
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json)
Hash identifier: 8Yv9liqBbf3I/W59J4PnnnxE0HdFnsDDWCbz4PC1khE=
Subject key identifier: 1A:5A:BE:83:EB:8D:48:7C:2F:86:E4:8B:C1:28:AC:56:76:34:36:68
Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Certificate serial: 0AB0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
Manifest number: 0AA6
Signing time: Mon 26 Oct 2026 19:31:05 +0000
Manifest this update: Mon 26 Oct 2026 19:31:04 +0000
Manifest next update: Mon 02 Nov 2026 19:31:04 +0000
Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: DBwc7TMZCYvuhQDlL2f9A09ClxAq/O5D62jn/wtn6gQ=)
2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: 8gfMMaRVrtkX5a9ZT5jiYrSA6yuefa6iSnnXB/9jTng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 19:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2736 (0xab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Validity
Not Before: Oct 26 19:31:04 2026 GMT
Not After : Nov 2 19:31:04 2026 GMT
Subject: CN=6adfaa79-d7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:86:1e:66:1c:6e:08:e3:5c:62:12:1c:20:84:
0c:2a:1c:8a:cd:a4:88:46:55:9e:58:02:58:91:6f:
f3:e1:50:9e:d6:8a:85:ce:e2:9f:d4:6a:c4:a0:c6:
ea:21:06:88:ac:8b:5c:ad:af:6d:67:0c:de:a5:00:
1d:50:2f:1a:a5:ec:53:cd:aa:8e:16:73:52:1c:71:
0c:f3:9b:84:89:ab:c8:a0:7a:aa:e9:7a:29:78:f3:
e1:69:4a:e6:09:29:80:4b:33:96:ce:3b:c9:af:23:
81:08:47:40:21:ae:58:2a:9f:9c:e7:c3:5f:76:7d:
d6:06:e7:df:99:19:64:a0:8c:3c:79:14:61:ff:16:
12:fe:4b:5e:bd:fb:ef:cc:ef:97:02:0f:53:e7:40:
0a:d7:1e:bf:26:66:31:2d:79:75:2c:74:3a:66:c3:
8c:14:eb:f1:87:af:6f:48:a7:af:52:84:04:27:3b:
3d:95:89:8a:95:1d:e8:8c:88:ea:b2:d4:d5:bb:e3:
af:6b:b2:5f:c4:43:56:81:9d:33:b7:63:32:4b:ae:
12:69:49:40:45:87:d7:0c:1c:5c:3a:53:b7:cf:ad:
fd:72:a8:89:ed:02:c7:bf:28:71:85:91:a3:c7:b6:
76:9d:5f:2b:4f:42:f9:9c:0d:b9:c5:c5:04:dd:f4:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:BE:83:EB:8D:48:7C:2F:86:E4:8B:C1:28:AC:56:76:34:36:68
X509v3 Authority Key Identifier:
keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:92:77:08:34:25:f4:ae:33:2a:e1:24:49:11:c7:1b:93:37:
78:70:47:98:ba:d9:84:ae:d7:6f:06:a1:c5:dc:ed:77:ab:2b:
f8:24:96:b8:be:ab:27:de:b2:9d:93:9b:02:d4:b4:95:ca:e4:
3a:e3:ec:c4:da:c7:f1:7c:31:0a:1a:83:c0:42:3a:72:59:8d:
a0:13:3a:94:f0:8c:7d:6d:9f:18:dd:cd:1a:3f:45:1f:7f:bd:
23:6c:af:7b:98:32:ad:5f:dd:49:3d:4f:99:36:f7:c9:b5:db:
2e:ab:d7:68:2e:43:16:35:55:04:7b:61:45:12:b5:f6:a3:72:
5f:d8:20:f3:71:ef:19:72:3e:9b:54:92:e4:1d:f8:9a:72:61:
14:b3:41:12:55:3f:b6:83:87:8e:0e:f4:3d:e3:4f:de:3f:e3:
b4:c9:f9:01:b8:bf:0d:cf:69:30:00:17:b6:49:b7:0a:12:7c:
6f:0a:ba:42:fc:c5:f3:28:a3:6e:00:5b:5d:78:5b:47:6e:f4:
d8:76:f9:c7:93:a0:66:59:71:ff:e5:75:fc:97:07:04:65:14:
28:06:23:c6:8a:89:61:f2:c1:cb:13:7d:68:a5:da:f7:f9:b7:
87:d3:b3:8f:71:af:d0:7a:8e:04:c5:d5:89:97:cf:9e:03:12:
0d:69:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:37:11 2026 by rpki-client