
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
File: L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json)
Hash identifier: WTacFm68F32gw1gKz+HsM9IxETsSbjaC41Qg6NVhXrE=
Subject key identifier: F2:03:43:1F:CD:E8:43:28:DF:36:C6:E4:29:D9:68:5C:08:37:DD:02
Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
Certificate issuer: /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Certificate serial: 044D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
Manifest number: 0446
Signing time: Tue 22 Sep 2026 23:49:31 +0000
Manifest this update: Tue 22 Sep 2026 23:49:31 +0000
Manifest next update: Tue 29 Sep 2026 23:49:31 +0000
Files and hashes: 1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: ppseWsNT62fJF/CYFurwpqRJpPrUK1MIRJvsiy2j754=)
2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: NbtGj9VX66Z/q14wLFr80IvVPTzt6u9+KSXlI9rhNls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Validity
Not Before: Sep 22 23:49:31 2026 GMT
Not After : Sep 29 23:49:31 2026 GMT
Subject: CN=6ab3140b-5d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:42:c0:1a:49:6a:36:a5:a4:e4:48:ea:83:
7c:dd:dd:5f:55:ad:55:f8:81:e4:25:ca:13:d4:4e:
a5:e7:4d:d5:9a:28:53:8d:49:cc:0f:3e:8a:49:2d:
ce:c6:eb:60:5a:39:4a:24:d9:89:c4:1f:7e:55:25:
8c:35:d5:7c:7b:d4:71:ce:ff:dd:1a:c5:b0:c4:8e:
9f:48:c8:cd:94:1f:65:07:37:96:20:87:fc:11:a4:
c3:1f:89:e7:27:90:f0:c6:f9:8f:6a:ab:3f:43:1a:
98:9e:71:00:4d:0b:53:e4:8e:8d:7d:20:ff:32:f0:
93:8f:f3:19:4c:f4:68:ed:6f:95:dc:89:91:8f:fa:
b2:03:b9:81:bb:70:c3:73:c6:dc:1b:b9:87:ff:86:
ca:d3:c2:ef:fa:24:38:fe:0a:1b:62:54:58:14:de:
08:fe:b8:73:dc:d7:e1:b2:12:38:bd:4f:72:ed:47:
c4:6c:1f:63:e7:b2:ec:f3:f9:6c:6d:7c:58:19:1e:
58:88:b9:29:33:e2:76:0a:ac:fa:a5:44:1b:b1:e1:
08:4b:9e:94:5b:aa:20:19:d6:ed:f3:30:6d:4c:fe:
30:f4:e5:ec:b6:23:7f:dd:67:e6:32:9a:2b:94:05:
25:a5:0a:ca:75:06:65:bc:ae:eb:ff:a8:5d:f6:c3:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:03:43:1F:CD:E8:43:28:DF:36:C6:E4:29:D9:68:5C:08:37:DD:02
X509v3 Authority Key Identifier:
keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:88:bc:d6:1b:c2:2a:54:7a:1f:fb:eb:b1:1d:73:a7:3a:5b:
3f:80:82:66:80:a3:37:d8:94:5a:23:48:f5:e1:15:57:84:f4:
73:e5:69:b3:c7:84:c9:b6:7c:70:ef:44:a6:ea:47:b5:11:c3:
53:d6:b9:85:43:90:32:d3:1c:a3:39:bd:a9:37:5b:38:bc:75:
ee:be:3b:e3:aa:6a:d6:ea:4c:cb:74:c3:32:2f:18:05:e0:83:
8b:ae:b7:11:2f:ee:6d:49:a3:f1:16:4d:ca:9c:be:5b:ef:54:
58:d9:64:65:af:9c:5e:36:38:ab:58:10:af:34:f6:6c:94:82:
91:80:31:98:14:56:39:e5:f0:a2:d9:82:cb:67:1b:52:f4:18:
b0:e0:9a:8d:3a:e5:04:20:d4:a8:61:40:9b:38:9b:a7:86:53:
52:9a:c2:e1:6e:4e:45:5a:39:4d:be:1a:8e:64:78:8f:db:07:
7e:20:3f:d8:e1:39:7b:09:0d:60:95:ab:27:4f:01:c2:c6:36:
bf:87:4a:90:b5:4d:03:c8:5e:c1:40:26:e1:07:67:bc:f5:f7:
ac:e9:09:ce:df:a1:a7:f0:02:ec:98:60:d0:5e:ad:6c:99:46:
5c:b3:05:4d:4f:a5:e5:f3:3d:b7:ae:43:e2:4c:86:61:9c:4e:
00:6e:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:08:36 2026 by rpki-client