
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: 20p7NreQnceUHe+nCbYNPQlZmT5vInNZ+nvluOROy5E=
Subject key identifier: 4E:03:70:6E:9A:62:F7:27:93:22:32:7F:7E:6A:3A:5A:12:55:A1:13
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 0295
Signing time: Sat 13 Jun 2026 01:48:35 +0000
Manifest this update: Sat 13 Jun 2026 01:48:35 +0000
Manifest next update: Sat 20 Jun 2026 01:48:35 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: LY7JQnuS7mSsSZeY8OvulQoDw68sxdBq9pZPsd0UbbQ=)
2: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg=)
3: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: nquKdBYb17f91RwkbMJz0YJOyUNBfY9B+zJHnQj7Zk8=)
4: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M=)
5: C3481400917811ED904ACF83C4F9AE02.roa (hash: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=)
6: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: rX8iAImSKJ7BiKpMtoKCx7hmjEJ7mmhaIkBGctc7F3w=)
7: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: UJJEQF3bRcxEzs9FxUgqB61bTKSaDvDmCO8VGSiwpHY=)
8: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=)
9: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: UTHobHs4mZ75Li/c4ZWnYTJJw1N7jQT2yw1kRGz49v4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Jun 13 01:48:35 2026 GMT
Not After : Jun 20 01:48:35 2026 GMT
Subject: CN=6a2cb6f3-bca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:a2:37:9a:72:cc:ea:32:45:2d:03:29:3d:
c3:31:9d:ef:4f:fb:f4:e3:e6:83:02:05:aa:6c:72:
77:fc:74:e7:53:cc:0e:aa:4f:cc:b3:b9:c9:46:3b:
94:b4:c8:4e:b7:b7:d1:55:f3:b3:ed:5e:39:1f:a2:
c7:e1:6c:91:f1:e5:42:da:13:f3:4f:00:fb:67:35:
b5:8b:70:81:fd:40:91:34:a7:75:92:2f:b4:82:94:
65:68:82:43:a7:aa:34:11:2a:7c:2c:db:5b:43:db:
4d:05:ef:de:f8:f7:5b:42:9c:81:c1:71:2d:74:65:
f2:ba:05:fa:4d:10:73:fa:bf:59:f1:4a:1e:1d:00:
79:21:a8:ea:d9:45:1a:65:b8:87:9f:28:ed:ee:3d:
37:a5:9d:f7:b8:48:14:f5:c6:ae:08:0c:8b:d9:d1:
17:62:bb:8f:df:1a:e4:c0:9f:cd:66:e5:c0:d1:65:
0b:9b:54:94:bf:d4:62:73:51:10:79:d6:b4:cb:46:
b8:7f:4c:b2:f4:25:f7:8c:e7:61:4d:5b:48:2c:e3:
7f:cc:ab:63:85:c0:23:ed:4a:ef:f7:36:5a:8b:fc:
b7:7c:86:9c:3a:e6:ce:39:e5:b2:3e:c8:43:33:6f:
93:6d:6f:8e:72:8f:ff:7e:37:cf:51:69:27:d3:17:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:03:70:6E:9A:62:F7:27:93:22:32:7F:7E:6A:3A:5A:12:55:A1:13
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:1c:49:e9:06:8e:7d:a2:b0:2e:1e:67:11:93:62:61:76:a2:
89:bd:7e:ae:1e:c1:7d:71:16:64:c3:79:2a:01:13:b6:55:82:
5e:94:54:02:14:a9:31:76:1e:94:77:b8:ef:a5:5b:05:69:6e:
30:98:45:fd:d4:c0:a2:e3:d6:88:50:19:df:51:18:d1:55:b1:
0f:df:06:d0:d3:9f:88:61:be:b4:ab:ef:34:31:a0:16:41:7d:
a6:f5:45:ac:fd:25:e2:be:04:9e:8d:52:3b:09:98:1f:4e:f9:
c6:39:95:e6:2d:3f:10:24:b9:58:a4:e8:09:77:ef:ec:37:63:
5f:57:4c:d8:e3:98:32:7d:d4:f7:82:26:02:ff:f3:2c:7d:c1:
16:c4:c2:4d:ef:b9:8e:23:19:99:9d:35:f7:6c:cf:66:29:ef:
0a:7f:07:10:98:46:0f:8d:b1:e2:56:82:b5:42:b3:96:45:f3:
e5:21:91:69:b7:6c:62:3e:3d:bd:38:86:4e:75:28:65:05:55:
4d:77:23:8a:fa:74:bc:3d:6c:91:82:3b:61:37:98:e9:77:fa:
81:22:fe:7c:fb:d7:99:ce:9a:40:fa:f5:4f:b7:3b:67:d2:92:
c1:24:dc:fe:51:6c:39:81:82:29:26:27:ee:e3:b0:c5:f4:89:
07:1f:97:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:38 2026 by rpki-client