
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier: 8/u22NKij54pkImtjNbbYufFt9dDtYZ+QzjJ3RICdhw=
Subject key identifier: 66:3E:C2:75:D5:61:4C:7D:8E:C7:F6:CF:83:73:42:78:B0:0F:05:70
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial: 04C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number: 04B3
Signing time: Tue 08 Sep 2026 23:55:03 +0000
Manifest this update: Tue 08 Sep 2026 23:55:02 +0000
Manifest next update: Tue 15 Sep 2026 23:55:02 +0000
Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: tMFkaeWnhcu43dZjRsclkAysHOKL2qYOrDwyGe2013Y=)
2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=)
3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=)
4: 38DF2BD687FC11F1B0916B103C11F970.roa (hash: ip1X2/FTCxaSzI+j0d1dDsTrjfqFA/qkApNONDzS/MA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 23:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Validity
Not Before: Sep 8 23:55:02 2026 GMT
Not After : Sep 15 23:55:02 2026 GMT
Subject: CN=6aa0a057-f3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:02:2c:e0:00:d6:f4:1b:03:cc:f0:6a:da:
6d:ed:a9:9e:ad:f9:97:1e:13:e4:93:89:13:e1:5c:
f1:2f:6e:fd:4c:e0:c4:d5:81:74:28:7c:9a:43:e3:
7c:13:be:ce:f8:85:4e:e7:27:df:bf:aa:e5:61:12:
a8:59:2c:3e:b9:c9:82:1f:74:b3:d9:e0:9c:e6:40:
6b:bb:bb:ef:44:41:4e:fe:83:b1:d4:f8:48:ab:4b:
aa:ca:84:46:25:27:d4:fa:34:89:4a:81:ec:94:fc:
18:df:92:0f:4a:a5:da:a8:8f:11:11:01:63:7d:84:
a9:c4:e9:21:b4:b3:8c:e0:49:93:3f:b4:a3:26:13:
9d:bc:f3:81:37:e1:01:43:82:14:7c:2d:5c:4b:f7:
a1:8d:1f:95:79:91:8c:56:d1:06:1c:ca:d1:1c:b3:
fd:86:80:37:57:0c:51:9d:6d:2b:86:c6:6f:3f:9c:
df:e8:79:9a:a6:84:d1:5a:29:14:d1:7b:2c:50:a7:
ef:de:93:8a:3e:9b:0b:b8:23:3b:16:9b:36:75:e8:
a0:1a:cf:ef:58:12:62:70:a0:5e:75:26:a6:24:4f:
86:38:b6:05:c5:28:96:34:14:1a:97:ef:4e:59:31:
9a:8b:da:05:05:78:b1:8c:92:cb:78:8d:83:cc:14:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3E:C2:75:D5:61:4C:7D:8E:C7:F6:CF:83:73:42:78:B0:0F:05:70
X509v3 Authority Key Identifier:
keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:69:bf:3c:f3:e9:39:74:50:8c:07:b7:b5:5e:ae:67:19:6d:
86:c0:68:29:ed:5f:40:07:12:19:dc:31:b7:b1:7b:01:8a:a5:
68:de:52:04:d1:5a:bf:c7:a7:a8:5f:f4:37:cb:9e:ed:21:b1:
13:d6:f6:46:e8:dd:e1:28:e9:8f:91:43:0c:d8:4a:da:db:f9:
20:48:92:7e:29:1b:92:8f:49:9d:33:9f:d4:24:aa:db:0e:47:
61:0a:5f:a4:77:07:29:48:77:54:e7:0c:82:b3:e6:76:8a:e6:
43:07:a3:81:aa:66:e5:cb:83:d5:bf:d9:15:83:fa:f6:68:45:
5e:af:87:4f:69:39:54:b8:a7:de:8c:56:a3:df:07:a6:3f:c5:
13:ab:5d:e9:1e:5e:27:a4:05:53:89:ef:3d:e5:81:b5:a5:17:
98:ae:19:7f:c1:39:01:b9:28:99:91:c8:f0:48:24:f9:bd:c7:
07:e1:b8:bb:f4:63:9e:9d:20:71:d9:ce:20:6f:01:52:42:97:
d9:25:f6:39:c9:76:62:f9:61:1f:49:40:7a:3d:87:c7:b8:1d:
44:9e:8b:71:db:d6:c1:d1:15:33:80:10:51:b1:35:53:dd:a2:
ed:96:93:f4:9f:37:4f:96:75:34:d8:98:46:77:1b:0d:7a:99:
f8:89:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:55:11 2026 by rpki-client