
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier: XG1kTi1yqBKynWVoa2nHYupBNYHA6KoHkiekfHKoros=
Subject key identifier: F1:00:45:67:91:7E:9E:0B:07:FD:B6:18:EE:BE:23:23:91:5B:11:0C
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number: 0278
Signing time: Fri 23 Oct 2026 02:29:12 +0000
Manifest this update: Fri 23 Oct 2026 02:29:11 +0000
Manifest next update: Fri 30 Oct 2026 02:29:11 +0000
Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: +t/+g3AO35zxHhPHpZHhs+D2r1C7m8n9Z4mIRc5aEuc=)
2: 3304B5BA43B311F19399644A98833773.roa (hash: bzOsUU4L5zybRan2RbEqjLxhGbEC4X30U/TXsNv87pc=)
3: AD4C18D62D1511F19E800787B3833773.roa (hash: gF6FfjxDgiZ5qTPAnk0dNcAHblND2UNyNpInYeZ2Rc8=)
4: 6445C13C2D1511F18C0F846BB3833773.roa (hash: PLgXnUtV5/qDMTfK+s5CXVumrPmYkILffVNAYNUoLk4=)
5: 95FE27F02D1511F19EAB6E70B3833773.roa (hash: hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 02:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Validity
Not Before: Oct 23 02:29:11 2026 GMT
Not After : Oct 30 02:29:11 2026 GMT
Subject: CN=6adac678-550a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:37:2d:cc:21:39:6b:e7:37:ce:c7:a1:ee:
63:0c:ae:d1:c8:b0:2c:24:4b:b3:6e:77:6c:28:d1:
51:f5:ce:df:c9:72:65:92:77:fb:80:ff:25:94:a0:
0e:cf:42:68:dc:a8:33:33:67:a5:12:38:2d:6b:b3:
b3:fc:79:33:c4:60:f2:88:8a:31:8f:77:a2:01:44:
21:2e:c3:75:1d:79:6b:84:73:62:1e:1c:3e:b6:2d:
21:fe:2c:c6:40:61:d6:8a:f2:66:98:96:fa:2a:6f:
e9:f9:36:d5:45:5b:24:6b:53:fb:64:6d:1d:80:8e:
4d:0c:de:4a:20:1e:71:0a:93:63:18:7e:3c:4a:77:
3d:b9:16:7e:05:d3:af:8d:51:a9:eb:4a:db:4d:30:
6a:43:95:80:7b:b2:81:cf:ec:06:54:80:aa:df:b6:
fb:7e:47:f6:8b:c0:18:ea:1f:02:86:25:c1:17:7c:
6f:e0:4b:c3:5a:3a:a4:24:ee:d0:04:4c:d0:80:9d:
3f:a3:d3:f1:b4:c5:c7:98:8b:cf:12:b6:e4:b0:33:
2c:c1:00:7f:03:1b:26:fe:5c:48:23:1c:b9:06:f8:
cb:d1:20:fc:63:4c:48:11:50:2c:a8:04:15:30:30:
05:7e:87:a1:ef:a7:79:48:54:fa:4f:60:9b:2a:aa:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:00:45:67:91:7E:9E:0B:07:FD:B6:18:EE:BE:23:23:91:5B:11:0C
X509v3 Authority Key Identifier:
keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3c:de:a6:a2:86:6c:1d:78:13:ec:f4:7e:85:c6:52:c3:47:
45:db:82:83:b9:80:d4:9a:4b:3a:7a:b7:12:5c:9c:4c:0a:0d:
26:77:38:8e:4f:16:0d:77:a0:72:6e:a1:b2:7b:86:44:c3:6e:
a0:94:64:9f:ef:ce:bc:b7:04:39:a2:18:31:e2:2f:3c:2c:39:
11:a3:0c:33:e1:e3:1e:7b:a1:9e:49:72:c8:05:70:9d:5b:9d:
5c:0f:21:19:4d:75:01:0b:f8:6f:36:26:18:47:8a:14:4d:aa:
f7:e9:c2:e8:c4:8b:5f:79:5f:46:21:4d:81:b6:fa:68:6d:7d:
43:7f:61:93:07:54:eb:fb:97:18:9d:73:a4:65:ec:db:5a:2f:
69:c9:34:58:d7:12:f9:1e:c1:5b:02:a4:4c:7b:0c:71:c7:c0:
dc:1e:7e:c9:c5:4e:7f:52:27:f4:03:8f:30:77:64:74:92:d1:
96:c1:d6:10:0e:4b:72:0e:5b:ca:63:0a:32:36:69:12:70:95:
b6:eb:96:49:3d:d4:2c:f1:d8:9f:16:a2:b1:05:18:cd:08:d9:
51:1f:63:ef:b0:71:84:e4:ba:57:e0:54:4b:0c:47:53:e8:a2:
aa:54:1a:4d:7e:96:c2:92:85:32:60:0c:26:d9:a6:19:77:8a:
56:c9:5a:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD
MEM1RDg0REYwHhcNMjYxMDIzMDIyOTExWhcNMjYxMDMwMDIyOTExWjAYMRYwFAYD
VQQDEw02YWRhYzY3OC01NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArAI3LcwhOWvnN87Hoe5jDK7RyLAsJEuzbndsKNFR9c7fyXJlknf7gP8llKAO
z0Jo3KgzM2elEjgta7Oz/HkzxGDyiIoxj3eiAUQhLsN1HXlrhHNiHhw+ti0h/izG
QGHWivJmmJb6Km/p+TbVRVska1P7ZG0dgI5NDN5KIB5xCpNjGH48Snc9uRZ+BdOv
jVGp60rbTTBqQ5WAe7KBz+wGVICq37b7fkf2i8AY6h8ChiXBF3xv4EvDWjqkJO7Q
BEzQgJ0/o9PxtMXHmIvPErbksDMswQB/Axsm/lxIIxy5BvjL0SD8Y0xIEVAsqAQV
MDAFfoeh76d5SFT6T2CbKqoCcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEARWeR
fp4LB/22GO6+IyORWxEMMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5
N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu
YnJ5VDhjTjJsa25BeGRoTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnzzepqKGbB14E+z0foXGUsNHRduCg7mA1JpLOnq3ElycTAoNJnc4jk8WDXeg
cm6hsnuGRMNuoJRkn+/OvLcEOaIYMeIvPCw5EaMMM+HjHnuhnklyyAVwnVudXA8h
GU11AQv4bzYmGEeKFE2q9+nC6MSLX3lfRiFNgbb6aG19Q39hkwdU6/uXGJ1zpGXs
21ovack0WNcS+R7BWwKkTHsMccfA3B5+ycVOf1In9AOPMHdkdJLRlsHWEA5Lcg5b
ymMKMjZpEnCVtuuWST3ULPHYnxaisQUYzQjZUR9j77BxhOS6V+BUSwxHU+iiqlQa
TX6WwpKFMmAMJtmmGXeKVsla4w==
-----END CERTIFICATE-----
Generated at Sat Oct 24 04:57:27 2026 by rpki-client