
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json)
Hash identifier: QLMM4eNHp3HXVBnhcMwLlftLV9JUQGwvbYOCSFTvD8A=
Subject key identifier: 94:D6:B0:00:EA:D1:2C:42:71:D0:B6:43:29:EE:5F:3A:0C:7B:E9:78
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial: 0C42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
Manifest number: 0C2D
Signing time: Sat 28 Feb 2026 18:58:21 +0000
Manifest this update: Sat 28 Feb 2026 18:58:20 +0000
Manifest next update: Sat 07 Mar 2026 18:58:20 +0000
Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: P23ks5QfvJrVGQP25/6rqUbI4gMPf5EgLUMiwdfX5nc=)
2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: N0WCtgkaNZeOTo3I3oEHp89wJvvLye1ENYthm+qu0UA=)
3: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: E8AriLCWZxuvCsqIouWQqeJv8TlOzugnbqYiiRVnwpQ=)
4: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 1JZC+YNgjMx+K+MDr445Xif/I5gERZj+9WpcW7BqlVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Validity
Not Before: Feb 28 18:58:20 2026 GMT
Not After : Mar 7 18:58:20 2026 GMT
Subject: CN=69a33acd-5b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:e6:32:f0:d8:45:03:58:06:aa:02:21:8c:
3d:41:97:1c:bc:71:f5:b0:7c:e1:2a:e2:6a:50:6c:
95:52:63:fe:d6:73:6f:0e:be:b9:ef:b9:9b:ec:6b:
1e:07:ea:a6:7e:f7:71:f2:0e:45:4c:cb:d2:de:1e:
8a:ea:d8:65:67:cc:a2:5d:3f:be:33:f5:24:b8:f6:
26:44:a2:71:2f:ec:7a:4b:45:6c:5c:fb:d4:95:0b:
a6:20:6a:ab:5d:3b:a6:cb:0b:ef:90:75:bb:90:8e:
c0:13:df:67:16:1f:08:8e:f1:3c:78:c8:dc:04:2a:
76:94:9c:60:65:83:95:01:65:59:3e:54:0f:d4:48:
91:e9:1e:47:89:18:ab:b0:37:35:84:6c:e0:c4:e3:
f2:b4:f7:02:97:78:0c:fd:0f:11:5c:eb:54:a6:c5:
e9:52:22:db:f2:af:88:17:74:4a:9a:de:a6:fc:d9:
0f:e7:0c:67:b9:8c:ad:c0:94:73:48:2a:1c:23:ce:
37:cf:48:39:8e:0b:bf:9b:b5:8a:bb:4e:44:b6:3f:
82:1f:92:44:a1:82:11:c0:34:c3:68:1f:88:32:f5:
15:1b:6d:ab:99:d8:3b:19:1b:89:20:ff:b0:5f:83:
e5:b9:6c:da:6a:d6:8a:9f:b4:01:50:6d:3b:ae:48:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D6:B0:00:EA:D1:2C:42:71:D0:B6:43:29:EE:5F:3A:0C:7B:E9:78
X509v3 Authority Key Identifier:
keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c0:f5:53:72:83:ca:9d:d6:72:66:d3:8a:32:9d:69:17:3b:
1d:2f:6d:ef:9a:e1:25:2c:f7:fa:40:fb:96:a7:ad:b1:7a:0f:
bd:5f:18:43:7d:ed:45:84:62:f7:f5:d5:4d:49:9e:6c:60:82:
15:82:73:62:f2:8b:cb:71:b8:ff:90:b9:53:f1:4d:75:36:fd:
38:f5:46:30:83:fa:e9:9e:91:b1:7a:9c:53:b1:77:28:7d:84:
80:bf:85:25:eb:cc:8b:36:53:3c:65:59:3e:66:43:87:f8:44:
6c:9e:ab:71:00:dd:1d:e9:87:98:17:66:bd:3d:51:a5:f1:17:
32:1d:d0:01:a6:ee:a2:f1:65:fb:10:93:45:4b:b9:cf:4f:a2:
c9:b3:63:67:34:ea:ba:18:23:fd:90:fb:1f:ae:e7:4f:14:1c:
a0:11:94:79:ef:b8:28:45:3d:3b:19:fb:7e:af:d3:b2:68:63:
7a:bb:44:77:d8:5a:25:4b:c5:10:50:ae:d3:4d:a7:be:35:02:
42:5c:8f:ab:e3:6f:66:d8:5b:3d:91:6c:cb:a3:73:69:2c:d5:
94:6a:49:00:49:9a:51:a1:0a:75:b7:a2:6e:63:fe:ab:c5:e1:
5b:f8:e8:8b:cd:18:18:3b:57:71:d3:3d:d1:c7:b6:d7:26:e1:
6f:85:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:51 2026 by rpki-client