
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json)
Hash identifier: SNQXfQ+9ZTsvehxlUH4lIU+3FZC/ZQn6uLtT9vcmTUw=
Subject key identifier: 1D:2F:D1:98:12:FE:79:23:6F:B9:5E:21:EE:51:C4:AE:AB:C8:1B:91
Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Certificate serial: 080B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
Manifest number: 0802
Signing time: Fri 02 Oct 2026 21:32:26 +0000
Manifest this update: Fri 02 Oct 2026 21:32:25 +0000
Manifest next update: Fri 09 Oct 2026 21:32:25 +0000
Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: a/zIihfS4RIGzv0k9rou2CujPeHuPOv+oOS83eObqJw=)
2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: xUgWZPS3OqCqcDCU2NsD4bCGdV7LPQ4bmn/sE/hHG+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2059 (0x80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Validity
Not Before: Oct 2 21:32:25 2026 GMT
Not After : Oct 9 21:32:25 2026 GMT
Subject: CN=6ac022ea-683d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:2c:2d:9a:a5:20:35:61:b3:00:3a:10:82:
e7:9b:ae:da:4a:9a:78:4c:6a:64:94:07:75:02:d9:
e6:75:b3:67:ce:9b:84:d9:09:6c:c2:58:e8:82:94:
78:31:36:f4:55:a0:54:00:90:79:86:f2:c2:0c:7f:
52:e7:2e:fb:1f:fa:ba:8f:8e:13:12:bc:df:e3:6f:
f7:0b:70:1d:4f:39:70:74:fd:5a:f2:85:60:87:25:
90:8b:0b:a1:01:a1:6a:42:91:a0:73:22:34:4d:72:
76:63:28:c1:8c:7a:75:d8:0f:de:15:9a:7c:74:0a:
7f:ab:b8:4c:ce:4b:93:6c:82:20:00:9c:01:57:44:
f1:81:45:36:4a:42:dc:5f:c4:b0:55:4f:49:7b:87:
a6:90:28:ad:97:8e:dd:ce:d2:2e:b6:b0:62:10:30:
7e:57:1c:d7:29:6a:39:fa:e7:6d:89:9b:75:ab:8c:
a5:2a:58:76:5d:35:79:c1:8d:5c:4c:f3:c8:8a:7f:
ed:ad:06:ce:f6:b0:6f:bf:20:d3:28:44:f1:e0:6b:
c5:49:16:ef:ee:74:96:95:ec:1f:0d:ac:9a:86:43:
8a:ab:85:9c:b0:98:cf:8e:6a:79:5e:2b:60:33:5d:
c9:26:e0:62:2f:e0:69:23:9a:c3:48:09:11:6b:9c:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:D1:98:12:FE:79:23:6F:B9:5E:21:EE:51:C4:AE:AB:C8:1B:91
X509v3 Authority Key Identifier:
keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c7:af:92:33:58:64:08:7c:74:16:4d:12:4f:4c:bb:a8:b2:
f3:a9:a9:b7:d2:8b:dd:bc:91:0e:86:a3:09:4d:ab:af:73:cc:
07:d5:a3:31:78:c2:40:85:04:43:06:01:30:ef:90:54:5c:27:
a2:69:dd:f3:9d:95:0b:a4:de:a4:cc:15:a3:cc:92:f0:3e:f8:
1a:06:5f:99:4f:96:72:9d:a6:7c:55:b6:b2:9d:0a:f3:65:cf:
8a:e6:79:4c:1a:56:cc:31:0b:b1:27:91:f6:58:40:e6:7b:74:
2a:e5:38:fa:f8:35:70:ca:db:1a:0b:d9:c3:e4:84:9d:da:bf:
6e:7e:0e:af:e7:82:18:35:95:14:dc:3f:51:97:e0:f7:09:bf:
5a:f3:6f:8c:87:98:a7:07:65:b2:eb:31:98:9c:ce:c3:8d:cb:
60:5d:95:65:12:2b:f9:8b:46:c6:b5:39:e4:a7:39:4b:1d:c8:
5a:7f:29:db:a7:5e:37:07:6b:5c:8e:ed:a2:89:84:31:7c:80:
4b:77:7b:9f:d9:03:af:cf:e8:ec:83:9d:9d:3e:50:70:6a:83:
94:36:3f:35:4e:4d:50:06:23:a8:ff:69:48:01:5a:60:ad:54:
90:c3:35:94:2d:de:70:32:84:66:57:77:95:db:63:af:d7:3b:
be:bc:f7:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3
Mjg1MkJBOTkwHhcNMjYxMDAyMjEzMjI1WhcNMjYxMDA5MjEzMjI1WjAYMRYwFAYD
VQQDEw02YWMwMjJlYS02ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu24sLZqlIDVhswA6EILnm67aSpp4TGpklAd1AtnmdbNnzpuE2QlswljogpR4
MTb0VaBUAJB5hvLCDH9S5y77H/q6j44TErzf42/3C3AdTzlwdP1a8oVghyWQiwuh
AaFqQpGgcyI0TXJ2YyjBjHp12A/eFZp8dAp/q7hMzkuTbIIgAJwBV0TxgUU2SkLc
X8SwVU9Je4emkCitl47dztIutrBiEDB+VxzXKWo5+udtiZt1q4ylKlh2XTV5wY1c
TPPIin/trQbO9rBvvyDTKETx4GvFSRbv7nSWlewfDayahkOKq4WcsJjPjmp5Xitg
M13JJuBiL+BpI5rDSAkRa5xr9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0v0ZgS
/nkjb7leIe5RxK6ryBuRMB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy
QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW
Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv8evkjNYZAh8dBZNEk9Mu6iy86mpt9KL3byRDoajCU2rr3PMB9WjMXjCQIUE
QwYBMO+QVFwnomnd852VC6TepMwVo8yS8D74GgZfmU+Wcp2mfFW2sp0K82XPiuZ5
TBpWzDELsSeR9lhA5nt0KuU4+vg1cMrbGgvZw+SEndq/bn4Or+eCGDWVFNw/UZfg
9wm/WvNvjIeYpwdlsusxmJzOw43LYF2VZRIr+YtGxrU55Kc5Sx3IWn8p26deNwdr
XI7toomEMXyAS3d7n9kDr8/o7IOdnT5QcGqDlDY/NU5NUAYjqP9pSAFaYK1UkMM1
lC3ecDKEZld3ldtjr9c7vrz3HQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:42 2026 by rpki-client