
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft
File: l68SGHeJLIAH_k5xa4jjO-74AN8.mft (raw, json)
Hash identifier: l+O7OS9RX56B/vG3LZY8zl0PR85F6FD/kkyWaqH2p8Y=
Subject key identifier: 1C:51:F7:9F:E5:C3:4F:71:A0:7D:98:CD:7F:35:5F:5B:F0:20:65:5B
Authority key identifier: 97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF
Certificate issuer: /CN=A91B1F08/serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft
Manifest number: 2C
Signing time: Mon 19 Oct 2026 09:28:16 +0000
Manifest this update: Mon 19 Oct 2026 09:28:15 +0000
Manifest next update: Mon 26 Oct 2026 09:28:15 +0000
Files and hashes: 1: l68SGHeJLIAH_k5xa4jjO-74AN8.crl (hash: 7je5NVD5TVoHrn+SwNIn+PRWmKxKcL9SkfXq+0EMGd8=)
2: CF6E968E8B2811F18D2B202C3D11F970.roa (hash: nKbDtnjj8624VgFqL+Q3DAFfPVFpI7iStLeG1RhUWGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl
rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 09:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1F08, serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF
Validity
Not Before: Oct 19 09:28:15 2026 GMT
Not After : Oct 26 09:28:15 2026 GMT
Subject: CN=6ad5e2b0-5419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:40:55:00:9b:20:1e:b0:ca:62:33:d6:95:
f7:49:cb:18:62:65:4a:79:60:78:23:5e:1a:8d:a8:
61:90:fd:fc:f9:9b:74:d9:5e:ed:59:83:b0:2f:09:
e1:c9:02:1f:1a:87:36:68:4b:92:81:11:ff:48:93:
f9:5d:e3:e9:23:db:29:98:61:6c:25:aa:de:f9:dc:
9a:d7:4d:bc:a8:96:a8:fb:28:50:cf:7b:4d:93:81:
5c:59:77:0a:07:fa:f0:ef:7d:8f:a4:6a:7d:f4:5f:
7a:86:8f:b5:1e:c9:23:28:42:25:41:aa:cf:55:54:
cd:89:d6:39:5d:f3:91:99:de:58:d1:06:4f:9e:0f:
bf:da:43:df:f4:eb:1d:6e:4a:db:a6:37:87:01:d6:
4a:fb:5a:26:ff:8d:ee:4d:00:f0:49:1a:c7:4f:b6:
f8:b9:37:33:55:8e:2c:59:b1:d8:ea:ec:ab:62:80:
28:57:76:05:98:65:75:3c:9e:db:89:8b:3c:f3:16:
63:4a:8c:6a:27:8f:17:df:44:2d:41:c0:53:c1:96:
3f:9b:78:ba:0b:58:01:a7:e5:b4:05:51:87:10:cc:
4d:4f:24:13:82:34:e0:a5:6c:8a:5e:7c:dd:f6:6d:
c1:30:8f:91:37:10:a3:d7:08:51:09:fc:26:83:07:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:F7:9F:E5:C3:4F:71:A0:7D:98:CD:7F:35:5F:5B:F0:20:65:5B
X509v3 Authority Key Identifier:
keyid:97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:53:2f:c5:a9:5c:c4:fc:96:9f:e3:c3:08:f0:05:c2:23:12:
da:52:dd:d7:fb:eb:f8:e6:ac:50:89:91:9a:e1:16:04:7c:85:
91:6c:81:6c:47:dc:5c:ac:c5:98:7e:28:b7:4b:46:9d:a7:33:
0b:67:30:b8:66:e2:4a:ab:17:bd:29:66:1c:1e:d2:ce:d4:ba:
84:fc:b1:b8:f5:ad:17:0d:96:c5:e0:3d:39:c7:7c:dc:65:20:
5e:88:ae:cf:1c:d4:3d:b4:ae:f8:f0:44:7a:a4:f1:66:da:b4:
aa:16:f6:06:d8:a5:bf:c0:43:cc:42:1b:fb:e1:32:43:b4:d7:
ee:d4:a9:a0:1b:92:83:7e:c5:f2:23:99:3c:d5:93:95:c4:5c:
79:3f:16:2f:d5:88:09:0e:f6:8b:77:50:8c:0e:c2:9c:c5:2d:
94:c0:2d:51:99:de:90:13:7e:b1:80:dd:57:44:97:51:c7:dd:
f4:55:b5:5b:2a:c8:03:2b:97:58:8e:da:c0:db:c1:9b:a6:92:
0c:c3:a2:d0:63:23:2c:3d:37:4b:f6:f8:29:8f:58:d0:8a:12:
a7:af:5d:8a:4b:bd:6a:19:d2:e8:ae:9a:39:69:dc:6e:57:ed:
16:60:d7:5d:a4:24:0f:15:c5:2f:a7:c2:60:e8:af:81:5d:7e:
8c:24:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:40:00 2026 by rpki-client