
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft
File: LD0jWhshn0FmEJALADuKv9wXAqI.mft (raw, json)
Hash identifier: OT6RImX6vSJM7kpXBiqd5iTGN5KEnopwRdLAFpyXPYg=
Subject key identifier: A1:0D:6F:6A:55:60:37:63:C1:62:29:26:A6:BF:4F:62:F4:83:8C:A9
Authority key identifier: 2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2
Certificate issuer: /CN=A91CEA40/serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2
Certificate serial: 0719
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft
Manifest number: 0709
Signing time: Sun 04 Oct 2026 22:15:24 +0000
Manifest this update: Sun 04 Oct 2026 22:15:23 +0000
Manifest next update: Sun 11 Oct 2026 22:15:23 +0000
Files and hashes: 1: LD0jWhshn0FmEJALADuKv9wXAqI.crl (hash: e1SOzeK3lZEk6TBCF3oc8pPCnWHHbCCJY9phpsjsfN4=)
2: 96F093D4BEA011EB8CAD965FC4F9AE02.roa (hash: iGuCHDAUL0PXZn0ORHKJTEzzVOLk9UA+q1lRAx9/x7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl
rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEA40, serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2
Validity
Not Before: Oct 4 22:15:23 2026 GMT
Not After : Oct 11 22:15:23 2026 GMT
Subject: CN=6ac2cffc-e673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:5d:1b:a4:a9:40:39:77:e4:a6:c5:ef:ff:
d6:ac:8b:ea:93:b8:65:bd:42:2a:44:d5:ee:fd:e0:
4d:b6:74:5b:0d:1f:7b:d4:b2:c3:96:27:f1:fb:81:
43:ce:84:0b:64:a9:69:b3:b9:00:f9:ab:e5:6c:59:
72:f0:89:74:67:64:61:31:d2:f7:68:e9:b3:3f:5a:
d7:b5:32:07:34:07:6b:03:ea:fc:49:81:85:04:66:
2b:8a:0d:37:ba:fd:76:22:58:39:74:36:e6:0a:a7:
8d:2b:3c:61:56:1a:73:c9:51:1f:45:c4:2e:d7:18:
99:ed:7b:fa:44:86:12:0a:92:72:38:fa:b8:09:b0:
36:f2:2c:8f:c9:74:01:ee:1f:03:d0:03:4d:6d:33:
0d:90:f2:d3:37:28:bd:7e:7f:04:63:4f:6d:26:e3:
34:29:8f:f7:e3:39:71:09:c7:35:00:a1:8e:90:90:
b7:a5:35:40:3d:11:d9:9d:2f:c0:22:27:4e:ef:1c:
08:67:11:73:a6:f3:b3:91:54:82:fd:5e:67:0f:1e:
df:41:31:b2:80:57:92:6b:56:8e:d0:24:6a:e3:2c:
92:bd:4f:84:0b:e5:94:e2:0e:60:d0:8c:b8:a6:c1:
fb:9d:ca:4e:79:ce:91:b7:34:f3:4f:6f:17:4f:2a:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0D:6F:6A:55:60:37:63:C1:62:29:26:A6:BF:4F:62:F4:83:8C:A9
X509v3 Authority Key Identifier:
keyid:2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:bc:9a:a7:54:fa:0a:99:3e:ab:3b:06:e3:1c:80:88:32:ac:
ab:f9:e7:d9:06:47:7d:e3:27:d1:4b:8e:39:87:8c:6d:96:2d:
a9:e2:b0:0a:f4:25:d6:79:bf:16:16:62:61:a8:f7:cd:9c:04:
56:35:d7:c2:97:43:fa:24:53:b7:d6:39:41:61:02:83:5c:3e:
06:03:6c:f6:e2:6e:6a:8f:8b:44:21:4c:79:50:ae:0b:1e:a0:
a4:6d:9f:43:e0:cd:02:f9:c1:d2:99:64:4b:94:42:97:65:1d:
40:0c:7c:1d:42:51:4b:88:7b:e6:ad:82:7c:f2:c8:24:6e:29:
e0:81:44:78:77:03:2b:34:9f:9b:7d:74:39:a7:0b:30:9d:a3:
63:99:c4:29:38:68:b1:07:20:b3:66:c4:b6:42:4c:16:ce:74:
14:dc:43:b9:0a:05:df:0e:ab:ce:f6:91:46:b3:38:af:2d:a3:
95:64:dd:98:83:9e:00:1b:82:a3:d5:61:f0:07:65:17:28:8d:
31:19:85:4d:fd:08:17:bc:32:2f:7d:7e:31:fa:c9:b6:f6:f8:
86:30:05:75:84:de:15:d1:1b:2e:0b:dc:4d:94:b6:4a:5c:af:
a9:5e:f0:73:9d:ee:3a:39:75:92:80:59:57:2d:f4:df:8f:c4:
18:97:01:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VBNDAxMTAvBgNVBAUTKDJDM0QyMzVBMUIyMTlGNDE2NjEwOTAwQjAwM0I4QUJG
REMxNzAyQTIwHhcNMjYxMDA0MjIxNTIzWhcNMjYxMDExMjIxNTIzWjAYMRYwFAYD
VQQDEw02YWMyY2ZmYy1lNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6epdG6SpQDl35KbF7//WrIvqk7hlvUIqRNXu/eBNtnRbDR971LLDlifx+4FD
zoQLZKlps7kA+avlbFly8Il0Z2RhMdL3aOmzP1rXtTIHNAdrA+r8SYGFBGYrig03
uv12Ilg5dDbmCqeNKzxhVhpzyVEfRcQu1xiZ7Xv6RIYSCpJyOPq4CbA28iyPyXQB
7h8D0ANNbTMNkPLTNyi9fn8EY09tJuM0KY/34zlxCcc1AKGOkJC3pTVAPRHZnS/A
IidO7xwIZxFzpvOzkVSC/V5nDx7fQTGygFeSa1aO0CRq4yySvU+EC+WU4g5g0Iy4
psH7ncpOec6RtzTzT28XTypSUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKENb2pV
YDdjwWIpJqa/T2L0g4ypMB8GA1UdIwQYMBaAFCw9I1obIZ9BZhCQCwA7ir/cFwKi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUE0MC84RTk2NEJDRUFG
NzkxMUVCODQyMTdBNThDNEY5QUUwMi9MRDBqV2hzaG4wRm1FSkFMQUR1S3Y5d1hB
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xEMGpXaHNobjBGbUVKQUxBRHVLdjl3WEFxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUE0MC84RTk2NEJDRUFGNzkxMUVCODQyMTdBNThDNEY5QUUwMi9MRDBqV2hzaG4w
Rm1FSkFMQUR1S3Y5d1hBcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANbyap1T6Cpk+qzsG4xyAiDKsq/nn2QZHfeMn0UuOOYeMbZYtqeKwCvQl1nm/
FhZiYaj3zZwEVjXXwpdD+iRTt9Y5QWECg1w+BgNs9uJuao+LRCFMeVCuCx6gpG2f
Q+DNAvnB0plkS5RCl2UdQAx8HUJRS4h75q2CfPLIJG4p4IFEeHcDKzSfm310OacL
MJ2jY5nEKThosQcgs2bEtkJMFs50FNxDuQoF3w6rzvaRRrM4ry2jlWTdmIOeABuC
o9Vh8AdlFyiNMRmFTf0IF7wyL31+MfrJtvb4hjAFdYTeFdEbLgvcTZS2SlyvqV7w
c53uOjl1koBZVy3034/EGJcBYQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:15:04 2026 by rpki-client