
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier: YXsiGu++o5PzEhiS/WIw/RtiA1BIKNU+tBRYwzCJXWs=
Subject key identifier: B9:E4:22:AF:63:81:FF:1E:BB:FA:11:D4:3E:13:8E:5D:42:D6:78:A8
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial: 0499
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number: 0487
Signing time: Sat 14 Nov 2026 23:49:01 +0000
Manifest this update: Sat 14 Nov 2026 23:49:01 +0000
Manifest next update: Sat 21 Nov 2026 23:49:01 +0000
Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: KD/eKkL+XsX15pSydnUMahUVMglVrncGFG4neaF0e0k=)
2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: EDtbFOZ30qxpy27dyAdV7M2WWSG7NvMRonEndm53RCk=)
3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: rnGgn8k/c8Zid4oEdERz/qcES9MxLTZSwdtdf5qqEqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Validity
Not Before: Nov 14 23:49:01 2026 GMT
Not After : Nov 21 23:49:01 2026 GMT
Subject: CN=6af8f36d-3786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:f5:29:f3:ae:8f:ce:7b:10:06:5e:9c:12:
76:ee:22:d9:f9:88:82:78:2f:76:0a:8e:25:15:d4:
ad:45:35:b8:e2:34:97:8d:f2:75:2c:b5:28:3c:68:
5d:1f:c4:eb:d3:bc:8b:3a:9c:85:d2:5b:19:ad:00:
35:c3:55:50:0c:d7:df:6a:84:02:18:ef:5f:f7:10:
2e:8a:f7:17:16:e8:a6:a1:20:1a:69:92:1f:95:bd:
8a:55:e8:c9:7d:4a:7f:4f:dd:53:94:3f:d2:b5:6b:
09:30:4f:3b:7e:5c:78:77:76:9d:0a:28:01:1b:e8:
3a:e5:d9:68:71:d7:94:bf:0a:8e:18:23:23:87:e9:
07:9c:a6:bb:b0:ba:e4:10:3a:ef:2c:a3:a3:88:f8:
25:22:1c:9c:17:14:b8:2f:d7:a5:85:87:81:6b:2e:
68:0a:c9:ad:88:db:a0:aa:9c:d8:0a:00:52:f1:4c:
17:80:a6:0f:6e:e9:38:a7:d6:a3:15:14:7a:e5:69:
ac:ae:6f:17:5c:42:e0:be:18:2e:43:2e:9a:b1:fb:
f7:1b:87:b1:89:ce:91:f6:40:fc:90:ac:9c:01:e7:
a5:bf:51:9a:99:aa:d7:c3:9f:9c:98:3e:b0:ac:7a:
fa:f8:7a:04:0a:31:74:bf:f7:14:67:de:ea:2f:c0:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E4:22:AF:63:81:FF:1E:BB:FA:11:D4:3E:13:8E:5D:42:D6:78:A8
X509v3 Authority Key Identifier:
keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:06:46:00:8b:aa:5c:ad:df:0f:2a:f0:99:20:13:cb:e2:a1:
a7:a5:2e:c1:75:3b:77:2e:3d:35:21:14:73:98:82:cd:f8:dc:
84:fc:e5:3f:6a:0a:f7:89:3a:6a:da:ee:97:d0:42:0b:b0:c3:
48:6a:27:f3:2e:35:56:e7:b4:83:bf:e7:79:48:c5:49:b5:68:
be:89:aa:e7:95:78:91:92:93:ae:07:38:15:1d:33:af:15:02:
ec:b4:0b:f3:11:49:34:55:71:44:c2:1c:7f:5b:a8:7b:b3:ec:
43:53:32:cb:b4:e7:3f:f3:d7:a8:9f:b2:92:bc:d3:78:aa:d1:
00:05:a4:17:e8:ff:c8:ce:3d:c5:bc:6d:2e:e8:cf:53:3f:85:
c8:2b:ce:1f:03:aa:d2:89:de:fe:2d:12:a8:9f:2d:00:49:11:
5b:f9:78:34:95:49:63:5b:f9:d7:29:82:90:a3:1f:2b:25:5d:
0a:7c:d3:dd:ef:8f:40:9b:c7:e3:bf:52:08:ad:f3:0a:4b:5e:
d4:e1:51:3d:99:f5:1d:cc:52:e4:62:87:dc:ad:ca:78:9e:03:
bf:1c:db:84:f7:dc:cf:ef:61:63:dd:4b:cb:78:e2:d7:a1:c2:
77:53:61:0d:cc:2e:48:c2:7c:53:4f:c7:5d:5b:61:ed:5b:d2:
b5:f1:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:11:01 2026 by rpki-client