
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json)
Hash identifier: vR7xvpsPGdorNk2iFxgRWewlmYtlJyC81T01qfLr7lg=
Subject key identifier: DD:6A:48:DC:29:78:95:CD:4A:71:0A:B9:C9:5B:E1:9B:26:69:08:99
Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Certificate serial: 0A9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
Manifest number: 0A92
Signing time: Sun 20 Sep 2026 19:29:24 +0000
Manifest this update: Sun 20 Sep 2026 19:29:23 +0000
Manifest next update: Sun 27 Sep 2026 19:29:23 +0000
Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: nZRYp/Scz72hVOBwPjmfZwi2JSxkFPLxkasHvicHftk=)
2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: GNVMRmxpK7mVQconnlOE34cE3Vp+VynLXCF2Ha4Paq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2715 (0xa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Validity
Not Before: Sep 20 19:29:23 2026 GMT
Not After : Sep 27 19:29:23 2026 GMT
Subject: CN=6ab03413-f3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:82:0f:9c:2e:be:99:5f:e8:7e:54:d6:f0:
9f:c2:0e:60:a6:b8:f1:c8:55:f1:3f:6c:5c:fb:1c:
2d:92:7d:1d:81:53:88:20:d2:dd:12:b3:b2:e6:74:
93:fd:b5:a0:55:53:7e:f7:0c:e9:1f:90:42:5b:e2:
d8:47:00:38:cf:99:86:e4:12:17:b4:5b:6b:ee:12:
24:08:c2:80:0f:34:eb:ec:45:84:27:d3:d7:2d:db:
98:57:4d:96:9f:c6:61:24:29:bd:3a:70:6f:fc:5e:
13:50:cd:73:2d:46:e2:97:d4:72:c1:93:c1:20:96:
a4:a1:60:ab:06:37:bf:ea:ab:58:1e:f9:23:f2:3f:
1d:ca:4d:a8:d4:72:7d:39:96:e8:fc:db:fd:86:30:
3b:b1:b4:89:57:1c:a7:63:23:47:88:ca:3e:a9:61:
e9:4f:6d:09:a4:b3:da:7e:23:bf:98:ea:6e:cf:0d:
55:47:73:fa:87:fc:83:71:99:75:60:ac:7a:05:c9:
c0:19:cc:fe:fe:0b:b8:a9:61:be:7f:48:e4:4e:c7:
c8:67:2a:78:d6:b5:0d:7b:8a:97:24:2e:f0:e0:da:
6b:6b:9b:05:6a:88:fe:e8:96:b2:dd:30:ab:e0:f1:
ba:07:15:5f:b1:32:13:cd:d4:90:ff:69:47:74:26:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:48:DC:29:78:95:CD:4A:71:0A:B9:C9:5B:E1:9B:26:69:08:99
X509v3 Authority Key Identifier:
keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:77:f0:07:58:72:b8:8f:fd:ff:c9:49:0b:74:8f:2d:4c:0b:
ba:34:54:c7:79:70:11:63:ee:09:17:a3:0e:63:3b:ed:83:6b:
8d:22:8a:cd:04:9c:90:a9:aa:07:a8:c4:38:06:40:43:bb:fe:
11:88:7e:b4:55:d4:44:4b:13:61:eb:09:9a:cb:8a:a4:96:30:
0e:e7:08:fc:dd:78:ee:8e:73:8a:0a:ed:bd:84:fb:d7:d5:4f:
39:8e:27:e4:f0:5a:85:b2:4b:3e:08:20:70:39:16:a9:54:7b:
09:ed:21:a8:dd:ff:e7:16:0a:f1:38:9a:24:3f:43:6f:af:d0:
e6:34:c6:04:3a:19:ba:98:b0:f8:4d:26:79:29:14:4c:aa:37:
b2:f4:e2:b9:71:37:89:3c:f8:f9:81:e2:40:a1:79:5e:4d:05:
1d:09:38:93:3f:e7:de:19:76:04:a3:a0:c9:f7:5b:b7:67:53:
f6:9f:25:91:af:d5:20:72:45:f4:68:99:04:77:80:db:e0:a3:
a3:5d:36:50:57:4a:dc:87:7e:3a:9f:44:7a:74:84:28:49:ec:
7a:bb:08:c4:1e:d8:82:54:2f:0f:8b:33:7c:0a:ff:57:54:a4:
eb:57:5e:ab:3d:24:8f:d0:2b:18:51:e8:66:1f:a9:23:f2:a2:
61:75:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:07:07 2026 by rpki-client