
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: s9gboMnbaHhmiTF9sDvHKDALoi/O64sw+XxpHs7ABd4=
Subject key identifier: F0:AC:C0:CB:B1:F2:63:94:F7:08:8C:54:1B:C7:BB:C5:34:3B:67:F0
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 02E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 02AB
Signing time: Mon 27 Jul 2026 02:55:47 +0000
Manifest this update: Mon 27 Jul 2026 02:55:47 +0000
Manifest next update: Mon 03 Aug 2026 02:55:47 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: Ymd+43K0HSk2vDZjzObY1C99r6a4JbwlmmjA/8Ezp4E=)
2: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: UJJEQF3bRcxEzs9FxUgqB61bTKSaDvDmCO8VGSiwpHY=)
3: C3481400917811ED904ACF83C4F9AE02.roa (hash: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=)
4: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=)
5: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg=)
6: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: UTHobHs4mZ75Li/c4ZWnYTJJw1N7jQT2yw1kRGz49v4=)
7: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: rX8iAImSKJ7BiKpMtoKCx7hmjEJ7mmhaIkBGctc7F3w=)
8: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: nquKdBYb17f91RwkbMJz0YJOyUNBfY9B+zJHnQj7Zk8=)
9: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Jul 27 02:55:47 2026 GMT
Not After : Aug 3 02:55:47 2026 GMT
Subject: CN=6a66c8b3-227d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:1e:b4:93:74:f6:70:08:51:24:9e:54:14:
14:8e:a3:a1:ba:82:1a:1a:5f:12:22:e4:30:ec:6e:
b6:41:2b:06:1c:9b:62:bd:cb:fe:fb:53:89:0d:06:
25:71:27:8d:4e:af:64:e7:0c:76:f5:7a:1d:ff:bf:
1f:78:ae:c6:cf:78:9a:8d:e8:15:c6:17:83:12:2a:
2b:26:0c:14:28:8f:31:31:1b:d7:ba:44:7f:dc:d3:
43:0d:f1:02:ae:60:2c:a5:e0:05:e6:9c:32:3f:84:
30:61:2f:22:1f:1c:14:67:39:82:e7:98:c3:de:11:
38:99:57:fc:37:80:1c:f5:36:fd:1c:1c:6d:17:8a:
78:e9:0e:2b:f7:a6:a3:a1:9d:07:15:ce:be:ba:e6:
c9:2a:cb:13:12:3a:fb:1a:a4:c6:61:3f:ab:3b:b5:
93:07:92:aa:4e:98:9f:63:76:38:1f:41:6c:ac:4c:
d5:a1:21:45:0d:43:c9:11:b6:aa:98:84:18:46:8c:
a3:dc:31:0d:5f:38:99:9f:38:80:37:8d:bd:66:d1:
d9:92:88:ac:c3:0e:af:03:68:41:a9:c8:3d:5e:71:
33:d1:1a:03:70:fd:fa:c8:96:0a:c5:92:61:56:b4:
67:2e:1c:15:cb:a7:b9:f1:9d:44:b4:8c:ba:aa:bb:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:C0:CB:B1:F2:63:94:F7:08:8C:54:1B:C7:BB:C5:34:3B:67:F0
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d7:86:70:f3:c1:e6:f2:e0:ba:9b:8c:2b:cc:0d:c5:e7:53:
34:cc:6d:13:5b:2d:71:ed:22:bd:77:20:67:19:88:46:09:55:
d8:bc:61:7b:0f:d4:c3:48:0a:2e:38:de:01:a1:7d:c3:7a:f6:
88:5b:f7:e4:91:13:ab:b9:73:f1:05:2e:93:0e:fc:46:ad:8e:
a8:95:6d:40:b0:cc:df:bd:a1:cf:87:58:8a:ba:47:8d:39:e1:
3a:c9:68:8f:32:02:2e:67:20:69:99:c6:26:20:1a:c2:da:d4:
c6:5f:06:f9:ad:6d:9f:58:a4:c4:89:9c:42:86:6e:f9:a3:38:
e7:29:5f:64:22:bf:f6:cf:77:f7:e1:0b:44:29:05:44:30:fc:
b0:50:e2:bf:a2:f6:80:b6:2f:e2:65:33:e1:3d:e2:97:25:c3:
d3:58:2a:28:70:d8:b9:e9:97:05:bb:84:3c:b3:c6:df:d2:35:
80:a1:ab:c4:68:fd:9b:30:4a:78:29:0c:52:8f:13:ce:2a:fe:
13:f1:22:85:9b:58:32:7f:8f:ae:f7:bb:9a:d8:01:1e:e8:7d:
1a:bc:23:1f:74:de:32:50:22:30:ce:8d:8e:4a:f0:0d:80:41:
43:0a:13:f8:30:14:9a:48:06:96:ae:80:34:21:88:10:7a:c1:
89:ec:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:20 2026 by rpki-client