
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
File: L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json)
Hash identifier: iXRoFIQoi3xB9z2eWkdJrTYFJm9frRhL0IHu9tbrq9I=
Subject key identifier: 99:50:CE:09:B2:48:C2:72:13:80:34:95:21:B7:5F:81:37:83:31:48
Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
Manifest number: 0175
Signing time: Tue 03 Mar 2026 04:18:42 +0000
Manifest this update: Tue 03 Mar 2026 04:18:42 +0000
Manifest next update: Tue 10 Mar 2026 04:18:42 +0000
Files and hashes: 1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: fC+lMmsarpMpEF9b0+ikhJc/wgJGDY5zxg1f3hWMyro=)
2: AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa (hash: YD6V2HI2hUFrH/8EXeFP7xfUl76wgNpHMjQUF10dCIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Validity
Not Before: Mar 3 04:18:42 2026 GMT
Not After : Mar 10 04:18:42 2026 GMT
Subject: CN=69a66122-f326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:50:28:be:79:5f:1f:2b:d1:48:86:0a:12:
fe:83:8e:12:93:47:84:4a:f0:1f:c9:6a:d6:d4:52:
9b:32:95:10:a5:b4:f8:46:3e:e1:48:de:6e:19:4a:
a3:8c:f5:f5:9d:09:2b:24:35:60:3b:c7:2a:d9:9e:
70:ca:52:f0:ca:7c:3d:12:9d:a9:df:cb:33:b9:9e:
92:e3:7b:f4:03:84:8b:10:05:78:af:af:b6:bd:a2:
41:94:b7:e6:f5:49:ed:29:54:58:1d:64:07:ec:5e:
9d:1e:ff:d4:a0:af:7b:ed:96:1d:eb:81:f8:6c:ca:
e3:46:4f:b1:29:ee:46:1c:cb:1c:e1:5e:e7:52:ec:
36:8d:55:18:11:c6:65:3e:17:fb:65:c8:7a:3a:5a:
2d:b1:50:87:61:36:d9:88:ca:ed:4d:59:19:be:c8:
a4:eb:f6:fc:58:72:02:74:43:37:58:0c:ae:12:0b:
76:bf:19:ca:f6:05:70:b1:81:4c:c8:be:3f:b1:d3:
a0:b7:56:91:8a:79:03:5c:16:53:b0:94:3c:af:dc:
16:d3:e9:4a:f3:14:9c:fb:8f:16:2f:b1:68:ec:e7:
6c:c1:11:2f:4b:9b:87:9f:2c:09:74:1b:5a:98:01:
57:a3:be:39:12:da:db:b0:a4:60:05:42:6f:96:39:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:50:CE:09:B2:48:C2:72:13:80:34:95:21:B7:5F:81:37:83:31:48
X509v3 Authority Key Identifier:
keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:78:3f:6e:4f:00:19:a0:85:46:6b:22:54:9e:57:c5:34:d1:
1b:bc:6c:b8:c8:8b:c0:56:08:13:d1:d3:0e:18:60:5a:c2:a0:
b1:be:63:ac:33:10:01:93:f4:0c:dd:34:db:fb:11:77:d5:08:
cc:b7:6f:83:01:75:f5:11:bf:ad:a7:07:0d:57:0a:e8:45:e3:
90:dc:b4:0f:90:09:39:be:45:e4:95:67:cc:a8:b4:22:e1:9c:
b5:da:10:67:b6:15:4f:12:eb:c9:b3:66:df:8d:e6:03:ef:33:
34:5b:53:a1:78:80:08:2b:ad:7c:6d:19:e3:89:cf:10:10:3b:
da:a5:f9:04:e1:c5:1c:fd:66:94:c9:b4:2d:38:37:f4:73:ac:
0e:9a:3a:5b:ad:b3:4d:4e:65:9d:30:53:61:9d:4b:40:b3:95:
a1:02:ce:bb:fc:bb:4c:f3:7e:e4:19:ec:75:51:e7:d2:9e:73:
41:d8:02:20:33:4c:cb:1e:87:e8:ac:1f:fb:53:b9:6b:e8:46:
f5:59:b1:7f:d4:aa:f3:60:2f:f8:fb:b2:90:28:86:1e:b0:3a:
90:5c:96:f4:b2:0e:80:90:26:99:81:c1:20:b1:2a:40:94:c4:
87:56:23:48:a9:02:0e:54:b4:9a:38:44:bc:18:66:96:d8:5d:
af:82:53:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE
QTNCMjAwQjUwHhcNMjYwMzAzMDQxODQyWhcNMjYwMzEwMDQxODQyWjAYMRYwFAYD
VQQDEw02OWE2NjEyMi1mMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2pRQKL55Xx8r0UiGChL+g44Sk0eESvAfyWrW1FKbMpUQpbT4Rj7hSN5uGUqj
jPX1nQkrJDVgO8cq2Z5wylLwynw9Ep2p38szuZ6S43v0A4SLEAV4r6+2vaJBlLfm
9UntKVRYHWQH7F6dHv/UoK977ZYd64H4bMrjRk+xKe5GHMsc4V7nUuw2jVUYEcZl
Phf7Zch6OlotsVCHYTbZiMrtTVkZvsik6/b8WHICdEM3WAyuEgt2vxnK9gVwsYFM
yL4/sdOgt1aRinkDXBZTsJQ8r9wW0+lK8xSc+48WL7Fo7OdswREvS5uHnywJdBta
mAFXo745EtrbsKRgBUJvljmUVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlQzgmy
SMJyE4A0lSG3X4E3gzFIMB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB
NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF
VnpWRGhtWXM0dzNhT3lBTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdHg/bk8AGaCFRmsiVJ5XxTTRG7xsuMiLwFYIE9HTDhhgWsKgsb5jrDMQAZP0
DN002/sRd9UIzLdvgwF19RG/racHDVcK6EXjkNy0D5AJOb5F5JVnzKi0IuGctdoQ
Z7YVTxLrybNm343mA+8zNFtToXiACCutfG0Z44nPEBA72qX5BOHFHP1mlMm0LTg3
9HOsDpo6W62zTU5lnTBTYZ1LQLOVoQLOu/y7TPN+5BnsdVHn0p5zQdgCIDNMyx6H
6Kwf+1O5a+hG9Vmxf9Sq82Av+PuykCiGHrA6kFyW9LIOgJAmmYHBILEqQJTEh1Yj
SKkCDlS0mjhEvBhmlthdr4JTTQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:27 2026 by rpki-client