
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json)
Hash identifier: zDUlJR/WaYNovxevbBirSiRdJ3rEPHdQh/u58hxruOQ=
Subject key identifier: 11:97:62:21:11:A4:02:85:E8:4A:B5:93:93:B2:1C:92:5C:0C:CF:FE
Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
Manifest number: FF
Signing time: Mon 21 Sep 2026 06:12:36 +0000
Manifest this update: Mon 21 Sep 2026 06:12:35 +0000
Manifest next update: Mon 28 Sep 2026 06:12:35 +0000
Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: agJo64WgJlrvwjmtjkejC+722iCYuv4EDzqADngcDYc=)
2: 2917F838011D11F19AF518A8476F56BC.roa (hash: xJYWdy3vw+vjD1PJdLPXMUN2+mPgPI/QMzbJ06GDJ8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Validity
Not Before: Sep 21 06:12:35 2026 GMT
Not After : Sep 28 06:12:35 2026 GMT
Subject: CN=6ab0cad4-7e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:09:82:a2:3f:03:c3:ae:9c:84:2c:55:a9:
8f:64:98:5e:c4:b1:80:23:37:3e:81:ee:7e:a3:5c:
c3:70:9f:de:ea:de:8c:1b:15:78:19:48:bb:b5:5b:
c9:66:f8:02:ed:1d:f7:f5:0c:c9:d5:71:16:0a:42:
b7:35:51:79:58:22:da:c2:45:a3:ef:e5:7d:59:f2:
78:ae:7d:7c:69:87:62:fb:c1:53:89:b3:db:e5:ad:
be:0b:f7:34:cc:c1:4b:8b:7a:a5:89:3a:b4:7a:e9:
65:d4:7c:0e:d5:aa:b2:aa:c9:39:31:f7:ea:9c:71:
5c:61:16:54:6f:4b:7f:58:d9:e6:d0:4d:b0:ae:13:
8f:f4:c0:e7:96:fe:bd:fd:d7:a7:36:8d:e8:36:21:
f3:ad:6f:71:dc:aa:08:f2:9e:e9:68:fd:63:a5:61:
d8:51:1f:ab:76:44:7c:1c:e0:66:65:20:15:cd:3e:
e2:2f:6a:ca:01:73:d6:25:84:ad:b3:83:c8:45:5b:
85:10:8f:c8:dd:62:3c:16:4e:85:b4:36:7f:e5:3d:
4d:22:af:51:33:0a:ab:d0:e6:7c:b6:d1:aa:cb:da:
46:08:2f:72:b0:1e:71:b7:9c:c7:16:66:f0:77:ab:
b4:19:82:21:c2:9c:23:fc:59:e3:57:01:cf:15:14:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:62:21:11:A4:02:85:E8:4A:B5:93:93:B2:1C:92:5C:0C:CF:FE
X509v3 Authority Key Identifier:
keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:52:19:4c:16:35:25:8c:9b:2f:fb:14:00:4f:d0:3c:0b:b3:
4a:c9:3e:4b:f7:fb:9b:a2:7b:82:8f:fd:0a:3e:c6:44:97:15:
07:98:82:b8:de:5d:1c:4b:94:80:07:10:5c:09:a1:c9:5b:36:
78:68:45:ce:24:a2:4b:dd:56:39:c8:38:f3:d7:fc:f5:bf:a6:
90:e3:b3:c8:2d:68:64:70:ce:e4:61:11:7c:44:6b:13:ca:f3:
35:3c:89:1b:a5:a0:62:fe:91:7c:65:0f:87:ee:73:86:6c:68:
f3:fc:35:63:c0:3f:05:be:aa:3f:8f:96:9f:13:84:91:26:0c:
96:0c:b7:16:de:23:d1:e9:96:22:97:06:1f:ac:cc:05:c6:b4:
18:39:27:00:27:a8:ce:c8:cb:48:b4:06:5d:19:a8:c5:2e:e4:
41:15:03:9b:21:d8:92:52:6a:96:b5:83:f9:38:0c:cb:75:57:
f3:57:bb:e3:49:23:24:ed:95:ef:86:e8:c2:77:1b:bd:a7:b2:
d4:0a:c7:3d:1b:d6:7f:23:c3:97:5f:38:c5:a0:68:f8:2a:ed:
e6:57:18:32:3b:a3:21:97:6a:99:63:64:cf:08:c6:71:93:62:
ed:66:11:66:79:8d:05:c6:ff:ab:18:d6:2a:9f:59:39:c4:18:
91:7b:45:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ1OUYxMTAvBgNVBAUTKDJGNzJEQzExMzkyREFBNTA1QTg1NjJFMjc2Mzg4NjA2
MDNDREJFQkYwHhcNMjYwOTIxMDYxMjM1WhcNMjYwOTI4MDYxMjM1WjAYMRYwFAYD
VQQDEw02YWIwY2FkNC03ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlF4JgqI/A8OunIQsVamPZJhexLGAIzc+ge5+o1zDcJ/e6t6MGxV4GUi7tVvJ
ZvgC7R339QzJ1XEWCkK3NVF5WCLawkWj7+V9WfJ4rn18aYdi+8FTibPb5a2+C/c0
zMFLi3qliTq0eull1HwO1aqyqsk5MffqnHFcYRZUb0t/WNnm0E2wrhOP9MDnlv69
/denNo3oNiHzrW9x3KoI8p7paP1jpWHYUR+rdkR8HOBmZSAVzT7iL2rKAXPWJYSt
s4PIRVuFEI/I3WI8Fk6FtDZ/5T1NIq9RMwqr0OZ8ttGqy9pGCC9ysB5xt5zHFmbw
d6u0GYIhwpwj/FnjVwHPFRSvcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGXYiER
pAKF6Eq1k5OyHJJcDM/+MB8GA1UdIwQYMBaAFC9y3BE5LapQWoVi4nY4hgYDzb6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDU5Ri8wMTkwNDNGMDMz
RjYxMUYwOUNFMzhFNDFDNEY5QUUwMi9MM0xjRVRrdHFsQmFoV0xpZGppR0JnUE52
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDU5Ri8wMTkwNDNGMDMzRjYxMUYwOUNFMzhFNDFDNEY5QUUwMi9MM0xjRVRrdHFs
QmFoV0xpZGppR0JnUE52cjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvVIZTBY1JYybL/sUAE/QPAuzSsk+S/f7m6J7go/9Cj7GRJcVB5iCuN5dHEuU
gAcQXAmhyVs2eGhFziSiS91WOcg489f89b+mkOOzyC1oZHDO5GERfERrE8rzNTyJ
G6WgYv6RfGUPh+5zhmxo8/w1Y8A/Bb6qP4+WnxOEkSYMlgy3Ft4j0emWIpcGH6zM
Bca0GDknACeozsjLSLQGXRmoxS7kQRUDmyHYklJqlrWD+TgMy3VX81e740kjJO2V
74bowncbvaey1ArHPRvWfyPDl184xaBo+Crt5lcYMjujIZdqmWNkzwjGcZNi7WYR
ZnmNBcb/qxjWKp9ZOcQYkXtFNg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:01:45 2026 by rpki-client