
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json)
Hash identifier: XVTPvphZW1ZT+LQnE5OWRZWuBxWhLR3IwGZHxt9ZIqg=
Subject key identifier: 66:B2:C6:99:29:16:C0:2D:37:B0:1D:7D:C6:69:59:74:5D:68:91:4B
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial: 0670
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
Manifest number: 0648
Signing time: Mon 12 Oct 2026 22:54:11 +0000
Manifest this update: Mon 12 Oct 2026 22:54:10 +0000
Manifest next update: Mon 19 Oct 2026 22:54:10 +0000
Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: JdFbmgBQyvSBOwfHsniAEq1F4VyFmFOsh+qU+dRPsnk=)
2: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: u8F36rbb3MJiWZT69qWiPFv6z90jcQZPFE5OZpQvAOc=)
3: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: w+XVJvyQqIrmXBsUmFsNFlbtg+AluDO/hxGeKDlbC/I=)
4: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: mVZ3jUqq7v+mPV7fPjGzfalsiJzHL52IjarkxH7YoEA=)
5: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: duFnEGiuT26TMk2ZSfK1MgR6+5z5a4gsXx+ILFt0PxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 22:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Validity
Not Before: Oct 12 22:54:10 2026 GMT
Not After : Oct 19 22:54:10 2026 GMT
Subject: CN=6acd6513-d530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:e5:aa:c8:c6:18:24:d1:d3:a6:a7:84:7c:
ff:d0:73:46:bd:82:24:ca:e8:8e:1a:2b:d2:1f:97:
cf:db:06:ea:1a:ce:2f:40:3c:c6:a5:3b:03:c6:25:
2a:d4:39:c8:02:6a:52:06:62:2e:4a:f5:86:c4:41:
54:6f:f5:88:f6:f4:e4:ce:1a:61:30:3b:e4:05:96:
19:de:35:32:36:96:d8:e9:5d:17:f9:72:ca:cf:f9:
06:bd:af:f4:fd:83:26:80:de:06:4b:d2:36:f3:81:
ca:8e:2d:e6:a0:c7:28:5b:6c:13:b6:ba:91:65:c0:
d5:14:1a:45:e9:18:6a:4b:73:7d:9d:3e:c2:1b:f2:
bc:1e:d6:b1:2e:63:7d:c0:bd:e4:ac:62:08:6d:3b:
a7:80:8c:02:c5:c3:e0:3f:09:32:8e:05:f0:7e:1e:
f5:d2:5a:1b:bc:15:0f:5f:e5:f3:7f:f8:58:59:19:
de:9e:3f:d6:0a:e0:31:ca:de:88:66:60:97:48:ee:
79:44:19:66:16:79:48:8b:b2:7e:11:31:43:fa:4f:
80:bd:b8:56:0e:b1:72:42:c2:52:3d:78:1f:1a:5e:
e8:b1:64:60:e0:ee:47:47:a4:62:45:be:05:84:fe:
07:17:1f:f5:00:6d:d0:e0:e3:77:08:6b:3d:e5:d0:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B2:C6:99:29:16:C0:2D:37:B0:1D:7D:C6:69:59:74:5D:68:91:4B
X509v3 Authority Key Identifier:
keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:98:99:e3:95:cc:5d:ed:71:d8:4e:2f:aa:4a:00:0e:26:b7:
13:89:5c:03:34:b4:0a:b1:59:61:1b:c1:42:78:37:ee:05:ba:
f9:56:a0:e8:a8:a2:5c:39:95:a7:5c:bb:c6:05:58:b1:c2:5c:
90:1e:c1:ec:0c:9a:0e:df:30:59:d1:45:a0:2b:4c:46:bb:61:
47:08:b3:57:b5:81:1b:81:3c:50:cd:26:60:15:bd:69:72:f0:
2b:a9:ec:86:58:15:77:eb:07:9f:03:61:3a:7c:bd:db:61:e2:
4d:1c:3f:55:3e:06:f1:93:e0:05:36:fd:e1:58:cd:be:6a:72:
7c:8d:84:ec:fd:f3:c0:7b:a5:f5:ef:f5:8f:9c:6a:f4:31:ad:
3f:d4:c0:fb:44:2c:42:6f:53:97:f5:90:d0:fc:74:db:9f:0f:
72:96:c0:3e:08:86:96:ca:7c:a7:cc:db:18:61:45:40:3b:b1:
55:da:75:f1:b0:23:42:24:55:d5:d5:4f:d1:72:55:be:5a:fa:
4d:cf:82:49:73:28:f3:a6:59:ea:f4:05:0e:93:aa:c0:37:e0:
3a:68:6b:03:eb:a2:ea:a1:18:e5:10:1c:c2:0c:72:6a:10:ff:
6c:b0:14:1c:33:5e:24:23:64:bd:2c:0b:59:2f:a4:88:5b:72:
3b:e6:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:48:14 2026 by rpki-client