
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier: Am6QVE9vCRzE7fRJ/9ybGFTJGCKQHt2UP4vgS24v+Bw=
Subject key identifier: 08:E7:6E:F0:99:47:99:10:69:40:04:20:E9:44:C2:50:6B:4A:54:46
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial: 0CFA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number: 0CE0
Signing time: Sat 28 Feb 2026 18:29:54 +0000
Manifest this update: Sat 28 Feb 2026 18:29:54 +0000
Manifest next update: Sat 07 Mar 2026 18:29:54 +0000
Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: jrtcJShSaIAy7opFDP3tXgJ+fKGPHOcRQjX88fDs8r4=)
2: B430443A324211EFB14FB614C4F9AE02.roa (hash: mSmKdhP1dOumHc/59nE808KhJQxB4mVR7KUP5N0koRQ=)
3: FB170730324211EFA9B5F949C4F9AE02.roa (hash: yYm1dMIQ816DxBHWaOlKO9yBaX3TNCa5zS93/rSk5Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3322 (0xcfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Validity
Not Before: Feb 28 18:29:54 2026 GMT
Not After : Mar 7 18:29:54 2026 GMT
Subject: CN=69a33422-48b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:db:56:e7:14:6a:4d:12:a6:1c:07:5a:e7:
65:39:18:e1:d2:18:95:66:11:10:92:81:51:23:dd:
d1:c6:83:a6:64:29:eb:b1:b4:a0:b0:cc:fa:0a:72:
43:c8:da:35:88:1b:25:49:0d:40:44:2b:e5:db:43:
4f:d0:1d:9a:da:80:9c:ab:1a:25:9c:35:4e:8d:76:
3e:5c:06:b5:14:b4:62:09:e3:47:69:c3:f8:d0:8e:
1e:67:d5:8c:52:87:e1:cd:9a:b9:95:1d:88:7b:0d:
ea:de:ca:36:c3:ad:65:1d:24:4b:93:e8:21:89:45:
85:6f:b4:32:6e:a9:d5:86:65:04:fb:18:81:7f:09:
1b:97:3b:19:41:f0:4e:b4:4e:58:fa:fa:21:9d:8c:
71:19:2a:75:ba:9e:08:b3:2a:c8:29:22:73:15:ad:
30:c4:d2:e9:24:de:98:fe:11:72:58:78:4f:19:e6:
5b:d7:1b:a2:a1:af:16:08:ba:9b:de:e7:50:59:16:
13:fe:ee:ea:f5:89:26:12:81:eb:f3:8b:45:60:10:
cb:27:12:c5:f7:b0:cf:2a:4d:1d:59:8f:76:17:94:
76:91:5a:00:46:75:94:5b:e3:3d:f5:cb:0a:f0:a4:
90:73:4e:28:7f:c4:0d:f2:76:0c:8c:4b:58:f0:14:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:6E:F0:99:47:99:10:69:40:04:20:E9:44:C2:50:6B:4A:54:46
X509v3 Authority Key Identifier:
keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:11:73:93:95:db:10:79:f3:84:53:7a:0d:67:77:63:02:d1:
17:cb:50:49:e4:5e:dc:64:3b:d7:d5:8f:db:68:a4:45:0b:4f:
c5:ab:43:03:a1:e8:04:9f:97:60:9b:ec:7a:7d:54:9a:e8:2f:
25:59:ab:27:66:bc:bb:f5:82:c8:e9:75:6a:a2:0b:53:46:58:
89:99:cc:9f:a1:8f:3f:06:2b:ea:e1:68:4f:57:00:0a:0f:a1:
22:d9:bf:b7:78:0e:ce:4a:ba:59:fa:9b:af:8e:1d:96:f5:6a:
4a:06:f5:7d:c8:0e:b0:4b:a5:3a:f5:c2:8e:31:8f:f7:a4:c0:
3d:ca:a7:d9:c8:78:92:0d:38:ad:11:c5:6f:d5:41:09:93:2b:
00:86:a5:d6:3c:41:a6:6d:a4:e3:1b:5d:eb:d7:18:bc:71:8e:
c4:25:45:bb:be:05:f5:e5:39:ca:91:76:8a:81:d3:93:da:61:
97:bb:ea:b8:55:be:26:bb:ac:62:e0:2b:61:36:81:6a:a6:be:
b4:b2:6a:ed:78:f3:83:e8:45:3c:d0:d3:14:bd:c7:d4:ef:29:
32:03:e3:3f:03:02:a9:7e:76:f4:f2:a7:3e:a3:28:bd:b0:bc:
90:6c:0b:f3:0c:9c:ed:7f:dd:45:2b:58:5d:05:05:b1:76:41:
03:8c:6f:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE
QjczNDc1MzEwHhcNMjYwMjI4MTgyOTU0WhcNMjYwMzA3MTgyOTU0WjAYMRYwFAYD
VQQDDA02OWEzMzQyMi00OGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbXbVucUak0SphwHWudlORjh0hiVZhEQkoFRI93RxoOmZCnrsbSgsMz6CnJD
yNo1iBslSQ1ARCvl20NP0B2a2oCcqxolnDVOjXY+XAa1FLRiCeNHacP40I4eZ9WM
UofhzZq5lR2Iew3q3so2w61lHSRLk+ghiUWFb7QybqnVhmUE+xiBfwkblzsZQfBO
tE5Y+vohnYxxGSp1up4IsyrIKSJzFa0wxNLpJN6Y/hFyWHhPGeZb1xuioa8WCLqb
3udQWRYT/u7q9YkmEoHr84tFYBDLJxLF97DPKk0dWY92F5R2kVoARnWUW+M99csK
8KSQc04of8QN8nYMjEtY8BRQ5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjnbvCZ
R5kQaUAEIOlEwlBrSlRGMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2
RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4
TFpFRUtBaThyZnpiYzBkVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIRFzk5XbEHnzhFN6DWd3YwLRF8tQSeRe3GQ719WP22ikRQtPxatDA6HoBJ+X
YJvsen1UmugvJVmrJ2a8u/WCyOl1aqILU0ZYiZnMn6GPPwYr6uFoT1cACg+hItm/
t3gOzkq6Wfqbr44dlvVqSgb1fcgOsEulOvXCjjGP96TAPcqn2ch4kg04rRHFb9VB
CZMrAIal1jxBpm2k4xtd69cYvHGOxCVFu74F9eU5ypF2ioHTk9phl7vquFW+Jrus
YuArYTaBaqa+tLJq7Xjzg+hFPNDTFL3H1O8pMgPjPwMCqX529PKnPqMovbC8kGwL
8wyc7X/dRStYXQUFsXZBA4xvKg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:53 2026 by rpki-client