
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File: L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier: FSpV/ab07CTi+88TfBn5XP8AaMu/Rxse8WuGmth9Iww=
Subject key identifier: 62:B5:BD:4F:76:FB:4B:A3:06:8A:C6:8A:32:68:35:8F:08:0A:11:A2
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 2632
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number: 25A2
Signing time: Sat 18 Apr 2026 15:38:37 +0000
Manifest this update: Sat 18 Apr 2026 15:38:36 +0000
Manifest next update: Sat 25 Apr 2026 15:38:36 +0000
Files and hashes: 1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: UIePkn6NptYcnxg9KwNoonGEsHjxRi8Jp2mNy4kdH1A=)
2: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
3: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
4: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
5: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
6: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
7: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
8: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
9: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
10: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
11: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
12: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
13: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
14: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 15:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9778 (0x2632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Apr 18 15:38:36 2026 GMT
Not After : Apr 25 15:38:36 2026 GMT
Subject: CN=69e3a57d-d7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:88:bd:fd:4b:9a:31:c0:d1:ea:d2:6b:cb:
ca:3a:74:81:54:82:61:16:dc:f4:e8:75:fb:1c:01:
eb:75:b6:15:59:97:5a:c5:3c:61:e8:06:72:37:89:
7a:05:93:c3:a6:7c:d5:5f:54:a7:e7:92:ae:35:91:
d3:fd:c3:f3:a3:fb:f0:2d:03:67:0a:c8:9f:41:4b:
cf:4e:db:64:cb:b2:25:f1:be:8e:db:25:75:6f:dc:
56:6d:cb:7c:a4:22:dd:a0:9e:6d:4a:ed:3d:ce:72:
54:82:b2:ec:bc:f3:01:07:b3:e5:34:38:fb:f8:21:
72:dd:0e:5a:2a:08:c3:95:64:da:13:9e:06:d9:64:
27:6e:19:30:d8:0f:e1:7b:ec:46:ec:bb:a4:2d:85:
32:40:38:63:d8:9e:d5:3e:10:d6:8a:5a:17:db:36:
69:4b:8f:77:ce:e8:d9:95:e2:21:d7:4d:37:3f:7f:
ad:29:96:2f:ce:7a:6f:4c:37:1f:ad:db:7b:14:ab:
b8:10:04:a6:ba:00:f5:2c:a4:3e:b5:9f:59:df:6d:
20:3f:43:ba:e3:08:7b:7d:c4:ef:4a:b0:04:7c:79:
b0:c0:1d:8b:a9:61:51:02:aa:30:62:ac:70:44:ce:
8b:c1:b8:86:dc:cd:de:74:6e:26:49:ab:17:3e:67:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B5:BD:4F:76:FB:4B:A3:06:8A:C6:8A:32:68:35:8F:08:0A:11:A2
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:be:0f:dd:49:7d:91:85:43:04:4c:9e:9b:76:7f:a3:bf:63:
97:28:60:60:30:ce:33:61:58:2a:ac:45:ed:6a:88:fb:c0:9c:
f2:a7:13:b4:5f:8d:f7:5c:ac:aa:1d:a4:28:75:e8:8a:e6:38:
1a:b5:dd:0c:34:3c:16:29:f2:56:87:51:9c:99:a7:90:b9:e1:
34:8f:42:6e:a0:f2:dc:22:44:dc:77:10:00:ec:57:01:39:97:
4c:91:5a:93:96:71:78:21:b9:f5:34:72:e8:86:9b:ed:3d:05:
70:0d:5f:2a:be:95:45:07:9f:c2:eb:50:1f:f1:c9:95:f0:63:
c5:6e:77:e6:7a:c3:c9:17:d1:9c:91:52:fe:8c:9a:fc:5c:22:
c3:04:0c:6f:6c:8d:5e:65:fe:8b:19:2e:ce:25:d0:2e:89:b6:
55:17:21:11:cf:32:de:5f:d8:af:3a:be:ee:1f:ad:69:95:5f:
1c:97:be:00:b2:59:9c:6e:5a:f9:a0:f5:47:49:ac:80:35:e9:
4d:23:6a:3f:7f:20:22:b2:01:22:60:3d:21:75:9e:e6:6e:55:
f4:73:a5:cf:08:c5:38:6d:5f:7c:56:b7:78:ae:02:e6:c0:6d:
73:3e:d4:8a:0b:b7:b0:05:74:74:77:0a:b7:a6:dd:f9:15:3a:
7e:31:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:39:20 2026 by rpki-client