
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json)
Hash identifier: vGMmB33+NU/9B7+nPLPoSydM7zkrppYDXMqsELmkdVI=
Subject key identifier: 53:AE:2A:7E:66:2F:22:27:B5:27:6F:46:CE:C7:39:35:41:45:F3:A2
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial: 0CA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
Manifest number: 0C7C
Signing time: Tue 28 Jul 2026 18:51:05 +0000
Manifest this update: Tue 28 Jul 2026 18:51:05 +0000
Manifest next update: Tue 04 Aug 2026 18:51:05 +0000
Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: 4ziFGnbUjsscSVziVFYeJG4T0+S+uFNhQAxaU7zGqGI=)
2: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: ouH4abzFqla8RyorGFEh8tsKVYnL5dBI2TdSDocSzXI=)
3: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: yzY+pKYkZw0uNGaXwIqrPcHyCwkxCWHWqVxFG+uHRA0=)
4: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 2kn/q1hOME//Yhn7qkH4G8jggbyrCgjoL4hoHZXGsZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Validity
Not Before: Jul 28 18:51:05 2026 GMT
Not After : Aug 4 18:51:05 2026 GMT
Subject: CN=6a68fa19-9a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:53:8d:6b:be:d8:23:48:72:9e:79:eb:8e:
a0:4b:bb:fa:19:58:7c:c5:c2:03:35:73:6d:65:c7:
f9:cf:b8:db:1c:34:37:34:8c:7d:f6:26:d2:37:68:
0b:76:d1:34:b9:62:f7:c4:e6:f5:c6:ee:c9:be:7e:
3c:48:ca:90:a0:9b:4e:bf:e5:9f:ce:fc:6d:5d:23:
cc:4a:0d:e5:6e:c9:3b:25:52:5a:25:da:53:c1:03:
0d:8e:b6:5a:bb:45:63:55:29:a9:a2:85:53:ec:b5:
78:73:52:21:59:a7:8a:15:31:04:72:ca:17:22:bd:
be:56:59:9d:a6:e0:51:c5:aa:ca:bb:45:2e:7e:d2:
36:ce:1a:df:7a:90:8d:d8:c3:04:e2:27:fe:6a:36:
31:b4:be:0a:34:bc:26:f6:49:06:09:14:c4:c7:ca:
f9:3a:50:85:8f:03:70:51:3c:4b:e2:a2:16:0a:b6:
50:51:40:67:ae:36:44:d1:18:d7:da:2b:1e:cd:20:
7d:1a:96:d3:28:6c:c5:b7:0c:1f:20:9c:86:74:33:
15:74:df:01:56:ec:dc:83:07:4d:3c:f4:b2:1c:92:
cc:27:fd:30:1c:73:9b:b1:c7:f5:10:99:62:42:e5:
c7:45:5b:0a:b1:0d:5a:7e:3c:ae:63:07:7c:74:59:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:2A:7E:66:2F:22:27:B5:27:6F:46:CE:C7:39:35:41:45:F3:A2
X509v3 Authority Key Identifier:
keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d8:d3:73:f0:de:bd:48:b0:1a:ae:f3:58:0d:38:63:0f:cb:
31:db:9f:f3:36:2f:b4:4f:ea:38:6c:f2:1c:e7:3b:cb:94:2c:
e8:2d:3c:07:06:68:4d:f6:cb:d8:51:33:b5:54:4b:84:b0:74:
70:a2:c3:08:bb:97:d4:23:54:35:55:a7:1d:21:12:63:5a:9d:
32:ca:54:c1:3d:58:44:07:f8:92:d1:24:d4:db:b7:9b:bd:3d:
57:79:01:89:25:ab:81:8a:30:4d:f8:09:96:ee:2c:ab:1a:16:
04:1a:57:db:42:13:ea:4e:1c:c0:84:4c:4c:4e:06:52:4b:28:
4b:b6:ac:61:40:45:4a:1f:f9:9d:c0:45:4a:d9:b9:75:b4:5d:
b6:aa:63:f9:0c:75:67:80:c4:23:47:f2:13:e6:6f:9a:66:24:
5e:65:80:aa:45:4c:42:8b:09:cb:d8:b2:83:31:4f:0c:c7:ea:
5c:ce:a8:c8:17:e6:10:0b:9d:31:fb:89:1c:eb:90:50:6d:d4:
f1:41:49:24:3c:28:94:8b:7c:cd:ff:be:2e:a4:fe:aa:75:af:
53:67:0f:78:f8:43:62:a3:d6:60:3f:01:ad:95:a8:0b:8c:c4:
76:4c:d9:ed:1f:92:cc:a2:42:f2:d1:9b:5a:75:44:c9:f5:a0:
74:26:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:37 2026 by rpki-client