
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
File: L71gGUYMdo4C0QZloGiN0flxhG8.mft (raw, json)
Hash identifier: nVoBKlL/5jRfErcf3gBWDU8QAqsI6dX6ezYoUUzg9V4=
Subject key identifier: DD:61:BD:3D:70:FB:0A:84:12:9B:0F:59:9E:0C:55:22:7F:A5:5F:14
Authority key identifier: 2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
Certificate issuer: /CN=A9110C8B/serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
Manifest number: 89
Signing time: Sun 11 Oct 2026 08:12:18 +0000
Manifest this update: Sun 11 Oct 2026 08:12:18 +0000
Manifest next update: Sun 18 Oct 2026 08:12:18 +0000
Files and hashes: 1: L71gGUYMdo4C0QZloGiN0flxhG8.crl (hash: CVxPxaGJDbUBMhbKYxDuDdCFOH7fCJq/G/suy1HyW/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C8B, serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Validity
Not Before: Oct 11 08:12:18 2026 GMT
Not After : Oct 18 08:12:18 2026 GMT
Subject: CN=6acb44e2-95e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:71:6a:df:71:84:c5:88:da:e8:6c:36:8e:
da:ae:35:c5:3d:6b:f6:6f:98:86:00:94:30:57:f5:
a9:8b:b8:1f:23:99:b6:51:9f:28:df:2b:7e:28:27:
90:53:d5:56:ce:92:3f:9a:7b:68:e8:8a:76:39:e3:
91:14:09:6d:fd:00:cf:a3:55:be:c6:89:fb:52:52:
9c:89:92:98:c2:5a:00:f8:f2:37:cb:8b:2a:eb:e7:
be:88:ea:e3:8a:db:be:7c:57:d4:c0:29:57:fc:7a:
0c:ef:4b:36:09:37:6f:f1:7d:fa:81:ac:22:cb:7a:
1a:ed:e7:b0:07:f2:3b:cf:c6:91:da:8e:8f:41:23:
df:39:0f:0b:41:c3:0e:27:ce:f4:f1:6d:3f:4e:35:
1e:bf:3e:38:da:08:ff:19:fd:a6:ba:48:4e:85:ff:
57:71:87:79:df:cf:bd:6f:f9:d9:0e:0c:e6:b8:05:
63:c0:7f:61:f6:4f:21:2a:22:bf:7d:8b:91:57:b6:
20:0e:9f:fd:20:69:d6:cd:53:58:0b:d0:a9:ad:e0:
bd:af:00:fe:59:65:b5:83:ce:3d:27:05:65:70:40:
76:83:9c:8b:39:9a:6b:50:24:42:78:f8:43:cd:dd:
7a:ea:11:bd:15:3b:6c:e6:af:b2:4b:8f:87:f6:b0:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:BD:3D:70:FB:0A:84:12:9B:0F:59:9E:0C:55:22:7F:A5:5F:14
X509v3 Authority Key Identifier:
keyid:2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a0:3e:db:3c:f7:6e:2d:9f:32:f0:b5:4a:04:f0:c1:8b:d6:
f3:ad:19:66:9d:c4:66:87:58:e8:9a:e3:67:90:dc:c5:e1:3f:
d0:27:1f:f2:c9:2d:df:6f:96:05:13:a6:86:1f:72:90:6a:24:
2a:9f:b8:15:d2:e8:b8:2b:21:50:85:79:16:04:34:26:f7:7a:
b5:14:3c:9e:7c:0b:fa:61:58:e0:e8:b7:39:91:8b:1c:9b:5c:
8f:c9:ef:a2:c4:96:9d:19:6e:31:f8:ba:c6:6e:cb:73:35:31:
d2:b1:dc:9d:bd:54:08:f3:bc:2d:dd:da:c9:33:84:7a:9c:89:
a7:4f:38:6d:9d:04:99:eb:cb:e7:96:94:37:71:41:b1:ee:c8:
cc:ca:04:74:60:a3:45:88:f3:7a:2c:b6:e0:9a:f2:ad:24:fa:
78:08:1e:23:63:89:37:cf:44:89:01:a5:4c:7c:02:3b:b3:02:
f6:ae:a4:97:4a:94:64:64:ae:00:a3:ea:4b:29:df:3f:1e:0e:
d3:7d:4a:ad:9a:4f:cd:fb:8e:00:79:52:99:1c:db:38:99:06:
0c:df:d5:9c:f8:dc:c1:f4:ab:c0:77:62:15:7c:20:b5:7e:74:
32:b7:11:55:e5:91:71:88:ba:31:d6:b9:aa:7c:82:7d:dc:6f:
57:5a:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:29:24 2026 by rpki-client