
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json)
Hash identifier: hoYnro0TLabzkg/k6BkkhgSFItGnMgJMTqJMP3b0gVc=
Subject key identifier: C2:09:87:C3:B8:51:8F:5D:63:57:2F:3B:FD:A4:3F:79:35:96:DD:F6
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial: 362E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
Manifest number: 35B6
Signing time: Sun 04 Oct 2026 14:24:57 +0000
Manifest this update: Sun 04 Oct 2026 14:24:56 +0000
Manifest next update: Sun 11 Oct 2026 14:24:56 +0000
Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: uviQL486Idj/Gm70+g+9BxBaYJ5LDyfRDamXd0vI+Bc=)
2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=)
3: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=)
4: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=)
5: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=)
6: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=)
7: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=)
8: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=)
9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13870 (0x362e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Validity
Not Before: Oct 4 14:24:56 2026 GMT
Not After : Oct 11 14:24:56 2026 GMT
Subject: CN=6ac261b8-34d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:83:82:59:34:d4:8e:db:32:f1:0d:9f:b2:
91:67:4b:c4:77:96:56:d2:cf:5b:70:26:df:fc:24:
db:0f:f0:ec:e3:e2:5d:d5:58:15:52:94:5f:4e:80:
c7:0d:fc:2f:ab:13:7f:3e:4b:3a:ed:8a:1e:ef:71:
14:49:0c:cf:ca:02:ac:7f:22:1c:70:19:b8:50:d9:
b2:6f:30:c4:4b:ca:2d:f6:f1:02:03:33:ec:04:ad:
59:14:e5:0b:63:78:86:b8:83:21:92:0b:20:12:4d:
bb:39:ee:3e:b1:13:aa:fc:46:ac:6f:74:d2:b2:e7:
f3:b9:70:d7:21:5c:46:d2:e1:97:62:4f:2b:27:34:
e1:74:50:09:5b:85:c2:f1:df:48:52:9a:04:84:a5:
4b:4d:85:6f:79:e3:88:c3:29:ce:9e:53:1a:15:3c:
84:38:0e:d3:3d:3a:df:85:2c:67:c8:f6:ea:dd:25:
ae:c1:de:28:3c:5c:41:2b:ae:a6:c8:72:5a:06:06:
15:08:fe:68:c3:c2:2a:30:f0:0a:f5:9f:72:88:e6:
61:73:1d:84:88:ba:82:25:e0:d2:68:70:39:4b:d5:
5e:94:bc:2d:21:d7:fa:df:1a:59:b8:22:5b:60:62:
ac:c9:3b:02:59:88:d3:69:94:f2:23:00:31:93:d0:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:87:C3:B8:51:8F:5D:63:57:2F:3B:FD:A4:3F:79:35:96:DD:F6
X509v3 Authority Key Identifier:
keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:86:02:88:c0:4e:07:72:10:f2:d5:25:62:21:83:8a:32:af:
23:d0:5d:82:f1:ce:ba:e5:35:45:85:e0:8a:5c:32:3a:9d:83:
02:3a:4e:46:9b:45:be:54:3a:0a:dd:b4:2a:27:ed:3b:dd:54:
3c:7a:28:2b:df:dc:86:07:88:3d:48:6b:d4:41:73:56:03:56:
42:31:60:1c:dc:82:5b:50:41:58:6f:36:f0:f1:aa:3b:80:ab:
b5:84:e3:42:19:22:b1:a7:d0:c2:5b:57:f5:89:59:4f:7a:5d:
1f:52:05:2d:20:ca:cf:90:1a:71:fa:47:03:48:a1:2f:92:1c:
38:2f:ee:1f:a9:7d:06:f4:de:53:14:85:d3:ca:2e:8c:73:1a:
9b:51:ac:57:8b:88:63:00:d4:c7:fc:30:41:da:78:3a:69:49:
29:ae:c8:bb:bf:54:f6:16:22:83:e7:c5:58:c0:44:84:bc:ae:
c8:08:b9:1a:04:5f:28:13:77:c8:c2:6f:eb:e4:72:c8:df:ba:
0d:9d:d3:23:7d:24:69:58:fc:fc:cf:b1:fc:f1:1e:08:e5:f8:
f0:45:4b:8c:d9:7a:22:d4:e1:db:46:ca:75:cd:25:a1:68:5a:
60:d8:b1:07:06:5a:fd:f2:01:71:43:8f:83:a7:33:f3:e1:92:
d2:32:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:52:10 2026 by rpki-client