
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier: O+ICALweZdma+pbU9vHoJ2GJ27LBUXehLO+jFF9QuOU=
Subject key identifier: FF:36:59:6E:7D:9F:48:23:B4:B6:17:79:7C:1C:02:42:11:D0:69:8F
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial: 0475
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number: 0463
Signing time: Fri 04 Sep 2026 23:52:59 +0000
Manifest this update: Fri 04 Sep 2026 23:52:58 +0000
Manifest next update: Fri 11 Sep 2026 23:52:58 +0000
Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: Si+igoQZD+1U/IFkeZC1VbhjS5JpQsOPS85Jzt+GJ4Q=)
2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: EDtbFOZ30qxpy27dyAdV7M2WWSG7NvMRonEndm53RCk=)
3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: rnGgn8k/c8Zid4oEdERz/qcES9MxLTZSwdtdf5qqEqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Validity
Not Before: Sep 4 23:52:58 2026 GMT
Not After : Sep 11 23:52:58 2026 GMT
Subject: CN=6a9b59db-a435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:e9:c4:b7:6d:b3:49:d1:8e:fc:9c:8d:6a:
90:30:dd:80:b0:2d:ff:b6:50:5d:b8:b8:b3:0e:d9:
9c:93:20:32:4f:e8:da:ed:2f:c4:df:80:98:53:78:
13:f4:4e:c0:f4:c2:68:fd:b3:76:49:34:7d:06:16:
3a:40:0d:31:5a:cf:78:7f:43:c2:2f:a6:f9:d6:49:
7b:86:9c:87:13:ec:e2:7d:19:57:23:c1:b6:f7:d0:
3e:65:c7:74:f0:7e:c1:8c:c4:2e:d8:80:d8:e7:e9:
83:4e:82:2f:48:27:0e:e1:9e:52:66:cf:83:ad:24:
78:ee:49:e2:a7:5c:6b:58:44:69:78:6d:ec:53:91:
49:71:d3:30:ec:60:69:e2:6c:3d:6d:89:19:96:f6:
99:b1:a4:18:33:24:a7:c3:7a:e7:b1:0a:e5:9b:06:
d6:eb:e0:00:51:03:de:4c:77:8c:7c:39:9d:63:36:
14:d7:c3:55:95:d3:c3:9e:36:57:a4:54:03:2e:9d:
ec:1c:3b:fd:df:81:86:53:73:d8:a3:ba:50:c5:2b:
f6:45:86:76:57:5c:eb:a8:da:dd:88:4a:97:67:5f:
f6:27:0f:fe:80:90:f9:ac:d8:6f:1c:01:d2:43:71:
bb:75:a0:11:22:73:36:a1:48:bc:ab:30:01:6d:bc:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:59:6E:7D:9F:48:23:B4:B6:17:79:7C:1C:02:42:11:D0:69:8F
X509v3 Authority Key Identifier:
keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1e:1d:37:5c:a6:cc:fa:cc:86:57:42:96:d2:24:7c:4f:72:
25:65:c3:9d:06:b9:0f:f4:05:51:74:ed:27:1a:09:dd:e3:1f:
46:28:77:dc:a6:0d:6c:97:f6:b9:66:87:88:47:d5:cf:e4:75:
60:7d:b2:7c:84:05:1d:4e:1a:8f:d5:3b:86:31:81:99:19:16:
69:84:9d:67:30:92:52:0a:65:71:af:f0:dc:a5:64:b0:04:63:
ac:64:34:da:25:71:7e:84:88:63:0a:dc:71:d9:f8:6b:64:76:
44:9d:af:55:9b:d4:ca:71:8d:5e:9a:b8:e7:c0:80:b7:aa:27:
15:26:d3:63:9f:e0:c8:ae:1c:c6:47:14:c9:16:11:f4:1d:30:
28:9c:e5:d5:04:55:f0:c1:8c:39:79:c7:35:be:48:2e:52:6e:
6e:0e:79:23:41:c9:2c:26:c5:76:85:3a:5e:8c:6c:c7:bf:b4:
6c:f4:20:5a:e1:3d:aa:95:50:2f:24:e3:2e:09:bd:ad:e0:96:
b7:65:43:46:c1:ef:7c:53:07:3e:b6:8b:e7:c5:4c:67:89:7f:
6b:a5:1b:db:e2:67:6a:25:2d:de:45:71:4f:f4:28:0d:16:64:
fd:08:b8:7b:47:93:46:38:c8:6d:72:d7:f5:63:7c:42:fe:d3:
f7:2e:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:43:56 2026 by rpki-client