
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File: L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier: +3sXLRNuwqdKsQYpl2WTP0kg0Og8l1NBil6NUgDLNHI=
Subject key identifier: 5B:B2:5F:0B:2C:A8:62:A1:57:52:27:3D:EA:0D:20:95:DF:BF:DB:00
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 2667
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number: 25D7
Signing time: Tue 28 Jul 2026 15:47:01 +0000
Manifest this update: Tue 28 Jul 2026 15:47:00 +0000
Manifest next update: Tue 04 Aug 2026 15:47:00 +0000
Files and hashes: 1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: iz0Pj2KVJpjl0vrYbKzq7rl/2uQh2IiP+6RkHit8yA0=)
2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
3: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
4: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
5: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
6: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
7: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
8: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
9: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
10: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
11: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
12: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
13: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
14: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9831 (0x2667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Jul 28 15:47:00 2026 GMT
Not After : Aug 4 15:47:00 2026 GMT
Subject: CN=6a68cef5-e802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:5c:0b:41:d7:15:cd:23:a7:de:c1:59:17:
57:3a:d5:d8:94:60:34:d5:5a:23:f3:3d:d7:24:81:
bd:de:bd:ed:86:cb:1b:ea:88:0c:b4:8f:f2:a0:6d:
a4:87:52:11:eb:7b:df:ca:30:32:7f:7e:7f:94:fb:
15:cf:83:b5:04:fa:14:52:c4:80:aa:98:74:1f:19:
d8:15:c7:a8:1f:fa:12:c8:b2:1f:cf:8c:48:ba:85:
bd:20:8f:77:88:08:53:bc:d9:05:f4:32:54:14:af:
d2:1c:01:f6:e4:9f:f0:d8:fb:7e:4a:e2:62:56:7f:
7b:f0:2c:df:80:c3:55:20:a5:0c:ba:da:47:21:8b:
e8:b8:25:c5:b9:31:8f:07:6c:f5:6b:33:80:61:a1:
3a:a5:6b:b4:c1:20:04:64:f3:b1:8e:8a:49:9e:d7:
d2:57:6b:b4:57:a4:6c:3a:19:5f:7f:3a:11:15:58:
5a:0f:d5:41:c0:5a:dd:60:b9:09:0c:72:d0:4c:30:
36:ac:e4:85:da:12:44:53:ea:64:83:e9:23:e3:9e:
57:7a:23:c6:a2:39:26:59:73:1e:a0:c4:17:65:ad:
07:43:9a:79:7a:7f:98:c5:ef:84:a6:6c:09:e3:7d:
f4:fd:ee:26:db:f5:96:95:1c:41:f9:6c:6b:57:78:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:5F:0B:2C:A8:62:A1:57:52:27:3D:EA:0D:20:95:DF:BF:DB:00
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e5:b2:a0:ce:73:68:fb:f0:b0:7b:2e:70:61:36:0f:98:8a:
91:53:4f:5d:c4:81:18:32:e7:31:5a:a2:62:6c:09:b8:2f:da:
7b:cf:27:5a:ff:4d:37:1a:ed:de:88:ed:53:dd:50:3f:de:34:
ea:b7:60:c3:c3:01:0e:5d:9a:9b:44:20:74:09:06:c5:e2:4b:
07:2e:92:44:12:fd:4a:23:a3:4f:17:c2:17:82:7c:e5:ea:08:
1d:cb:1f:08:16:4e:b8:bb:bf:47:99:c1:69:7a:3b:5f:b5:e4:
1c:91:51:91:7a:39:15:4d:d7:03:c5:e9:28:19:e0:1f:09:47:
90:ff:b9:a3:0e:eb:e8:59:54:f1:8c:d1:e5:06:4d:d9:85:a4:
df:7e:b4:1b:20:c4:b0:4c:15:b2:38:0c:43:ae:f7:b3:9a:66:
c7:cf:d0:11:9e:73:03:86:6e:87:e6:dc:4a:a4:f1:24:d0:5c:
0e:29:24:5e:f8:0c:b2:81:10:9b:4f:2b:65:f0:49:e1:e6:30:
e2:d8:f5:b2:29:61:b6:f6:da:f3:22:8c:ac:d7:0f:e0:cd:de:
81:c2:9b:b4:00:fa:38:d8:e2:c1:fe:7b:96:a0:99:5f:7d:8a:
8d:87:35:56:db:e1:19:3d:68:80:0d:56:1e:f3:d7:3f:b0:d2:
67:41:92:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjYwNzI4MTU0NzAwWhcNMjYwODA0MTU0NzAwWjAYMRYwFAYD
VQQDEw02YTY4Y2VmNS1lODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtf9cC0HXFc0jp97BWRdXOtXYlGA01Voj8z3XJIG93r3thssb6ogMtI/yoG2k
h1IR63vfyjAyf35/lPsVz4O1BPoUUsSAqph0HxnYFceoH/oSyLIfz4xIuoW9II93
iAhTvNkF9DJUFK/SHAH25J/w2Pt+SuJiVn978CzfgMNVIKUMutpHIYvouCXFuTGP
B2z1azOAYaE6pWu0wSAEZPOxjopJntfSV2u0V6RsOhlffzoRFVhaD9VBwFrdYLkJ
DHLQTDA2rOSF2hJEU+pkg+kj455XeiPGojkmWXMeoMQXZa0HQ5p5en+Yxe+EpmwJ
4330/e4m2/WWlRxB+WxrV3gq3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuyXwss
qGKhV1InPeoNIJXfv9sAMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkQ1NC9EOTAxMTI4NDNGNEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZm
UmpMem5Wb3h3cVVVakd0UG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+WyoM5zaPvwsHsucGE2D5iKkVNPXcSBGDLnMVqiYmwJuC/ae88nWv9NNxrt
3ojtU91QP9406rdgw8MBDl2am0QgdAkGxeJLBy6SRBL9SiOjTxfCF4J85eoIHcsf
CBZOuLu/R5nBaXo7X7XkHJFRkXo5FU3XA8XpKBngHwlHkP+5ow7r6FlU8YzR5QZN
2YWk3360GyDEsEwVsjgMQ673s5pmx8/QEZ5zA4Zuh+bcSqTxJNBcDikkXvgMsoEQ
m08rZfBJ4eYw4tj1silhtvba8yKMrNcP4M3egcKbtAD6ONjiwf57lqCZX32KjYc1
VtvhGT1ogA1WHvPXP7DSZ0GSTw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:47:18 2026 by rpki-client