct 2026 18:18:53 +0000
Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: 1dzF9wtNSSnnv4tS9AdqDfm1kub1cJu1zmr0hzCkM+Q=)
2: B430443A324211EFB14FB614C4F9AE02.roa (hash: tU8gaO7d0dTIsXKu63i9l0x+lorg+dCIET8GfFai5yA=)
3: FB170730324211EFA9B5F949C4F9AE02.roa (hash: pHFX86MHvlzq5A+QE9ViBmlfsYR674xrKWt28nFo9y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3444 (0xd74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Validity
Not Before: Oct 6 18:18:53 2026 GMT
Not After : Oct 13 18:18:53 2026 GMT
Subject: CN=6ac53b8d-05fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:8d:bc:a9:00:1c:ec:2b:bd:e7:21:01:4d:
d3:a6:7e:09:85:8c:fb:bf:cb:a4:c1:84:c7:46:63:
09:a7:d8:09:16:fb:2f:59:fb:29:69:a0:67:cd:38:
16:7d:48:4f:fe:31:33:8b:d1:8e:c4:4c:27:41:ad:
25:2b:fd:c2:ff:86:b2:bb:be:bb:62:3d:d3:8e:e5:
95:57:8e:af:62:54:c1:19:ce:76:f9:6d:78:52:7e:
e4:5c:eb:0b:b8:63:25:c5:d7:6e:0d:46:a6:71:51:
fa:bd:80:5b:be:59:ce:6a:68:b9:7a:26:75:b0:71:
f6:cb:d9:71:d5:2d:6b:8e:ad:f1:98:af:c7:4f:71:
96:a1:5d:78:a7:4a:cb:b0:d2:f4:6c:09:6e:c8:0b:
a1:75:8b:b2:0c:4a:29:22:61:33:b6:7b:7f:aa:70:
cf:97:5a:89:e2:56:cc:2d:b3:e4:08:a6:e1:ca:5e:
43:05:30:f9:2b:4c:79:b4:8b:1b:c7:03:16:88:9f:
34:16:5f:22:b0:05:93:b3:51:b3:9d:7a:29:7f:dc:
10:9b:ff:24:9f:f8:17:d6:4d:57:20:44:28:af:7e:
cd:5d:35:41:77:f3:1b:ad:a0:f3:31:07:85:1c:d3:
45:a9:28:d4:d0:8f:d2:f8:56:29:ca:bd:0c:96:50:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:0D:93:41:F6:7B:36:05:06:55:06:38:92:DA:AE:86:49:52:F7
X509v3 Authority Key Identifier:
keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:29:44:3a:37:9f:0b:76:16:2b:f6:87:a0:12:6b:b4:ad:
22:44:8e:9b:39:d5:8f:87:e5:40:bf:55:b7:9a:bf:4b:5c:43:
3b:10:98:65:32:92:d4:c7:e9:01:07:1e:22:3f:a0:ea:7a:20:
1d:8d:6c:bf:a7:33:02:23:0d:6d:19:15:a6:c9:ac:3f:c6:cb:
db:8a:a7:b9:c2:c4:74:f4:e0:7f:87:7e:55:92:ea:df:91:6e:
13:21:76:77:25:68:37:67:ad:8b:a9:38:d5:64:dd:01:d2:8c:
3b:4e:d1:73:9b:80:ad:e0:ac:19:38:5b:3b:22:5f:65:b8:ae:
8d:cb:e3:de:24:04:4a:7a:e7:fc:c6:81:7a:40:3e:ec:53:e6:
58:d3:76:30:5a:58:f4:45:71:ab:74:47:9c:1a:4e:cd:85:50:
e5:ec:23:05:8b:e4:8e:2c:44:16:22:01:66:a3:c7:95:c4:94:
3e:c5:4d:95:2b:5e:c1:00:60:25:0b:48:d2:90:c6:9c:24:a1:
b3:2b:1a:5c:5c:ff:3d:2e:57:50:00:51:dd:79:79:52:66:d6:
3a:5f:c1:67:38:ee:7e:33:ba:23:04:3d:f3:77:fb:2c:27:1b:
d1:a0:2c:57:bc:07:2c:3f:c0:28:0e:c9:27:d0:29:78:78:eb:
c6:05:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:56:47 2026 by rpki-client