
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json)
Hash identifier: YDUKmu44K+aN5b4bjl0lspiudLvh/qBWs+805QniHCA=
Subject key identifier: D0:19:B2:F6:AC:B1:35:BF:A7:98:18:96:C0:9A:3D:44:AA:48:E7:EC
Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69
Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
Certificate serial: 0913
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
Manifest number: 0902
Signing time: Sat 24 Oct 2026 20:19:35 +0000
Manifest this update: Sat 24 Oct 2026 20:19:34 +0000
Manifest next update: Sat 31 Oct 2026 20:19:34 +0000
Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: BPOBxWXlpWuh5xQx3dO6HH1Xa7JoJKJOyIBR4q0BAoU=)
2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: edMpAdsKCKk/U5YKtWRInEEpB1MnGnib+hFAYPoQeoE=)
3: FB53E88A2D9F11F19981FFD49F833773.roa (hash: ZAdRDtRumQ9iSxMpncdOyULKYgh8Rn2K/EDmIVrB3X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl
rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
Validity
Not Before: Oct 24 20:19:34 2026 GMT
Not After : Oct 31 20:19:34 2026 GMT
Subject: CN=6add12d6-7290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:9c:23:bf:a0:f1:7c:ec:ec:a0:6f:ac:41:
fe:01:7a:5b:87:2f:77:01:01:94:34:59:c7:4c:f4:
1a:bd:59:f0:ed:9e:47:ae:21:2f:2e:d4:36:50:c7:
19:f1:9a:87:ab:f0:e3:66:09:82:a3:b6:6b:cf:fe:
2e:87:13:b1:86:23:bb:f6:54:cf:94:d1:ea:2a:9b:
00:f8:77:89:f2:2f:17:d0:e8:5e:fa:b0:1f:7c:da:
d0:2f:75:57:72:ca:bd:93:2f:eb:4b:31:1f:e4:46:
20:73:c1:6a:3f:fd:7e:90:7b:47:c0:42:97:5f:ff:
68:58:1a:db:58:3f:f3:ee:07:0b:2a:30:ed:e7:1b:
ac:79:6a:46:8b:5e:82:8d:0b:1c:80:d3:37:cd:34:
fa:07:85:b0:79:9b:1e:1d:2a:09:ee:d1:2a:bc:ed:
ed:85:e6:c2:a4:71:5c:a8:5f:c8:c5:69:a2:3e:75:
40:6c:5b:d2:8a:3b:e0:6a:ba:34:99:0d:38:63:76:
06:62:9b:c5:ac:81:a5:45:cb:60:ce:40:a2:f7:77:
1e:27:40:1e:e7:af:87:2f:ce:c9:ef:1d:fd:b4:48:
02:eb:df:9f:a7:ef:fb:6c:32:42:ff:2f:f8:d1:f2:
59:39:10:63:10:08:5e:bb:71:b8:10:a6:0f:c9:56:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:B2:F6:AC:B1:35:BF:A7:98:18:96:C0:9A:3D:44:AA:48:E7:EC
X509v3 Authority Key Identifier:
keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:bd:71:37:84:dd:88:a5:77:4f:d7:19:a6:15:ac:37:90:f6:
1f:f5:a0:9a:a7:c7:96:e2:fe:be:58:38:71:69:15:9e:95:77:
38:8d:c7:f5:24:2f:d7:7e:a3:7c:1d:cc:2a:0e:57:5d:3a:64:
b6:a9:e7:d3:d9:c6:af:71:87:77:4e:6d:c2:64:fa:a6:31:8f:
bd:08:c1:57:3b:10:65:15:ca:dc:e1:c1:d3:ef:64:01:03:ed:
ed:80:48:2d:ef:dc:4e:c2:40:2a:ba:1e:26:4e:70:db:22:81:
74:06:c2:d6:c3:2d:34:fc:62:f1:34:57:f2:6f:f8:fb:96:09:
4e:3e:8a:6d:78:cb:c9:76:4f:1c:7f:98:ec:d4:71:53:dd:24:
7c:4b:29:a1:fa:cc:ee:19:00:4c:01:1f:be:88:5c:f9:68:59:
cb:93:cd:e1:a3:76:e9:c7:86:2b:81:79:06:71:5b:79:8c:2d:
b7:04:eb:de:6c:2f:71:18:9d:51:29:f9:4c:2f:84:7b:b6:e2:
f0:ae:47:c6:95:6f:a8:4f:be:36:60:29:33:eb:b4:60:de:0d:
ca:fc:bf:68:5c:56:6f:92:c2:d8:5c:ca:c2:1a:7b:ca:e4:56:
ed:a3:f7:ae:c6:84:26:0c:b7:57:9f:94:f8:c2:bd:7d:33:96:
11:c9:9e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:42:20 2026 by rpki-client