
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier: VSPFL4IEohG6vlGFFOtF4A3Z+3QhC8Nsh0wcShSvqbw=
Subject key identifier: 74:D0:9B:6D:BF:23:59:42:DA:4F:97:43:75:07:DC:70:6B:27:DA:7B
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number: 025F
Signing time: Thu 03 Sep 2026 02:26:49 +0000
Manifest this update: Thu 03 Sep 2026 02:26:48 +0000
Manifest next update: Thu 10 Sep 2026 02:26:48 +0000
Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: tHR4WT83w/clmsRsCxkX4YwlH6VkZYTW/EhMlKQ5dYY=)
2: AD4C18D62D1511F19E800787B3833773.roa (hash: gF6FfjxDgiZ5qTPAnk0dNcAHblND2UNyNpInYeZ2Rc8=)
3: 95FE27F02D1511F19EAB6E70B3833773.roa (hash: hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=)
4: 3304B5BA43B311F19399644A98833773.roa (hash: bzOsUU4L5zybRan2RbEqjLxhGbEC4X30U/TXsNv87pc=)
5: 6445C13C2D1511F18C0F846BB3833773.roa (hash: PLgXnUtV5/qDMTfK+s5CXVumrPmYkILffVNAYNUoLk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Validity
Not Before: Sep 3 02:26:48 2026 GMT
Not After : Sep 10 02:26:48 2026 GMT
Subject: CN=6a98dae9-3cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b5:89:6c:d8:71:b1:42:d0:dd:b7:2a:2a:28:
64:78:9c:4c:2f:0e:df:57:78:3a:7f:e7:aa:04:8b:
57:ad:1e:80:04:df:77:86:37:bf:b5:ee:56:ff:0b:
f3:42:f5:3b:d5:3b:17:54:9c:fe:74:86:13:42:3c:
cb:6a:3d:66:d5:e9:de:c9:f1:16:cc:8a:03:d0:bb:
e9:9e:3c:cc:4c:09:91:f9:5d:d1:31:d7:99:08:96:
af:3a:65:60:e9:d2:91:8a:8f:7e:a5:1b:1f:90:49:
ba:95:ed:da:34:d1:7f:7d:39:3b:a3:3e:ce:10:0a:
37:b0:18:13:ea:3e:be:ba:31:9e:70:22:16:48:48:
90:a2:3a:c0:27:8d:ed:ff:f8:f7:57:33:d0:60:5a:
a4:1d:24:79:c8:04:4d:7d:ea:b8:02:ab:5a:c7:da:
b0:8c:30:da:f0:39:8f:96:50:99:60:07:f1:13:ad:
7b:47:d4:cf:2b:67:ab:a4:26:56:8a:f1:94:31:c9:
07:98:5e:6a:f4:e2:33:40:a4:a3:ac:86:7a:d9:41:
48:af:80:10:08:b1:8d:a6:b1:9b:2c:0e:a1:30:49:
46:f7:75:ba:83:7d:e9:0b:90:82:ab:c9:d0:dd:8f:
0a:2b:7c:28:6c:58:46:72:51:39:de:0f:b3:57:62:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:9B:6D:BF:23:59:42:DA:4F:97:43:75:07:DC:70:6B:27:DA:7B
X509v3 Authority Key Identifier:
keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:77:ea:02:27:88:1f:ec:16:ea:78:a9:62:6a:60:b3:a7:e4:
4a:0d:cd:67:ef:c4:39:cf:3b:54:77:59:84:fa:8c:23:56:3d:
3b:6b:7d:6c:e6:c8:bc:de:dc:d1:ff:b5:c4:a7:4a:a2:25:9f:
db:33:eb:5d:57:b6:8c:b6:67:60:06:c2:f0:ef:ba:0c:b6:5e:
1d:0a:d8:19:a2:b4:5d:4e:68:67:41:0d:7d:6a:99:89:38:fb:
6e:12:8f:fa:33:bd:23:da:d2:b4:60:cc:c9:52:cd:32:49:75:
c2:af:d1:3e:80:11:b5:74:ec:9a:82:85:ed:b6:ff:17:18:96:
b7:20:00:2c:c7:95:33:98:76:67:60:bf:9c:1e:de:d2:9a:dc:
04:84:5c:ae:5e:3c:26:cc:f5:52:e2:5e:54:98:2f:a7:d1:07:
7d:ff:91:fd:28:3e:a5:dc:ad:18:8b:8a:bc:6f:5e:e3:05:f2:
df:4b:47:3c:ed:65:29:16:15:c2:1c:74:af:1a:7f:9b:94:48:
3e:32:ec:6f:ed:af:b4:df:da:51:3a:d6:f5:56:96:4f:9b:db:
43:44:aa:f4:23:fc:04:57:be:27:dc:eb:53:f8:45:c6:fa:48:
8a:e8:c8:2f:9e:0e:b5:b1:b4:9f:07:23:52:c8:f3:fa:bd:88:
06:bc:1a:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD
MEM1RDg0REYwHhcNMjYwOTAzMDIyNjQ4WhcNMjYwOTEwMDIyNjQ4WjAYMRYwFAYD
VQQDEw02YTk4ZGFlOS0zY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi7WJbNhxsULQ3bcqKihkeJxMLw7fV3g6f+eqBItXrR6ABN93hje/te5W/wvz
QvU71TsXVJz+dIYTQjzLaj1m1eneyfEWzIoD0LvpnjzMTAmR+V3RMdeZCJavOmVg
6dKRio9+pRsfkEm6le3aNNF/fTk7oz7OEAo3sBgT6j6+ujGecCIWSEiQojrAJ43t
//j3VzPQYFqkHSR5yARNfeq4Aqtax9qwjDDa8DmPllCZYAfxE617R9TPK2erpCZW
ivGUMckHmF5q9OIzQKSjrIZ62UFIr4AQCLGNprGbLA6hMElG93W6g33pC5CCq8nQ
3Y8KK3wobFhGclE53g+zV2LaNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTQm22/
I1lC2k+XQ3UH3HBrJ9p7MB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5
N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu
YnJ5VDhjTjJsa25BeGRoTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOnfqAieIH+wW6nipYmpgs6fkSg3NZ+/EOc87VHdZhPqMI1Y9O2t9bObIvN7c
0f+1xKdKoiWf2zPrXVe2jLZnYAbC8O+6DLZeHQrYGaK0XU5oZ0ENfWqZiTj7bhKP
+jO9I9rStGDMyVLNMkl1wq/RPoARtXTsmoKF7bb/FxiWtyAALMeVM5h2Z2C/nB7e
0prcBIRcrl48Jsz1UuJeVJgvp9EHff+R/Sg+pdytGIuKvG9e4wXy30tHPO1lKRYV
whx0rxp/m5RIPjLsb+2vtN/aUTrW9VaWT5vbQ0Sq9CP8BFe+J9zrU/hFxvpIiujI
L54OtbG0nwcjUsjz+r2IBrwaIA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:51:32 2026 by rpki-client