
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json)
Hash identifier: bXXo2DigD5WFVYSGv+P7R6H260W0jNmADJ3L/C+NxZQ=
Subject key identifier: 8F:74:10:82:78:51:55:2F:21:BE:D3:4A:03:C8:FE:87:37:D5:25:7B
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial: 0CC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
Manifest number: 0C9E
Signing time: Fri 02 Oct 2026 18:51:05 +0000
Manifest this update: Fri 02 Oct 2026 18:51:05 +0000
Manifest next update: Fri 09 Oct 2026 18:51:05 +0000
Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: 1ejQrGA62JUO1k8yE1zsPPhmC8pFLJiippha4DYlzmg=)
2: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 2kn/q1hOME//Yhn7qkH4G8jggbyrCgjoL4hoHZXGsZM=)
3: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: ouH4abzFqla8RyorGFEh8tsKVYnL5dBI2TdSDocSzXI=)
4: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: yzY+pKYkZw0uNGaXwIqrPcHyCwkxCWHWqVxFG+uHRA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3269 (0xcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Validity
Not Before: Oct 2 18:51:05 2026 GMT
Not After : Oct 9 18:51:05 2026 GMT
Subject: CN=6abffd19-c69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:57:d5:00:ea:9c:8b:75:86:52:b2:97:47:
ed:ee:98:ed:9b:be:ea:a1:cf:f2:07:97:fc:55:da:
e7:1b:63:10:f1:e6:fa:60:45:3c:c0:e1:96:bf:9a:
5b:f5:5f:c7:c1:3b:b4:a4:29:6e:a3:62:cf:31:8f:
50:01:29:57:6b:02:ba:6d:76:a7:19:82:49:0f:63:
fe:f0:22:24:6c:99:f6:d6:36:f0:bd:21:e3:cf:a7:
0c:c5:44:13:39:c9:3e:87:1c:18:27:a7:74:e8:cb:
05:45:71:d8:14:c0:5a:9e:bb:ef:f8:7c:8e:e8:3f:
e3:46:a4:98:7e:6d:9a:a1:32:75:7c:5c:ec:72:14:
32:89:ef:4b:1e:70:68:e8:d8:57:c3:7e:9f:22:4c:
6a:09:c5:3c:85:fc:95:36:0a:7f:7c:fd:6b:81:1a:
98:22:eb:31:47:75:98:cf:f6:3a:3d:79:b2:1c:a6:
c9:1d:c4:7e:64:f7:73:af:d0:c5:eb:f9:9a:d2:95:
81:91:54:d1:0b:6c:67:76:17:ef:c2:1e:ad:9a:53:
1a:27:d4:1a:a0:ec:d7:84:3a:04:77:03:00:d5:5d:
fd:71:15:85:4f:04:a2:b7:3a:56:eb:a3:09:c2:b6:
4d:8a:39:10:9e:17:73:03:2f:7e:a2:0c:2b:c4:b6:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:10:82:78:51:55:2F:21:BE:D3:4A:03:C8:FE:87:37:D5:25:7B
X509v3 Authority Key Identifier:
keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:29:01:60:d3:0d:04:92:0a:8e:d5:b6:41:3c:87:24:5e:0d:
75:7a:44:54:63:ec:cd:49:bf:d3:00:af:5d:0c:cc:83:37:33:
d6:cf:f1:04:42:e3:fc:98:41:3b:9b:07:37:f7:38:e8:97:30:
33:ca:d4:7c:70:6c:1c:fb:56:fa:de:8f:4c:ef:1b:2a:37:20:
c5:c7:c1:cb:ec:51:08:61:9c:38:03:62:a8:a5:43:ce:6e:a6:
77:39:64:86:a9:f9:53:f8:a3:ee:e4:96:90:72:3f:39:35:8a:
f0:0f:a5:c6:c9:74:0e:e9:46:56:0e:8a:01:91:5a:77:19:cd:
e1:a7:8b:ee:e8:7f:1f:08:51:14:16:a9:ac:22:ef:4f:78:c4:
4d:b0:41:8b:23:ed:6d:b7:bb:3b:9b:67:e5:aa:0f:39:89:ee:
36:f4:00:ac:3a:4e:88:46:24:46:e5:ef:f0:48:00:20:5f:f2:
db:84:5a:be:2a:46:2e:30:b8:41:1d:ff:fd:01:73:39:f7:68:
a4:d5:4c:bd:86:e8:92:d2:44:5c:69:58:e2:f1:ba:8a:6f:e6:
bb:b1:95:62:b3:10:74:ed:b3:cf:62:31:9b:ca:3f:54:40:42:
5e:2f:02:44:90:8c:da:c0:37:f2:1a:a9:47:76:4f:22:a0:4a:
20:8e:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 04:34:42 2026 by rpki-client