
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json)
Hash identifier: SReIp+liCwaoTCNXCqv9SpGRDPRn6cwqr1V3DIrvHTE=
Subject key identifier: 80:E1:D4:A3:39:9B:67:77:49:C6:52:3E:F6:E0:94:25:86:D3:2C:2F
Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91
Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
Manifest number: 01AD
Signing time: Tue 13 Oct 2026 04:38:36 +0000
Manifest this update: Tue 13 Oct 2026 04:38:35 +0000
Manifest next update: Tue 20 Oct 2026 04:38:35 +0000
Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: 1lamZcH9ZudoKwYCBWCF69qttSvnTUUdqg1H4nj6x+g=)
2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: kI6ahe1tVmEHXboGkIpfP4BuL6IUV+thBDNq6dBrUok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl
rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 04:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691
Validity
Not Before: Oct 13 04:38:35 2026 GMT
Not After : Oct 20 04:38:35 2026 GMT
Subject: CN=6acdb5cc-7e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:c7:ff:be:78:c0:d7:7d:d1:04:f6:bd:84:
59:f9:73:0e:79:fa:c3:3f:71:51:7b:cf:92:44:45:
64:ff:ef:a8:c7:f9:04:5e:5f:5a:ee:18:86:76:c2:
0f:30:cf:da:34:4f:1f:e7:c4:db:a6:a9:92:e9:cf:
02:16:fd:dd:90:41:15:e2:ee:3d:9c:28:81:67:0d:
6a:87:ff:20:2f:6a:ef:c1:67:82:33:b0:ec:a2:eb:
94:b3:75:2a:eb:03:8f:d0:09:36:05:0e:7f:e9:a1:
85:ee:a0:fa:f2:b4:07:27:48:dc:28:47:f3:64:53:
62:7f:e1:bf:b0:87:30:d4:f8:be:25:34:5d:3d:60:
97:f6:55:b0:2f:27:2d:fb:f0:ef:81:e5:b8:7d:c1:
49:a0:86:46:82:8d:7c:ff:8b:e1:ba:2f:9d:74:d3:
5d:6a:17:dc:0d:77:d2:45:b8:7e:e6:08:99:dc:23:
71:17:cd:55:72:26:02:8e:2d:82:e9:26:6d:55:b5:
6a:e8:a7:d9:6b:ab:45:a6:a5:43:36:4f:50:e0:87:
f5:e9:0f:99:b0:c1:1b:33:37:b1:77:0a:7b:fc:97:
24:68:f8:a2:2a:41:47:19:9d:43:59:cc:79:c6:ca:
73:25:b1:31:63:0a:15:af:dc:d1:73:04:2b:35:e9:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E1:D4:A3:39:9B:67:77:49:C6:52:3E:F6:E0:94:25:86:D3:2C:2F
X509v3 Authority Key Identifier:
keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a4:57:ff:be:f0:a8:e2:2c:c9:ca:39:67:e6:b1:a3:e1:2f:
ad:ac:79:6b:78:0c:0a:27:86:c5:e4:d7:23:57:36:e0:3f:83:
77:e2:bc:ac:5c:c6:68:7d:50:08:9f:7a:71:64:9e:1e:cf:9c:
60:ef:0b:e1:00:5d:07:fc:5a:1d:e1:40:77:da:e8:12:44:0c:
dd:0e:c4:ce:b2:8e:c0:1c:97:b4:df:ac:35:4b:4b:da:f4:ac:
31:29:c4:ad:aa:d4:fd:1d:00:38:83:f3:79:14:30:4e:ba:d6:
5c:c8:c3:7c:77:fd:0f:3b:3e:57:bb:ed:42:54:e4:ee:0a:ec:
c0:68:8e:94:08:8e:25:a2:9b:1e:b7:1b:54:20:5c:b6:16:ee:
f5:c1:d4:a2:06:36:d5:68:f1:0d:4e:a7:d6:c7:71:c4:62:bf:
be:c5:be:2d:98:c2:82:67:af:61:16:92:3a:bf:02:9a:4d:2e:
90:57:51:10:cb:29:5b:32:72:89:9e:20:01:7b:ee:c6:f2:84:
d6:12:4d:2a:0e:10:60:d4:d5:e0:c8:31:3c:87:f4:5a:d4:14:
b7:f6:c8:dd:fc:97:e0:32:06:1b:4f:a6:0c:b2:de:c8:e2:bd:
67:e5:03:49:09:68:49:bf:da:2d:46:22:64:6b:5e:74:3a:99:
6e:ff:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:19:48 2026 by rpki-client