
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json)
Hash identifier: MUkV5cSyunPTR2Jq8Bed/N87wPaqlLlnoMK0MooCcQ0=
Subject key identifier: A5:C4:16:56:8B:87:80:2E:6D:EE:B4:D8:78:DB:B8:EB:01:03:A2:A1
Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Certificate serial: 0C4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
Manifest number: 0C2B
Signing time: Fri 02 Oct 2026 19:03:10 +0000
Manifest this update: Fri 02 Oct 2026 19:03:10 +0000
Manifest next update: Fri 09 Oct 2026 19:03:10 +0000
Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: N2ST54FVV1GrLhqz8QMbWMNNVBr8dCr0YO45TZzIogU=)
2: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=)
3: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3149 (0xc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Validity
Not Before: Oct 2 19:03:10 2026 GMT
Not After : Oct 9 19:03:10 2026 GMT
Subject: CN=6abfffee-7ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:12:32:f9:bb:69:9c:14:35:68:f3:a5:15:
91:e8:30:1b:92:16:4f:84:f9:d1:dc:97:db:80:86:
6a:26:49:1a:c1:12:56:d8:28:58:5e:ac:8c:0d:06:
18:a5:f9:4b:47:a0:db:fa:bc:2e:41:80:f5:59:88:
d3:43:41:4a:8b:70:c4:ef:a3:24:5f:7f:fc:c7:68:
e8:1f:d7:a0:94:0e:44:1e:f7:fc:a7:fc:85:83:97:
91:76:f9:45:26:18:e3:09:fb:53:da:b4:9d:95:01:
b7:5e:6b:cf:fd:34:b6:c8:c2:0f:d1:29:2b:1b:b3:
83:53:ce:85:f4:c6:ba:ed:e4:40:ad:15:92:3e:4b:
eb:2a:28:8e:7a:27:80:1d:39:8c:fb:df:47:87:33:
86:79:21:b5:12:27:3e:08:59:6c:b6:dc:aa:b6:7d:
57:3f:17:c7:49:e2:d9:8e:4f:6c:02:dc:38:74:c8:
b6:1e:f2:96:5f:39:6a:ff:6f:f4:51:3a:70:89:da:
69:8c:80:40:a0:ce:ce:8a:14:04:2d:a2:26:32:85:
06:a2:de:87:08:f3:1c:fc:d2:66:a1:53:04:68:f4:
47:09:ee:e1:c4:ee:2f:90:a2:10:fe:3e:47:85:c9:
46:67:7d:45:ac:5b:cf:40:2e:56:e1:4a:95:a7:4f:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C4:16:56:8B:87:80:2E:6D:EE:B4:D8:78:DB:B8:EB:01:03:A2:A1
X509v3 Authority Key Identifier:
keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d2:5e:89:be:98:20:33:48:94:56:7b:e8:e9:56:41:18:ff:
ed:26:41:50:ae:73:8f:1f:70:c2:2b:0f:21:32:1e:85:45:4f:
9b:15:ee:40:22:5e:97:3a:d4:68:87:ce:d2:e5:6a:c1:6d:c4:
13:dd:b6:10:54:6b:dd:3f:a4:c0:5e:98:0d:68:50:88:2d:62:
ad:68:f3:62:af:80:5f:d9:fc:f2:39:ca:df:02:fe:3c:57:c2:
57:d7:5a:24:a2:63:bd:a2:35:84:03:b8:c4:3a:15:c9:21:85:
70:87:32:5d:0e:64:ef:05:e6:41:3f:52:26:6f:4e:89:bb:64:
0d:7c:2f:b6:2c:1a:95:2d:e9:95:c5:e0:bc:40:9a:db:74:8b:
c6:49:2d:bb:80:da:e9:86:e7:3e:65:3f:05:6e:68:6f:a7:46:
3f:10:2a:4f:91:33:fa:0e:ea:a9:9e:68:d3:62:cc:f5:ef:48:
80:c9:ae:ec:98:40:c1:15:f0:b6:da:db:ce:82:ef:54:3b:50:
e2:6f:65:5e:66:f5:1c:e4:f5:5d:1e:99:c4:0a:ba:10:e9:db:
27:e6:44:06:02:5d:e3:cf:b0:68:f5:34:95:9a:0d:c8:0e:fc:
41:9e:04:b9:34:a9:2c:e6:82:54:27:40:db:07:98:84:93:98:
f4:69:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:38:38 2026 by rpki-client