
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier: sDIINygsZyLM3voX2KbwKwEGe/vReqzIxW8GQKX7NhY=
Subject key identifier: 28:29:FA:FC:44:C9:FA:2F:97:EB:62:3F:B7:0D:29:1C:4E:F9:53:23
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial: 013F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number: 012E
Signing time: Wed 07 Oct 2026 06:22:22 +0000
Manifest this update: Wed 07 Oct 2026 06:22:22 +0000
Manifest next update: Wed 14 Oct 2026 06:22:22 +0000
Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: NINjDNKa9KLRAlAxWTHm30CDMn4ct18rQDtMrjGTgNU=)
2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: vs8LiC2a7yfcHqx0F2jxfAS1octXGMx2IWNSmWMrwRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Validity
Not Before: Oct 7 06:22:22 2026 GMT
Not After : Oct 14 06:22:22 2026 GMT
Subject: CN=6ac5e51e-eb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:c5:73:c2:97:17:d8:bc:27:85:77:24:ed:
3e:f4:6b:f1:eb:79:2f:09:54:00:1c:30:51:90:68:
3c:a5:e5:53:78:53:9e:9b:ec:5f:71:3b:bc:3e:d0:
fc:a4:5b:45:a6:be:b8:52:c5:e8:11:56:b9:e1:1c:
34:ac:2c:e4:3a:9c:07:18:cf:0b:10:23:61:0b:fe:
19:85:6d:01:f4:f6:bf:02:4d:e5:cb:7b:aa:0d:45:
e9:37:f0:82:f7:f2:b6:fa:5b:37:bf:16:36:35:8d:
7c:75:9a:c7:0f:52:91:7b:7e:5a:0e:93:a9:ce:ca:
81:83:4f:22:aa:20:67:8d:3b:f8:3f:c0:08:75:b6:
f7:fe:ea:e9:a2:96:84:55:b7:10:0e:98:f9:73:79:
ec:87:73:f3:97:dd:34:7c:5d:e8:22:f9:cb:56:d9:
81:c8:c5:a2:40:1f:bd:ee:a0:33:03:1f:50:b1:73:
ee:a7:1e:12:f1:f2:41:3f:81:a5:4f:45:d2:ca:e6:
9a:9b:b3:8a:b1:41:85:a6:3c:e1:1a:7f:ae:a6:d7:
50:81:25:a9:ca:34:0c:f9:a1:8d:fe:26:32:c0:5e:
d2:82:bd:4b:cf:5f:07:ab:02:6c:b4:67:54:aa:96:
e7:bc:bb:2b:5d:7d:5f:d1:76:9e:d3:ae:45:8a:d5:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:FA:FC:44:C9:FA:2F:97:EB:62:3F:B7:0D:29:1C:4E:F9:53:23
X509v3 Authority Key Identifier:
keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:de:30:e0:70:e6:a4:72:7e:a1:7b:86:b2:0f:46:7f:04:8c:
bd:c9:49:19:4d:ff:bd:4d:54:78:81:ea:27:6f:32:93:f6:47:
ec:eb:ec:eb:56:36:73:a3:2c:9a:68:26:4d:c5:89:ff:64:f2:
bd:a9:8d:a1:fe:51:f0:0f:da:6b:03:85:b1:bd:ad:e2:3e:60:
e6:04:bb:91:81:0f:24:46:26:f2:ce:cd:3f:84:09:ab:b8:75:
87:7a:d5:d6:97:12:05:40:3e:fb:0c:d2:57:4c:73:8a:f3:9b:
5a:ed:e0:08:b3:f3:23:73:52:78:14:97:5f:08:67:3c:28:e8:
9e:16:3c:3e:50:81:67:bd:79:bf:16:d6:73:0f:7c:cf:f4:a4:
7c:3e:ff:7e:95:f6:d3:da:6e:9c:db:f0:72:80:cf:f0:fa:6a:
b4:56:6a:11:fe:df:6c:19:2d:3d:4a:bd:5c:ab:87:9b:80:fb:
e6:c6:e0:5b:59:d1:5f:19:d5:b6:4d:23:35:9b:35:da:f5:ba:
a0:72:13:98:49:3b:38:8e:0c:6d:88:02:de:3b:8a:2d:cd:cb:
2d:51:00:b6:37:b7:2b:93:9f:63:79:f3:15:21:43:16:b7:a9:
61:d6:d1:0d:c1:de:4d:65:3b:63:28:01:67:f5:58:01:f1:c8:
e9:d9:1d:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ0QzkxMTAvBgNVBAUTKDk1NzQ1MjkzQzg4QTI3MjZFMTBBNTdENThGNDJDQzMx
NjlCN0M5MjIwHhcNMjYxMDA3MDYyMjIyWhcNMjYxMDE0MDYyMjIyWjAYMRYwFAYD
VQQDEw02YWM1ZTUxZS1lYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJnFc8KXF9i8J4V3JO0+9Gvx63kvCVQAHDBRkGg8peVTeFOem+xfcTu8PtD8
pFtFpr64UsXoEVa54Rw0rCzkOpwHGM8LECNhC/4ZhW0B9Pa/Ak3ly3uqDUXpN/CC
9/K2+ls3vxY2NY18dZrHD1KRe35aDpOpzsqBg08iqiBnjTv4P8AIdbb3/urpopaE
VbcQDpj5c3nsh3Pzl900fF3oIvnLVtmByMWiQB+97qAzAx9QsXPupx4S8fJBP4Gl
T0XSyuaam7OKsUGFpjzhGn+uptdQgSWpyjQM+aGN/iYywF7Sgr1Lz18HqwJstGdU
qpbnvLsrXX1f0Xae065FitWU6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgp+vxE
yfovl+tiP7cNKRxO+VMjMB8GA1UdIwQYMBaAFJV0UpPIiicm4QpX1Y9CzDFpt8ki
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS84NDJGOTg5NDBF
QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5YmhDbGZWajBMTU1XbTN5
U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lTSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDRDOS84NDJGOTg5NDBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5
YmhDbGZWajBMTU1XbTN5U0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAct4w4HDmpHJ+oXuGsg9GfwSMvclJGU3/vU1UeIHqJ28yk/ZH7Ovs61Y2c6Ms
mmgmTcWJ/2TyvamNof5R8A/aawOFsb2t4j5g5gS7kYEPJEYm8s7NP4QJq7h1h3rV
1pcSBUA++wzSV0xzivObWu3gCLPzI3NSeBSXXwhnPCjonhY8PlCBZ715vxbWcw98
z/SkfD7/fpX209punNvwcoDP8PpqtFZqEf7fbBktPUq9XKuHm4D75sbgW1nRXxnV
tk0jNZs12vW6oHITmEk7OI4MbYgC3juKLc3LLVEAtje3K5OfY3nzFSFDFrepYdbR
DcHeTWU7YygBZ/VYAfHI6dkd+w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:23:26 2026 by rpki-client