
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json)
Hash identifier: WtAvex99oSjNQ/ZKT9qFL7MxwEoRmLWK584urZyB9rs=
Subject key identifier: 50:CA:FF:EF:98:91:7B:AC:AB:71:16:B0:3D:02:CA:06:10:8E:F3:FB
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial: 0C6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
Manifest number: 0C4B
Signing time: Mon 12 Oct 2026 18:52:19 +0000
Manifest this update: Mon 12 Oct 2026 18:52:19 +0000
Manifest next update: Mon 19 Oct 2026 18:52:19 +0000
Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: fdZNzkXy1dDhKqwiSAeagYJDkoJuOWGhf6N1cEehAKc=)
2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: EtWPVe46Z6YD/Gko0Vzg+XYe7+MF4xJzoOYHJ+2jqX8=)
3: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: Mz6TVl8d97rl0T5Sgcb40knK3DLPqLH5f8e3CzLuT7A=)
4: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: j2CWh2M1Zubhu80nB8Ke1i2o0Pn0OuTxS4mQsSIpork=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3182 (0xc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Validity
Not Before: Oct 12 18:52:19 2026 GMT
Not After : Oct 19 18:52:19 2026 GMT
Subject: CN=6acd2c63-4c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:6c:db:5b:76:4a:18:f8:27:32:48:cf:ff:
08:6a:e0:9f:03:0c:13:6c:99:52:89:80:8f:75:06:
3d:64:af:99:98:c6:58:d2:6b:d6:da:2c:dc:c6:56:
e7:1d:dc:7b:71:d9:bf:61:aa:71:4e:b8:ac:66:d8:
27:0f:17:d8:c6:fd:cf:bf:9d:8a:01:5a:9d:db:57:
6b:ba:6e:76:32:e6:d7:c9:7f:15:7a:9c:69:ed:47:
9b:59:52:40:8b:88:27:2d:51:87:9f:32:2a:32:92:
b2:f9:59:26:7f:7c:c5:0e:48:46:62:2e:aa:aa:81:
82:b9:1d:00:c4:aa:c9:47:c3:4b:f6:ef:97:94:b1:
4d:e5:66:63:f7:cb:e1:06:a9:cb:61:39:45:02:7e:
39:df:66:d8:97:8e:50:43:a3:17:77:59:31:00:82:
33:7b:36:15:59:cd:bd:0d:a6:24:8e:f1:f4:56:97:
3f:c8:e8:8e:95:94:9d:65:d6:c5:fc:6a:9e:6e:e0:
64:48:04:62:f1:3b:29:e4:6a:fd:da:3d:f8:b2:7d:
39:2f:1f:62:46:cc:06:36:63:9e:a4:a5:29:c6:b3:
42:66:82:39:5c:c4:e9:96:a0:93:c8:25:a4:2d:78:
9e:7e:d2:c0:17:a8:5e:e0:30:52:04:c5:c2:bc:69:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CA:FF:EF:98:91:7B:AC:AB:71:16:B0:3D:02:CA:06:10:8E:F3:FB
X509v3 Authority Key Identifier:
keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:85:df:cc:a4:63:3b:46:2e:94:59:a8:2a:dc:8c:a0:f9:c3:
bc:e1:4d:e1:0b:b9:3c:98:05:14:29:96:10:42:c9:13:be:17:
98:61:1c:ca:0f:c6:f3:8f:49:3d:7a:bd:be:6e:7e:6d:77:06:
2f:22:f8:b7:66:97:51:00:bf:3d:9f:7b:a9:51:4a:0d:9b:bb:
1e:04:49:ff:a6:a8:2c:f7:ac:b9:97:0a:09:ad:82:8c:b4:26:
83:c7:04:a7:3b:38:94:32:a3:c3:d8:2e:e0:86:dd:c3:37:0f:
08:1e:fb:a3:ae:ef:d4:24:8a:06:4d:2e:f8:8a:c5:c1:94:0f:
2c:a0:97:fa:b4:ca:17:a6:40:66:8f:5a:f4:55:d5:c4:35:20:
95:09:25:20:66:90:a9:c9:a5:da:a9:ee:36:38:24:57:b1:b7:
47:3b:59:5f:1a:ab:2b:c2:0e:10:f5:45:86:a8:be:ee:89:77:
34:9b:24:6b:c9:d5:d7:35:59:a7:df:fc:78:c1:b7:da:f2:b8:
00:92:69:db:93:f0:10:80:3b:79:13:08:cf:31:01:10:72:91:
f9:4a:f1:4c:84:39:47:04:ba:41:0e:2d:94:e0:19:58:15:31:
4c:bf:19:f1:7b:cf:cb:41:18:12:4e:59:fb:1b:c1:ce:ab:7b:
11:d4:9b:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB
RkI1RTJCQjIwHhcNMjYxMDEyMTg1MjE5WhcNMjYxMDE5MTg1MjE5WjAYMRYwFAYD
VQQDEw02YWNkMmM2My00YzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYVs21t2Shj4JzJIz/8IauCfAwwTbJlSiYCPdQY9ZK+ZmMZY0mvW2izcxlbn
Hdx7cdm/YapxTrisZtgnDxfYxv3Pv52KAVqd21drum52MubXyX8Vepxp7UebWVJA
i4gnLVGHnzIqMpKy+Vkmf3zFDkhGYi6qqoGCuR0AxKrJR8NL9u+XlLFN5WZj98vh
BqnLYTlFAn4532bYl45QQ6MXd1kxAIIzezYVWc29DaYkjvH0Vpc/yOiOlZSdZdbF
/GqebuBkSARi8Tsp5Gr92j34sn05Lx9iRswGNmOepKUpxrNCZoI5XMTplqCTyCWk
LXieftLAF6he4DBSBMXCvGklswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDK/++Y
kXusq3EWsD0CygYQjvP7MB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4
NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94
UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAoXfzKRjO0YulFmoKtyMoPnDvOFN4Qu5PJgFFCmWEELJE74XmGEcyg/G849J
PXq9vm5+bXcGLyL4t2aXUQC/PZ97qVFKDZu7HgRJ/6aoLPesuZcKCa2CjLQmg8cE
pzs4lDKjw9gu4IbdwzcPCB77o67v1CSKBk0u+IrFwZQPLKCX+rTKF6ZAZo9a9FXV
xDUglQklIGaQqcml2qnuNjgkV7G3RztZXxqrK8IOEPVFhqi+7ol3NJska8nV1zVZ
p9/8eMG32vK4AJJp25PwEIA7eRMIzzEBEHKR+UrxTIQ5RwS6QQ4tlOAZWBUxTL8Z
8XvPy0EYEk5Z+xvBzqt7EdSb9Q==
-----END CERTIFICATE-----
Generated at Wed Oct 14 08:52:38 2026 by rpki-client