
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: ankkmvp3nHde0uaAxEhB++/I8XEvzk8gIfu5n57AU2U=
Subject key identifier: C3:80:11:6F:E8:1E:ED:59:2B:FC:3B:73:BC:05:9C:84:DC:0C:22:0F
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 0301
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 02C8
Signing time: Mon 21 Sep 2026 01:21:30 +0000
Manifest this update: Mon 21 Sep 2026 01:21:29 +0000
Manifest next update: Mon 28 Sep 2026 01:21:29 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: o0xTic3ny3aRWisFh39xak/9QHnoEu+l4z7Id7q6DSY=)
2: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: UTHobHs4mZ75Li/c4ZWnYTJJw1N7jQT2yw1kRGz49v4=)
3: C3481400917811ED904ACF83C4F9AE02.roa (hash: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=)
4: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg=)
5: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: nquKdBYb17f91RwkbMJz0YJOyUNBfY9B+zJHnQj7Zk8=)
6: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: rX8iAImSKJ7BiKpMtoKCx7hmjEJ7mmhaIkBGctc7F3w=)
7: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=)
8: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M=)
9: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: UJJEQF3bRcxEzs9FxUgqB61bTKSaDvDmCO8VGSiwpHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Sep 21 01:21:29 2026 GMT
Not After : Sep 28 01:21:29 2026 GMT
Subject: CN=6ab08699-d4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c0:1f:5c:3b:ee:5a:02:3c:65:fc:32:4f:12:
0a:5d:bc:46:53:20:22:79:5f:c2:aa:2c:ae:c4:80:
d2:1c:11:76:84:aa:20:01:f8:24:df:f9:01:1c:b5:
9d:74:48:c0:93:29:76:cc:df:09:cf:9f:83:1c:f9:
b5:e5:83:22:3a:3c:6f:e8:55:e1:33:3c:a3:f7:03:
17:fe:1c:64:a4:90:54:23:b9:fd:98:c0:b0:6a:9d:
ad:83:67:a3:10:6c:24:ff:e9:6d:93:dc:8c:9b:f1:
14:d0:6b:89:2f:eb:10:ef:c5:f4:3f:75:5c:ff:b7:
ea:97:d6:0c:0a:49:1c:ad:19:7c:17:f5:68:4e:b7:
32:82:26:9f:27:12:f4:e5:53:3f:69:bb:9f:55:6c:
be:96:95:64:2a:b5:d9:2d:0f:7b:4f:19:35:07:ab:
17:d7:58:88:fb:f3:b6:1f:0b:29:22:40:cd:6e:eb:
be:68:71:62:68:0a:1d:30:e5:71:e7:e7:35:44:30:
a6:7f:6c:ce:f7:5b:33:57:fa:4b:34:5b:f7:9f:e0:
82:ba:83:30:b7:65:f2:21:f5:0e:74:7b:77:19:b0:
1c:88:63:a8:f0:b9:74:0d:f5:73:a3:10:73:d1:e3:
ca:db:45:71:c0:18:41:75:41:df:e8:78:04:f7:c1:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:11:6F:E8:1E:ED:59:2B:FC:3B:73:BC:05:9C:84:DC:0C:22:0F
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ac:d1:a0:c7:2b:ba:47:6b:53:20:1a:72:91:dc:64:1a:4c:
bb:52:2b:1e:3b:54:dc:0e:72:cd:88:48:2e:a1:b3:33:7a:fc:
c0:31:3c:32:3e:a8:8b:f2:cd:e4:84:4e:7d:72:26:8b:df:cf:
ea:c8:b5:08:60:23:ae:03:75:bc:2d:37:8b:50:e9:5b:b3:5c:
d4:e2:73:dc:43:c8:5b:a0:fe:2e:56:7f:53:09:50:5e:bd:75:
d4:c3:9e:a6:5a:c5:5b:f9:44:da:6e:d7:6f:af:2d:4f:b2:bd:
42:9f:0b:4a:6f:4e:57:bd:89:89:8c:f0:d6:d3:1c:f0:df:4f:
10:88:03:ac:5f:c1:af:46:90:aa:c0:3c:40:f4:27:ae:01:3f:
25:ca:fc:17:b9:40:66:29:87:eb:aa:6b:a4:74:a3:60:e1:15:
a9:45:20:d7:c9:30:d7:cd:73:18:53:72:de:f0:66:a0:fb:53:
e7:72:77:80:85:38:0b:92:ce:a8:72:d2:35:1d:58:cf:3a:21:
80:54:0f:e0:2e:9d:26:fe:6c:09:b9:47:43:db:21:a0:99:1e:
fc:d1:78:d8:c6:a4:b5:d2:15:d6:68:66:bf:0a:55:72:b9:1e:
c4:0a:4e:f0:e2:c3:ed:f6:8e:79:18:46:56:f0:cf:88:cf:86:
59:15:ac:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:49:13 2026 by rpki-client