
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json)
Hash identifier: AdiFDP9kRSPpDQGwj3CjSAAC46Scvxx/fjUfKtVq1xc=
Subject key identifier: 57:69:7D:AA:DF:14:C9:D1:07:AE:02:87:B5:16:9C:D4:BC:42:AA:FA
Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
Manifest number: 81
Signing time: Mon 07 Sep 2026 07:31:34 +0000
Manifest this update: Mon 07 Sep 2026 07:31:34 +0000
Manifest next update: Mon 14 Sep 2026 07:31:34 +0000
Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: Rb6NMESLsrFTFbU08Tr/vNssuV1doHVGmE8FT+MIxdg=)
2: 6233066868B411F1A7FCE07D7E47A888.roa (hash: cLHTOzBDSvX2r1cQexaW7fZ273SuMXzR4+rLK7jUiPo=)
3: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Sep 2026 07:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Validity
Not Before: Sep 7 07:31:34 2026 GMT
Not After : Sep 14 07:31:34 2026 GMT
Subject: CN=6a9e6856-1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:53:d7:f3:c7:40:2f:b1:19:47:7b:03:8d:
c3:15:3f:87:9c:b8:8c:74:25:71:fc:44:34:bb:78:
50:31:3f:63:4e:bb:44:07:d1:8b:86:20:8d:89:d9:
04:8b:8a:a8:fc:ce:a3:48:0f:ed:e0:f4:ab:7a:3a:
d5:86:a5:22:32:0f:93:06:da:62:ed:c5:45:0f:04:
18:91:c7:bd:de:34:3a:84:2d:41:76:c0:e5:3f:34:
53:78:58:f4:d0:0b:7c:e4:4f:06:9b:62:ae:42:6d:
a6:fe:da:18:d9:b6:0e:ea:6e:58:7e:8a:2f:b2:24:
56:0b:c6:e8:8c:11:da:7c:3d:ee:00:dd:72:55:c6:
dc:3d:e2:c7:50:82:16:45:a9:80:63:b0:fa:03:10:
ad:87:fd:ea:99:2d:3f:e6:5f:41:26:07:b7:ca:c4:
1f:cf:e8:2d:bb:b9:0a:3f:99:5a:fb:60:f0:f3:66:
7d:dc:e2:9a:24:a2:c8:95:03:ea:9e:b6:0b:fd:bd:
47:fd:b1:0e:b6:7d:75:a6:90:bb:21:4c:0a:64:31:
45:6a:70:24:e5:1e:06:7b:03:db:32:e2:76:23:54:
93:b0:8f:a5:08:15:21:23:77:3f:14:c4:bc:04:60:
7c:92:1d:40:63:4c:4f:06:55:72:d8:2d:0b:fe:08:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:7D:AA:DF:14:C9:D1:07:AE:02:87:B5:16:9C:D4:BC:42:AA:FA
X509v3 Authority Key Identifier:
keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:53:01:42:6c:1f:ad:48:c2:0f:30:c9:cd:e5:4b:bf:a1:9c:
05:b9:53:e3:0a:f2:c5:48:13:39:13:68:b3:54:4a:50:c8:d6:
03:e0:0b:c3:9e:eb:d4:ac:87:89:c2:93:07:22:80:27:df:10:
43:e8:b7:f5:dc:a1:4e:d5:6d:8e:a5:46:91:86:4a:c1:9f:8c:
4a:53:fa:8e:44:6e:69:57:be:59:7b:31:b5:70:40:35:c1:a7:
d4:f5:01:27:ea:ea:fe:ca:3e:70:30:90:9f:53:00:8a:de:b6:
4b:c6:c8:7d:e2:e6:d2:bd:bf:46:d3:c2:19:f7:4c:3b:74:ef:
b5:5f:cc:06:43:70:6b:d4:24:07:cf:3a:61:9d:6b:ae:46:94:
2d:f3:fb:3c:f4:d6:b7:b2:7f:35:ef:bc:bf:f9:c0:62:5e:4a:
ee:f6:b4:3c:85:21:44:37:1f:bb:40:59:9b:d1:d4:0f:a0:55:
03:8a:57:50:7b:9f:97:a3:aa:5f:4d:8d:c6:fc:44:7e:2a:f5:
d2:0d:5c:29:8c:45:1d:0c:d7:1c:56:00:61:87:b5:31:10:b1:
60:4d:8b:77:4a:35:b4:a6:01:0b:fc:eb:b1:d4:6e:4a:4a:37:
88:32:69:b1:1b:25:ee:8c:75:c4:72:f7:60:37:2d:69:22:58:
fa:a4:d1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:12:01 2026 by rpki-client