
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json)
Hash identifier: 0E/pDleCrDeNmj2nIIuLzN8kEs7oeFztYDFl4BRDCXk=
Subject key identifier: 4A:30:D5:E8:8D:B5:F9:60:37:69:EF:89:A2:98:B4:16:76:D2:F3:5E
Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Certificate serial: 0A9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
Manifest number: 0A96
Signing time: Mon 02 Mar 2026 00:04:31 +0000
Manifest this update: Mon 02 Mar 2026 00:04:30 +0000
Manifest next update: Mon 09 Mar 2026 00:04:30 +0000
Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: fhKgsc142Oo4nmWBdNiYh8rXA9O5QxtmCOJ4zs+D0xs=)
2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: 5OPogG3ZOrkKX2Cbkuzk/+A/+LB9+L5qaFthCEEqGN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Validity
Not Before: Mar 2 00:04:30 2026 GMT
Not After : Mar 9 00:04:30 2026 GMT
Subject: CN=69a4d40f-f125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:0d:bc:a0:37:93:ac:44:af:fd:ed:1e:48:
32:98:40:e7:35:39:cf:5f:7a:4f:7a:19:cf:2d:eb:
8c:bb:5a:8b:65:e7:85:4d:7f:f8:21:fb:08:0a:b4:
c4:f8:b6:0b:be:a2:1d:99:f7:0a:75:c9:e6:35:e6:
7a:72:75:d8:9b:1d:c9:e8:8a:7f:07:8e:f2:a6:46:
6f:dd:eb:d7:b6:3a:72:c3:0b:27:d6:07:5c:ae:0e:
f4:fb:80:f9:e7:eb:a9:8a:5b:d9:ba:c1:12:9e:bc:
27:19:f6:b2:b1:6f:38:58:94:fc:96:80:38:f5:3f:
7a:42:96:10:b3:e2:65:59:96:f5:a8:ea:c5:31:28:
f7:0f:18:d3:89:76:d5:db:ac:e4:47:0f:e1:a5:63:
56:fe:af:6c:e1:33:a5:88:cb:2d:db:71:05:75:5a:
f9:0c:6b:26:a7:b7:97:01:f3:e4:02:64:6f:55:01:
65:29:58:91:aa:8d:11:30:5b:91:61:32:30:92:6f:
a4:0f:5a:15:9c:01:b3:33:6d:17:97:21:04:2e:65:
f5:ef:1f:4b:3a:f2:11:9f:4d:36:dc:ff:9e:40:2e:
c3:65:1e:88:06:b4:21:2d:9c:c6:e8:cf:c6:aa:c2:
5c:d7:b4:6e:7c:6d:ae:5d:f3:af:24:26:83:8d:f0:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:30:D5:E8:8D:B5:F9:60:37:69:EF:89:A2:98:B4:16:76:D2:F3:5E
X509v3 Authority Key Identifier:
keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:00:a1:ed:5c:cb:a8:8b:cf:d9:1d:7b:e9:58:50:29:06:fc:
9c:09:a3:a4:77:98:2a:22:6b:e9:bd:6c:c3:be:c1:41:c9:80:
30:36:3d:a2:fe:92:a5:4f:5e:9c:4c:41:07:5e:69:3f:c0:fe:
f4:b7:79:f8:ab:38:12:78:bf:02:48:c4:64:8e:2c:76:5c:17:
4b:27:77:9b:d6:b4:51:1c:aa:25:01:e8:36:ac:3a:9e:00:df:
75:1c:37:1d:85:22:bf:76:6a:12:20:76:2a:59:07:ff:2b:bf:
6e:a8:2d:c4:36:4b:c2:15:24:a1:83:97:86:d5:ec:03:25:02:
b1:3d:81:c2:e4:38:f8:92:dc:51:d2:98:72:e7:b4:fd:cc:18:
5d:2e:19:6a:16:7f:21:09:7f:01:ba:52:02:9f:53:03:ae:84:
fd:b5:d0:fc:17:ac:63:eb:a8:aa:77:09:79:86:13:5a:8b:79:
21:16:fe:5d:2f:fd:44:4d:c4:58:7d:c8:3b:cb:3b:a6:5d:6a:
06:52:f8:fb:4b:73:58:01:cf:20:a5:72:ee:5b:91:5c:e3:c7:
45:28:43:01:46:c1:f4:86:08:91:0d:b4:3b:01:ad:d7:11:d1:
6e:aa:77:4d:43:d3:a6:8b:f0:96:f3:82:3d:cd:ae:5c:6a:59:
be:99:fd:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG
OEVFNTA4MTgwHhcNMjYwMzAyMDAwNDMwWhcNMjYwMzA5MDAwNDMwWjAYMRYwFAYD
VQQDEw02OWE0ZDQwZi1mMTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoLMNvKA3k6xEr/3tHkgymEDnNTnPX3pPehnPLeuMu1qLZeeFTX/4IfsICrTE
+LYLvqIdmfcKdcnmNeZ6cnXYmx3J6Ip/B47ypkZv3evXtjpywwsn1gdcrg70+4D5
5+upilvZusESnrwnGfaysW84WJT8loA49T96QpYQs+JlWZb1qOrFMSj3DxjTiXbV
26zkRw/hpWNW/q9s4TOliMst23EFdVr5DGsmp7eXAfPkAmRvVQFlKViRqo0RMFuR
YTIwkm+kD1oVnAGzM20XlyEELmX17x9LOvIRn0023P+eQC7DZR6IBrQhLZzG6M/G
qsJc17RufG2uXfOvJCaDjfClNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEow1eiN
tflgN2nviaKYtBZ20vNeMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0
QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo
eEN4b3BlUlF0WEw0N2xDQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcQCh7VzLqIvP2R176VhQKQb8nAmjpHeYKiJr6b1sw77BQcmAMDY9ov6SpU9e
nExBB15pP8D+9Ld5+Ks4Eni/AkjEZI4sdlwXSyd3m9a0URyqJQHoNqw6ngDfdRw3
HYUiv3ZqEiB2KlkH/yu/bqgtxDZLwhUkoYOXhtXsAyUCsT2BwuQ4+JLcUdKYcue0
/cwYXS4ZahZ/IQl/AbpSAp9TA66E/bXQ/BesY+uoqncJeYYTWot5IRb+XS/9RE3E
WH3IO8s7pl1qBlL4+0tzWAHPIKVy7luRXOPHRShDAUbB9IYIkQ20OwGt1xHRbqp3
TUPTpovwlvOCPc2uXGpZvpn9cQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:51 2026 by rpki-client