
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier: 1nT6hdUHuuxTJIKiynE1FmXbj21EzkHPfTnModfC7SA=
Subject key identifier: C6:9A:96:9E:0D:51:C5:A7:9D:E2:F2:F0:36:90:11:5C:11:F4:E2:DE
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial: 0D57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number: 0D39
Signing time: Tue 18 Aug 2026 18:29:09 +0000
Manifest this update: Tue 18 Aug 2026 18:29:08 +0000
Manifest next update: Tue 25 Aug 2026 18:29:08 +0000
Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: mOrgVZVdLXGKlXpUS+syFxhlGh2yaeIAVUtAmWCPqe8=)
2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: HVckhDYyXfabBBTw5QKnMftqCm/CyMEWw6vhsSVFD98=)
3: B430443A324211EFB14FB614C4F9AE02.roa (hash: AzFqYClBcneb2uXCI+dnrAdcY2giqvGMeQmemVnunHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3415 (0xd57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Validity
Not Before: Aug 18 18:29:08 2026 GMT
Not After : Aug 25 18:29:08 2026 GMT
Subject: CN=6a84a475-bc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:13:1f:9b:1a:91:c4:06:d6:25:69:f8:ee:
ed:53:2f:53:15:00:bc:00:27:c6:9e:73:1f:44:e8:
38:74:dc:84:6e:53:3b:4d:d3:29:96:52:ec:c0:30:
c6:fd:26:ac:fa:0a:4a:3f:f4:fb:76:df:7b:85:1a:
6a:63:99:98:ad:40:11:a6:dd:fb:cc:49:dc:92:23:
e7:60:7b:42:b8:b6:2c:aa:75:7c:c4:9b:e0:3b:c7:
e4:c1:0a:d4:fe:bd:78:5a:ad:c4:42:17:a6:0d:b4:
2d:77:41:9d:d9:6d:05:17:6c:71:90:6a:28:54:cd:
cb:e5:d4:33:90:3f:12:15:c2:ea:02:36:53:92:74:
5c:13:e8:bd:1c:c1:a8:0b:d8:28:1d:ca:7c:d2:aa:
97:63:ad:55:38:37:92:6a:b5:8a:58:a7:71:8a:cf:
41:5c:14:06:5c:76:61:45:ce:e4:46:6a:5f:0f:a3:
b2:0c:b2:54:83:32:83:cc:83:a3:53:d8:21:56:67:
a1:3d:35:a7:24:22:3f:63:35:a0:ea:1f:77:de:2c:
e3:7a:b2:86:b8:d1:5b:3c:94:f2:e0:f4:73:ad:c3:
e2:2f:12:fb:81:fa:17:3e:89:0a:6c:57:bb:46:2a:
71:e1:aa:8f:2c:4a:44:bd:71:60:78:b9:00:6e:23:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9A:96:9E:0D:51:C5:A7:9D:E2:F2:F0:36:90:11:5C:11:F4:E2:DE
X509v3 Authority Key Identifier:
keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:0f:5e:a0:04:77:72:9c:f7:94:6f:74:e9:97:da:3f:73:66:
b0:bd:6f:1d:92:f5:8c:84:d2:54:eb:74:3a:88:15:7e:fb:bf:
93:c5:97:d8:62:27:b3:9e:04:32:18:ed:cb:4a:f5:e2:ce:9d:
90:34:b3:7c:4a:26:d5:a7:8b:b8:76:1d:a8:f1:74:4e:eb:a0:
cf:d6:3a:73:b2:83:ac:03:24:b5:4c:42:72:da:72:e3:89:16:
86:46:6a:82:90:0b:f8:47:8c:fd:5c:eb:f3:2b:01:ce:3a:ee:
66:73:84:2d:7d:47:84:95:a4:e4:9d:e9:b6:47:ec:8a:e0:92:
6c:80:16:a0:6e:b8:ca:60:5c:f5:03:67:0e:a1:a9:77:83:9a:
62:84:7a:1d:dd:19:e8:45:2a:d3:85:b5:29:07:7c:97:67:97:
53:9f:3a:9d:b2:6e:97:b2:55:5d:eb:f7:e0:92:f0:89:78:cb:
56:54:fb:a9:06:8b:02:74:01:e2:cd:5e:f8:69:e6:36:f1:19:
aa:a6:5f:5f:4e:03:78:f7:1d:50:f8:29:bc:17:80:71:87:25:
4e:a6:06:1f:3e:4f:66:d0:5b:01:0c:3c:b6:58:f8:0b:fd:04:
b5:dc:34:6e:91:df:ce:04:63:eb:63:99:2b:a1:ff:f6:24:0c:
1a:41:09:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE
QjczNDc1MzEwHhcNMjYwODE4MTgyOTA4WhcNMjYwODI1MTgyOTA4WjAYMRYwFAYD
VQQDEw02YTg0YTQ3NS1iYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr00TH5sakcQG1iVp+O7tUy9TFQC8ACfGnnMfROg4dNyEblM7TdMpllLswDDG
/Sas+gpKP/T7dt97hRpqY5mYrUARpt37zEnckiPnYHtCuLYsqnV8xJvgO8fkwQrU
/r14Wq3EQhemDbQtd0Gd2W0FF2xxkGooVM3L5dQzkD8SFcLqAjZTknRcE+i9HMGo
C9goHcp80qqXY61VODeSarWKWKdxis9BXBQGXHZhRc7kRmpfD6OyDLJUgzKDzIOj
U9ghVmehPTWnJCI/YzWg6h933izjerKGuNFbPJTy4PRzrcPiLxL7gfoXPokKbFe7
Ripx4aqPLEpEvXFgeLkAbiN1jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMaalp4N
UcWnneLy8DaQEVwR9OLeMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2
RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4
TFpFRUtBaThyZnpiYzBkVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUA9eoAR3cpz3lG906ZfaP3NmsL1vHZL1jITSVOt0OogVfvu/k8WX2GIns54E
Mhjty0r14s6dkDSzfEom1aeLuHYdqPF0Tuugz9Y6c7KDrAMktUxCctpy44kWhkZq
gpAL+EeM/Vzr8ysBzjruZnOELX1HhJWk5J3ptkfsiuCSbIAWoG64ymBc9QNnDqGp
d4OaYoR6Hd0Z6EUq04W1KQd8l2eXU586nbJul7JVXev34JLwiXjLVlT7qQaLAnQB
4s1e+GnmNvEZqqZfX04DePcdUPgpvBeAcYclTqYGHz5PZtBbAQw8tlj4C/0Etdw0
bpHfzgRj62OZK6H/9iQMGkEJJA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:14 2026 by rpki-client