
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json)
Hash identifier: KG7EHlr3Sw+nS448M+2aYsUYj2F3uEwlG3Ivenkgk40=
Subject key identifier: 3B:16:69:E2:B7:F0:5F:7A:1E:24:A8:20:58:64:02:58:A7:E8:A7:AB
Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Certificate serial: 0D31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
Manifest number: 0D1B
Signing time: Fri 02 Oct 2026 18:35:09 +0000
Manifest this update: Fri 02 Oct 2026 18:35:08 +0000
Manifest next update: Fri 09 Oct 2026 18:35:08 +0000
Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: Yyy1EJ7GXnUYDN/t3GwFDR/GIUQG3FKfOVwQLz4Avso=)
2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: XGJs1ykY/0fheZrgR+CK/iTAe3umLOWm69b7ZYiYegU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl
rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3377 (0xd31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Validity
Not Before: Oct 2 18:35:08 2026 GMT
Not After : Oct 9 18:35:08 2026 GMT
Subject: CN=6abff95d-7983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:62:1d:b7:e1:b0:7b:ae:08:72:d9:9b:10:d8:
c0:9c:5a:24:b8:d0:20:5f:1c:0c:0e:80:05:83:93:
c6:f9:c3:34:c6:7b:8b:0e:94:01:15:2b:84:49:95:
0c:8d:a6:cb:33:ee:d6:68:56:49:d9:d7:2f:e6:bf:
f2:5a:4f:ce:45:f7:99:36:9d:6f:57:b2:ca:29:b7:
db:8a:6a:c1:aa:f7:e5:0d:f4:c2:7a:78:a4:73:c4:
5e:7d:f4:94:80:0f:d0:01:b4:b7:29:69:4a:4f:7b:
b4:ee:c0:b5:19:c9:28:ca:53:62:78:f8:1b:c5:85:
5d:42:4d:06:08:88:14:cc:3c:b4:4b:ce:0c:54:8f:
e6:e8:a3:50:02:9c:5c:cd:2c:54:a0:b3:ef:02:db:
8a:97:10:ab:3c:29:c7:f2:d9:40:ac:5b:08:35:43:
4c:7d:92:dc:ad:de:c5:8c:7d:ae:7c:7d:34:c8:d1:
10:01:bd:4e:3c:6a:7a:e0:18:86:c2:3d:54:12:ed:
85:01:34:75:84:e7:21:43:75:9a:49:8e:d2:44:e7:
a8:10:30:a9:03:b9:41:ec:10:f2:d6:cf:67:be:4b:
b4:3d:05:ca:13:74:45:3f:d6:ab:7e:05:61:88:23:
de:13:3a:7f:07:e1:3e:da:83:11:a0:5a:c7:cb:15:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:69:E2:B7:F0:5F:7A:1E:24:A8:20:58:64:02:58:A7:E8:A7:AB
X509v3 Authority Key Identifier:
keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:3a:7f:eb:03:71:df:63:6f:20:a2:97:29:79:01:62:4f:f5:
62:a3:e3:fd:2f:5d:57:ef:d4:65:15:b0:54:e3:a5:13:0d:e8:
ad:4f:5c:40:fa:e3:88:e2:6e:51:dc:37:bd:dd:54:b3:53:ca:
4d:0a:09:38:d4:c4:9b:d1:7b:6c:e0:1a:cd:13:ca:99:9d:54:
a3:57:fa:c6:3f:29:8a:be:53:92:17:38:52:0c:10:e3:dd:aa:
23:b5:71:7f:fa:dc:8e:1f:e3:5a:7f:9b:94:1d:25:b6:0a:e7:
ed:54:b7:10:6b:9d:49:c5:2d:77:52:7f:4c:1c:d1:10:95:96:
8d:a2:02:94:53:43:4a:26:99:08:3a:4a:8e:bf:43:0c:c7:68:
f5:59:0c:a3:d6:72:bf:46:e9:47:db:03:53:02:65:8c:f6:61:
34:1f:43:53:8b:c7:43:1e:2b:bc:b4:08:c0:f7:81:7e:17:14:
55:bd:0f:25:1c:ce:cd:af:04:fd:4b:6d:c6:b3:0e:bd:ac:14:
3c:18:94:06:f3:7b:9e:ad:fd:06:f7:a1:c7:f8:1f:39:7e:f7:
76:96:7f:9c:e1:04:2e:3b:08:05:20:5b:03:d5:eb:56:f7:46:
35:f0:b9:30:06:ad:5a:e7:e1:da:37:31:c3:2d:53:85:66:73:
cd:f1:d0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:57:19 2026 by rpki-client