
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json)
Hash identifier: VYwPawAgt4V+i2WvFdLIuSAl3ywVfI3QqkJkIIdjcmM=
Subject key identifier: F5:2B:90:32:4C:D7:53:A0:DA:F5:A2:61:60:5D:E1:EB:DE:58:3C:3E
Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Certificate serial: 0DD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
Manifest number: 0D81
Signing time: Mon 12 Oct 2026 18:21:08 +0000
Manifest this update: Mon 12 Oct 2026 18:21:07 +0000
Manifest next update: Mon 19 Oct 2026 18:21:07 +0000
Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: QF9eX2v3m6KDFoRbR+ZZqVlwc5MZWOvoSJjwnCik6nA=)
2: B64A364EA60911F18684AA644611F970.roa (hash: Yhzu3EEtztbhJR6dKRXKOq7uPqc63g/g/wW5ua5XriQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3540 (0xdd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Validity
Not Before: Oct 12 18:21:07 2026 GMT
Not After : Oct 19 18:21:07 2026 GMT
Subject: CN=6acd2514-5136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:af:8e:2f:fd:f1:f6:c0:15:7b:c8:ee:b3:
14:33:83:ff:94:89:7d:ae:23:05:d6:af:71:c9:9e:
e6:69:67:91:4c:d3:c6:7a:71:30:3f:32:71:64:56:
68:fb:4c:99:b5:f5:7c:69:1f:7e:23:d5:dc:60:77:
26:17:e1:f8:9e:2a:fe:13:13:40:3b:9c:18:2a:bd:
cf:05:a5:bf:c9:66:b1:e7:1c:5e:94:43:d5:fb:c1:
9d:33:22:97:f8:de:de:26:b3:c3:30:ff:8e:ee:8e:
cd:bf:78:e5:84:d8:bc:ec:47:c9:ef:75:45:03:32:
8e:60:e9:83:4a:13:e8:44:3b:dd:ad:b4:5c:12:90:
ae:39:e7:cf:e8:bc:cd:cd:67:5f:ce:2b:7c:f9:36:
1f:6b:13:1b:7a:7a:da:d7:e8:88:07:d8:e9:e4:3d:
bd:92:16:cc:75:8b:bd:38:66:72:0f:76:1b:ca:e9:
87:86:7e:a6:c9:48:11:49:80:bd:60:b7:50:cb:57:
84:50:7f:78:99:58:b7:67:91:a2:27:c1:2c:0c:56:
48:e6:3e:82:d8:8c:43:00:bb:a5:2f:68:b9:48:62:
8e:17:78:2a:85:29:ee:87:1d:d7:63:6a:bc:05:d8:
ba:79:40:b7:88:ae:2d:94:42:26:13:4a:97:b2:1a:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:90:32:4C:D7:53:A0:DA:F5:A2:61:60:5D:E1:EB:DE:58:3C:3E
X509v3 Authority Key Identifier:
keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4b:72:84:9a:4c:6a:31:a6:fe:30:e2:c0:71:c8:84:3f:c8:
e5:7f:72:1e:61:87:86:96:0b:ba:a5:77:ef:5d:87:63:8d:6a:
1f:69:ca:a8:5b:b7:e4:bf:4a:cb:d5:05:f1:77:e1:41:7f:a6:
fe:28:dc:59:0e:85:f7:ae:e3:72:6e:dd:03:c4:71:57:ea:d3:
63:5b:e9:68:ee:74:3f:32:dd:6c:00:8e:f1:c9:e9:1d:4b:f5:
0d:b5:c0:b4:64:ab:3e:31:3e:1f:24:b0:d8:d4:03:05:c1:dc:
66:ae:69:be:46:dc:03:29:4d:43:bb:2d:ee:9e:66:90:b4:fe:
90:bf:dc:f1:11:3a:d6:0d:1d:db:36:c6:2c:e8:ee:f7:5e:28:
66:89:98:9a:b8:9a:4c:63:61:4d:e9:84:d0:a8:dc:f7:95:ca:
9e:bd:0e:6e:3c:0b:3b:19:79:be:7a:35:13:d2:8c:26:3c:e6:
7e:b5:61:69:c7:c8:a0:22:ec:bc:55:f1:f9:4f:11:72:54:0f:
5e:ac:e0:03:45:60:e7:8f:31:db:f8:64:a4:0d:64:da:86:1d:
3f:29:fa:05:7b:a6:45:5c:ab:60:d2:d8:6b:c3:90:46:83:72:
b3:03:a2:8a:c0:41:a7:f2:ed:d3:4a:d3:a2:06:24:1f:58:92:
26:fb:7a:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz
NkREOENBMzQwHhcNMjYxMDEyMTgyMTA3WhcNMjYxMDE5MTgyMTA3WjAYMRYwFAYD
VQQDEw02YWNkMjUxNC01MTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxk2vji/98fbAFXvI7rMUM4P/lIl9riMF1q9xyZ7maWeRTNPGenEwPzJxZFZo
+0yZtfV8aR9+I9XcYHcmF+H4nir+ExNAO5wYKr3PBaW/yWax5xxelEPV+8GdMyKX
+N7eJrPDMP+O7o7Nv3jlhNi87EfJ73VFAzKOYOmDShPoRDvdrbRcEpCuOefP6LzN
zWdfzit8+TYfaxMbenra1+iIB9jp5D29khbMdYu9OGZyD3YbyumHhn6myUgRSYC9
YLdQy1eEUH94mVi3Z5GiJ8EsDFZI5j6C2IxDALulL2i5SGKOF3gqhSnuhx3XY2q8
Bdi6eUC3iK4tlEImE0qXshrrZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUrkDJM
11Og2vWiYWBd4eveWDw+MB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5
NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo
cThqNHo5YjJZaWMyM1l5alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj0tyhJpMajGm/jDiwHHIhD/I5X9yHmGHhpYLuqV3712HY41qH2nKqFu35L9K
y9UF8XfhQX+m/ijcWQ6F967jcm7dA8RxV+rTY1vpaO50PzLdbACO8cnpHUv1DbXA
tGSrPjE+HySw2NQDBcHcZq5pvkbcAylNQ7st7p5mkLT+kL/c8RE61g0d2zbGLOju
914oZomYmriaTGNhTemE0Kjc95XKnr0ObjwLOxl5vno1E9KMJjzmfrVhacfIoCLs
vFXx+U8RclQPXqzgA0Vg548x2/hkpA1k2oYdPyn6BXumRVyrYNLYa8OQRoNyswOi
isBBp/Lt00rTogYkH1iSJvt6ug==
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:56:50 2026 by rpki-client