
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
File: 1lqglKUeKDl1O1khC2zyxUkVwB4.mft (raw, json)
Hash identifier: iGh0A2+lBQs7UjAQU6/fDLDoLo4XmAUnYyx48XClVU8=
Subject key identifier: 1D:8D:1F:43:61:5A:01:41:DE:60:DD:9B:BD:75:47:E3:B9:4A:63:59
Authority key identifier: D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
Certificate issuer: /CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
Certificate serial: 0AE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
Manifest number: 0AD6
Signing time: Tue 06 Oct 2026 19:32:14 +0000
Manifest this update: Tue 06 Oct 2026 19:32:13 +0000
Manifest next update: Tue 13 Oct 2026 19:32:13 +0000
Files and hashes: 1: 1lqglKUeKDl1O1khC2zyxUkVwB4.crl (hash: DT8AgfmV67oXpbv0ceri1D+uIyUiyatggxmUKoVYvgA=)
2: 220853047F2211EA8E730F35C4F9AE02.roa (hash: 7CmN4Uwz4KunDjXjABX/+wH9LiNgYUi6h/chFNKyFxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl
rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2784 (0xae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C1AA, serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
Validity
Not Before: Oct 6 19:32:13 2026 GMT
Not After : Oct 13 19:32:13 2026 GMT
Subject: CN=6ac54cbe-cd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:d5:8f:19:9e:18:f9:0b:6d:cb:9d:16:24:
6a:51:fd:0c:ab:26:5d:36:3c:45:86:2a:ba:95:eb:
07:06:2e:1d:b0:11:75:05:e7:aa:17:38:0b:7a:f3:
83:b8:fc:30:16:1b:ae:e2:e8:6c:33:58:55:c1:fe:
81:05:2d:f8:60:a5:0d:8b:46:1c:2b:6a:66:59:32:
1a:20:d8:9d:d6:2c:b1:61:18:cf:63:b6:52:2f:0b:
fb:08:a3:a3:37:f3:21:5d:45:cd:87:aa:58:d3:ce:
19:d7:b9:4f:38:63:13:fb:5e:d6:06:b4:6c:f7:4f:
cc:b4:cd:21:5c:67:d2:36:d6:90:91:f6:8a:0c:d3:
87:b5:b7:45:39:18:53:30:b6:02:a1:3a:d7:04:4e:
62:f1:6e:ff:2d:32:02:3d:90:74:e0:89:51:7a:6e:
68:22:83:6e:22:76:ff:25:69:ab:dd:84:89:12:dd:
6c:45:75:5a:25:7c:97:f1:7a:ef:e2:08:6f:fb:cf:
75:66:f0:bf:2b:6a:53:fb:28:df:df:64:c1:d1:da:
b3:9e:1d:1d:ea:26:80:2d:9a:00:23:71:e9:47:7e:
fd:38:a4:59:8d:ed:a3:3f:e4:db:e1:ca:7b:8f:50:
11:39:59:34:8d:2a:1c:bf:66:20:47:78:5f:7a:31:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8D:1F:43:61:5A:01:41:DE:60:DD:9B:BD:75:47:E3:B9:4A:63:59
X509v3 Authority Key Identifier:
keyid:D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:d5:03:68:f0:c2:f7:8e:05:9d:0e:0e:10:97:34:b0:af:
c9:91:97:fb:92:09:40:63:4b:f8:63:b6:f7:44:28:86:ab:ac:
8d:2a:2a:b4:64:c7:01:c1:53:f5:d9:88:0d:1c:53:bc:44:12:
c6:83:ec:83:2d:bb:e6:05:8a:43:28:1a:51:91:10:99:f9:9f:
0c:c1:7d:ac:cf:b1:7d:33:ef:93:5c:77:0d:a5:3d:a0:4f:97:
c2:81:56:aa:6c:cb:2f:07:48:f6:d1:95:2c:8b:fd:93:26:4c:
29:02:2b:97:0f:93:a4:5a:e5:fe:c8:8f:d1:7a:10:a7:0a:51:
9a:75:31:72:75:41:40:a4:c7:51:89:40:55:85:da:b2:c4:18:
44:f8:a5:fc:5a:ba:d3:91:65:27:b1:35:79:64:bd:d6:f8:34:
7a:02:d4:b3:98:d3:6c:f0:7f:6e:2c:37:eb:c2:b5:9c:80:6d:
8b:91:c9:e0:91:c1:52:e7:8e:e6:04:ce:85:f3:55:8d:8f:fd:
93:c3:25:56:d3:00:6a:82:20:91:77:bf:91:bd:b9:39:c6:d5:
b9:6d:27:46:0e:6e:4d:f3:c1:75:86:85:03:ba:7e:75:dd:30:
6c:e4:80:e6:ba:e6:50:de:6c:17:97:f7:d2:1e:d9:76:a8:05:
fb:20:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:37:24 2026 by rpki-client