
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
File: l-cly4ZRjBgURIehUCq-Kw1EAwU.mft (raw, json)
Hash identifier: wBf2FoBPZ/w2cq2SoEJEHLwyxC/N13Urw+6VqvfexU8=
Subject key identifier: E7:1B:43:6C:AC:B5:70:93:AF:94:AA:13:71:1B:D1:89:DC:9D:D4:E8
Authority key identifier: 97:E7:25:CB:86:51:8C:18:14:44:87:A1:50:2A:BE:2B:0D:44:03:05
Certificate issuer: /CN=A9172B99/serialNumber=97E725CB86518C18144487A1502ABE2B0D440305
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
Manifest number: 34
Signing time: Tue 13 Oct 2026 09:23:48 +0000
Manifest this update: Tue 13 Oct 2026 09:23:48 +0000
Manifest next update: Tue 20 Oct 2026 09:23:48 +0000
Files and hashes: 1: l-cly4ZRjBgURIehUCq-Kw1EAwU.crl (hash: XUieV7PPeSP/AT6QtndrVX5bQUiH+c2Nq5/7zPq1878=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.crl
rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B99, serialNumber=97E725CB86518C18144487A1502ABE2B0D440305
Validity
Not Before: Oct 13 09:23:48 2026 GMT
Not After : Oct 20 09:23:48 2026 GMT
Subject: CN=6acdf8a4-d70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7c:79:ba:c6:10:f4:c9:49:20:ad:0c:3f:0e:
cd:43:52:37:69:70:bd:68:36:15:89:0b:06:9e:fa:
77:fc:5a:7f:88:38:69:83:30:8a:01:d8:ac:ef:f9:
4a:cf:4f:8c:1f:4f:06:20:0c:4f:da:a7:5a:9d:a4:
10:69:6a:b3:b0:ac:62:8b:fc:ba:13:86:54:28:20:
3c:c2:34:8c:02:06:8c:f6:ad:af:48:2f:85:be:cf:
ee:4e:d5:68:1a:55:bc:16:cf:33:db:36:b0:bd:82:
00:63:c2:18:76:3a:c4:41:72:e1:dd:8f:4d:ed:85:
8b:96:3c:6a:57:f1:68:ac:c4:63:39:53:f4:16:73:
45:2e:5f:66:d1:ee:60:8d:63:21:59:b5:cd:1d:1b:
29:67:d1:a9:7e:4c:15:15:85:c7:41:2c:d6:55:c3:
9e:1d:b1:21:41:3e:fa:dc:af:ce:2f:39:7e:cb:e5:
5d:13:c0:69:a4:ff:3d:c9:6a:04:9f:92:b7:61:e1:
b4:a5:4a:a8:58:55:79:fd:fb:12:b2:ed:bd:5d:3a:
69:53:56:0b:30:ce:f3:fd:f6:40:62:bd:ca:51:6b:
76:85:a2:86:d2:ec:8a:cc:61:6d:e9:0a:16:7f:3c:
7d:4a:05:c0:a8:9c:61:86:9a:6d:ed:30:0f:df:ad:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1B:43:6C:AC:B5:70:93:AF:94:AA:13:71:1B:D1:89:DC:9D:D4:E8
X509v3 Authority Key Identifier:
keyid:97:E7:25:CB:86:51:8C:18:14:44:87:A1:50:2A:BE:2B:0D:44:03:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:93:1e:7e:90:d7:79:19:c6:e9:7f:63:44:a0:67:28:1e:6e:
93:02:d2:4f:26:94:1c:09:e9:a0:a8:12:a5:1c:c9:a3:e2:4a:
83:b6:a4:a8:43:c0:de:cb:52:ba:de:e0:97:20:05:13:46:a1:
ae:b6:2a:6b:0a:88:43:7f:e8:c4:0a:40:34:95:d2:ce:c4:6c:
5b:ae:cd:e3:1e:92:ed:ed:b1:d4:74:62:78:05:dd:82:d2:ef:
f5:9e:37:b1:2a:ce:0d:d7:12:4a:c7:5a:d4:16:ad:5a:0d:55:
31:e3:54:e3:6e:d3:ea:a5:2a:45:4a:33:23:22:34:4a:30:21:
03:b1:8d:5d:b9:40:f7:0f:8b:9a:aa:d4:54:78:9b:00:40:e3:
4c:9b:84:c5:61:ba:e7:29:63:8f:76:c0:c2:81:0f:4c:46:79:
59:d2:81:1c:7d:f5:2b:1d:81:29:ad:5e:e5:9d:9d:40:58:a7:
66:12:fd:70:a1:fd:89:a4:07:77:83:7e:d8:7a:89:e8:22:65:
77:6c:0f:d6:78:e9:85:6c:dc:37:41:bd:48:63:74:82:3f:ba:
8e:48:24:49:92:7a:54:69:d5:de:dc:bc:42:04:eb:f4:b6:41:
be:bd:b1:6c:7c:f9:ee:72:0c:ed:68:65:48:9e:be:aa:32:53:
ce:a4:3f:86
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MkI5OTExMC8GA1UEBRMoOTdFNzI1Q0I4NjUxOEMxODE0NDQ4N0ExNTAyQUJFMkIw
RDQ0MDMwNTAeFw0yNjEwMTMwOTIzNDhaFw0yNjEwMjAwOTIzNDhaMBgxFjAUBgNV
BAMTDTZhY2RmOGE0LWQ3MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmfHm6xhD0yUkgrQw/Ds1DUjdpcL1oNhWJCwae+nf8Wn+IOGmDMIoB2Kzv+UrP
T4wfTwYgDE/ap1qdpBBparOwrGKL/LoThlQoIDzCNIwCBoz2ra9IL4W+z+5O1Wga
VbwWzzPbNrC9ggBjwhh2OsRBcuHdj03thYuWPGpX8WisxGM5U/QWc0UuX2bR7mCN
YyFZtc0dGyln0al+TBUVhcdBLNZVw54dsSFBPvrcr84vOX7L5V0TwGmk/z3JagSf
krdh4bSlSqhYVXn9+xKy7b1dOmlTVgswzvP99kBivcpRa3aFoobS7IrMYW3pChZ/
PH1KBcConGGGmm3tMA/frRVVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5xtDbKy1
cJOvlKoTcRvRidyd1OgwHwYDVR0jBBgwFoAUl+cly4ZRjBgURIehUCq+Kw1EAwUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQjk5L0FENzJGOEQyNzkw
QzExRjFCQzFCNkM3MDY1QTMwRkJDL2wtY2x5NFpSakJnVVJJZWhVQ3EtS3cxRUF3
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbC1jbHk0WlJqQmdVUkllaFVDcS1LdzFFQXdVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy
Qjk5L0FENzJGOEQyNzkwQzExRjFCQzFCNkM3MDY1QTMwRkJDL2wtY2x5NFpSakJn
VVJJZWhVQ3EtS3cxRUF3VS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAIkx5+kNd5Gcbpf2NEoGcoHm6TAtJPJpQcCemgqBKlHMmj4kqDtqSoQ8Dey1K6
3uCXIAUTRqGutiprCohDf+jECkA0ldLOxGxbrs3jHpLt7bHUdGJ4Bd2C0u/1njex
Ks4N1xJKx1rUFq1aDVUx41TjbtPqpSpFSjMjIjRKMCEDsY1duUD3D4uaqtRUeJsA
QONMm4TFYbrnKWOPdsDCgQ9MRnlZ0oEcffUrHYEprV7lnZ1AWKdmEv1wof2JpAd3
g37YeonoImV3bA/WeOmFbNw3Qb1IY3SCP7qOSCRJknpUadXe3LxCBOv0tkG+vbFs
fPnucgztaGVInr6qMlPOpD+G
-----END CERTIFICATE-----
Generated at Tue Oct 13 18:04:47 2026 by rpki-client