
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier: 3PglLJP83dnF4g81a2Cl2EMbMEMwxfU6PMgUNSUUJEk=
Subject key identifier: BF:D1:90:8A:D8:99:9D:A2:08:66:A9:B5:87:BA:68:53:EC:03:4E:BA
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial: 0D78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number: 0D6F
Signing time: Tue 06 Oct 2026 18:05:43 +0000
Manifest this update: Tue 06 Oct 2026 18:05:43 +0000
Manifest next update: Tue 13 Oct 2026 18:05:43 +0000
Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: NmaTQMdpBhE/E9ClVqvtqaDMjdeklfmuISGHXGg5saA=)
2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: 2ofxCMC41OCd7xHEWUK98z0O11e/ASg9LLd6dkWeoic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3448 (0xd78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
Validity
Not Before: Oct 6 18:05:43 2026 GMT
Not After : Oct 13 18:05:43 2026 GMT
Subject: CN=6ac53877-dc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:77:53:de:3f:c3:0b:a0:d5:34:09:f4:20:
35:43:7f:7b:f2:c5:4d:ca:5d:79:33:27:70:1e:95:
44:cb:b6:c9:9e:a9:ae:3f:bf:91:84:33:73:ad:7d:
57:3e:2a:78:21:59:d9:30:b0:be:8a:76:cc:59:3d:
9c:44:84:e7:4a:cb:f9:39:68:57:db:44:a7:8b:fb:
c2:5e:e9:67:85:cf:de:5b:29:39:0a:0c:05:df:c7:
45:76:6b:9a:0f:e4:e8:dd:d7:85:df:8b:10:10:3c:
2f:8f:b8:7f:6d:e9:1c:0b:68:a6:dc:1f:d8:d2:9e:
a8:5a:c9:00:79:49:95:d9:a2:a9:d3:9b:51:f8:d8:
7f:8a:52:2a:a8:e7:88:df:18:d1:e6:22:4c:49:f7:
ec:4c:ac:77:e4:25:fe:2a:ee:9d:6b:c8:74:80:ff:
df:1e:80:eb:bc:ef:cd:6c:23:f7:48:0b:1c:ca:61:
fe:dc:da:a9:f4:b5:7b:38:75:26:b9:62:51:9b:c9:
fd:fd:26:d3:06:9f:9e:d5:65:26:d6:7c:21:10:ab:
4d:0a:9c:a9:ea:28:91:45:7c:96:ec:97:87:8a:67:
ca:35:ab:0b:47:64:f8:86:1e:da:9e:58:93:ec:26:
1a:5f:cb:a3:13:14:2a:a1:13:d8:a3:79:77:87:ac:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D1:90:8A:D8:99:9D:A2:08:66:A9:B5:87:BA:68:53:EC:03:4E:BA
X509v3 Authority Key Identifier:
keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:c5:be:ce:e0:ba:42:e2:3e:8d:f6:06:73:90:9f:d1:42:7f:
bb:7d:e4:6c:4d:3d:e6:cc:c4:6e:a9:a8:4f:57:0b:0e:0a:d2:
7f:68:0d:79:29:11:94:67:70:b1:d1:49:88:17:14:99:6c:c8:
8f:8f:55:62:d2:96:2d:e0:67:7c:f6:b6:2a:64:f3:da:53:99:
ed:fd:24:33:f0:56:9f:59:39:4a:72:1b:9a:6e:4c:32:50:c8:
cb:39:00:58:e9:76:7d:ad:fe:cc:9e:33:63:cd:e4:ee:2e:e4:
c7:a7:86:a4:ef:5f:ac:5a:af:2e:0b:c6:47:04:a2:c7:68:d6:
9f:fe:ed:37:31:1a:05:db:64:42:f7:bb:e9:aa:de:1b:de:01:
01:b6:7f:81:3c:e3:70:32:4b:a9:c8:55:43:92:62:46:ed:60:
96:9f:e7:67:86:e4:e9:5c:10:d8:0c:8a:a3:8b:4a:8a:27:62:
c1:f4:93:aa:1b:c4:e4:2a:eb:41:0f:99:fd:dc:2c:c7:ad:ed:
7c:a0:e0:71:3b:99:f9:1f:61:30:49:fd:22:0a:68:5c:17:d7:
0f:17:18:0c:4f:a1:c8:4a:c5:51:6e:62:89:48:15:ad:43:5c:
14:09:79:1e:c1:24:2d:ae:54:e6:f0:b1:e5:42:a6:9b:22:c8:
7f:62:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:32:15 2026 by rpki-client