
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier: sMWp3Cs3Q6BNOmK6JHf1ml0vZjMDWVX6VQNT1DBt76E=
Subject key identifier: DD:B5:45:5B:35:A1:D7:3A:C2:6F:89:25:D9:48:8D:E7:FC:CC:60:5A
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial: 0492
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number: 0485
Signing time: Sat 13 Jun 2026 00:05:15 +0000
Manifest this update: Sat 13 Jun 2026 00:05:15 +0000
Manifest next update: Sat 20 Jun 2026 00:05:15 +0000
Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: Uf2eBbY47YA591Mg+ov4HKizqsX4UKjJoUx4PpmhhK8=)
2: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=)
3: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1170 (0x492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Validity
Not Before: Jun 13 00:05:15 2026 GMT
Not After : Jun 20 00:05:15 2026 GMT
Subject: CN=6a2c9ebb-86f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:6a:68:b5:6a:4f:7a:15:4a:6e:25:2f:bb:
38:bc:9f:e9:09:9f:9d:75:3f:d4:72:a7:db:bc:72:
96:d4:d1:4d:eb:c2:e9:9f:b1:0c:56:17:dd:55:52:
be:4d:c8:a0:42:90:40:f4:fb:aa:f9:e4:81:11:65:
b2:14:88:d6:f7:59:8b:f8:40:42:54:5a:9c:ad:6b:
f8:8c:30:c6:71:86:6f:c7:7e:a7:f0:65:2c:c0:9d:
ee:dd:a2:64:12:71:b0:f4:dd:d4:c2:25:cf:b2:bd:
0f:03:40:31:67:99:85:52:8b:cd:8c:20:ac:aa:5b:
4e:7b:3e:fe:06:fd:f8:16:f9:89:4a:fc:9c:2e:00:
bc:9b:de:7f:97:58:84:de:a0:15:2f:35:d7:8a:81:
1a:83:93:9f:77:ed:16:73:db:d2:4c:0b:23:4c:ab:
39:4b:3a:94:3e:1c:37:5d:77:16:ae:42:0d:99:05:
79:11:a4:49:d1:a0:08:23:85:f5:10:70:bb:ee:79:
4b:23:87:f6:ac:56:03:2b:29:2e:8f:2e:7d:5c:8b:
30:c6:f8:5c:cb:90:8a:47:a7:b0:89:2b:ed:21:5e:
18:d9:50:38:82:f5:6a:db:4e:c0:ba:b7:54:1f:99:
09:3f:4d:59:38:30:c1:1b:0b:2a:71:98:c3:7d:e1:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B5:45:5B:35:A1:D7:3A:C2:6F:89:25:D9:48:8D:E7:FC:CC:60:5A
X509v3 Authority Key Identifier:
keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e3:93:a2:35:84:96:29:5d:10:51:1e:7a:fb:aa:d1:4f:25:
c7:bb:15:b0:f9:14:0c:aa:48:bf:9f:a3:36:c2:8b:fc:7a:93:
c1:48:ac:e8:97:02:44:98:4e:a3:d3:14:e6:00:55:fc:d6:7e:
a5:08:e5:f7:77:82:a0:74:42:81:b5:21:78:1f:2f:f0:29:aa:
09:13:d1:ae:5b:f0:7f:1e:e2:f0:81:28:d1:3a:fc:df:52:49:
8f:8a:29:9d:af:cc:b6:30:d8:6b:c0:87:8e:f4:37:47:71:7d:
c3:2c:11:02:f2:5c:7f:02:6d:4d:99:7f:7c:bc:c7:05:4b:76:
b3:ad:fe:95:05:97:81:c7:d5:29:0f:db:0e:3a:3d:2b:7d:25:
3b:aa:c4:71:9a:d5:f1:32:9d:5e:03:1a:cf:da:a2:eb:f3:1c:
ca:b4:1c:af:a5:67:07:da:70:1e:04:91:f6:d6:7b:e3:cd:bf:
97:8c:d5:26:e0:0e:ec:75:6e:34:ed:fa:64:7b:72:46:9d:ca:
05:f0:27:33:63:d8:a2:35:35:2c:44:36:4d:cd:4b:ba:ce:25:
ba:3b:51:29:5e:24:43:d6:53:49:24:d9:87:3c:71:92:39:62:
ff:69:8d:92:96:8e:e1:23:fa:2a:01:12:7c:54:87:68:f9:95:
a4:7a:5c:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD
NTM2RkRGOUIwHhcNMjYwNjEzMDAwNTE1WhcNMjYwNjIwMDAwNTE1WjAYMRYwFAYD
VQQDEw02YTJjOWViYi04NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcZqaLVqT3oVSm4lL7s4vJ/pCZ+ddT/UcqfbvHKW1NFN68Lpn7EMVhfdVVK+
TcigQpBA9Puq+eSBEWWyFIjW91mL+EBCVFqcrWv4jDDGcYZvx36n8GUswJ3u3aJk
EnGw9N3UwiXPsr0PA0AxZ5mFUovNjCCsqltOez7+Bv34FvmJSvycLgC8m95/l1iE
3qAVLzXXioEag5Ofd+0Wc9vSTAsjTKs5SzqUPhw3XXcWrkINmQV5EaRJ0aAII4X1
EHC77nlLI4f2rFYDKykujy59XIswxvhcy5CKR6ewiSvtIV4Y2VA4gvVq207AurdU
H5kJP01ZODDBGwsqcZjDfeGw1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN21RVs1
odc6wm+JJdlIjef8zGBaMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF
NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV
b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOOOTojWElildEFEeevuq0U8lx7sVsPkUDKpIv5+jNsKL/HqTwUis6JcCRJhO
o9MU5gBV/NZ+pQjl93eCoHRCgbUheB8v8CmqCRPRrlvwfx7i8IEo0Tr831JJj4op
na/MtjDYa8CHjvQ3R3F9wywRAvJcfwJtTZl/fLzHBUt2s63+lQWXgcfVKQ/bDjo9
K30lO6rEcZrV8TKdXgMaz9qi6/McyrQcr6VnB9pwHgSR9tZ7482/l4zVJuAO7HVu
NO36ZHtyRp3KBfAnM2PYojU1LEQ2Tc1Lus4lujtRKV4kQ9ZTSSTZhzxxkjli/2mN
kpaO4SP6KgESfFSHaPmVpHpcBA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:12:15 2026 by rpki-client