
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json)
Hash identifier: 0+1imwy86wi6T7VFYT/9y/ymv/FvUsXrbvb5QsdRayQ=
Subject key identifier: AC:B5:7D:8D:73:49:EF:8F:40:5D:E9:CB:AB:C1:6B:3C:FA:FF:C4:EA
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
Manifest number: 0158
Signing time: Sun 15 Nov 2026 05:50:25 +0000
Manifest this update: Sun 15 Nov 2026 05:50:24 +0000
Manifest next update: Sun 22 Nov 2026 05:50:24 +0000
Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: 7IZAjxtPfCO+gN1SDzivhyBk61YeU40TtQFocmIZ/xE=)
2: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: KGNNcKyC/9ZNG33rV3+WnydQa40FOtfcMASpCbQGvcA=)
3: C8171E8EC04D11F081466417C4F9AE02.roa (hash: VcifrlmSYOvRfKqFSjhNzhMwktkDkcWMiCL1IwcQSPo=)
4: 37F54364CDD311F1850CC0950066CEF9.roa (hash: cnhv7EDpGQfl0cl1ZG/q/lROiDi0v31hPwV/duNF84k=)
5: D87376860A1511F09D97420DC4F9AE02.roa (hash: 8lzuSsXoeVTLO94cZnbjFM82UzyIWVo6xrDZpzd/rnI=)
6: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: jPYO9w5nsROTmv2DK5P3HYxhq09ME6CTN6RnDxraZPE=)
7: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: PannZ6VHlnMlbIAiTwMXrhZQx+rOzoDIuG7Svi8FR6k=)
8: A679A90E6ACA11F19C5D49226847A888.roa (hash: HlE4/rCdBHaYQMrVtMYhseWs8raS1AuMlQ1WnzgrFwc=)
9: 81F3BDC2B71911F18A35C1CA6C11F970.roa (hash: XZNx6kfw/YKo0eA3+fyqEC+u+phMXIxRF2a/Aunxe/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 05:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Validity
Not Before: Nov 15 05:50:24 2026 GMT
Not After : Nov 22 05:50:24 2026 GMT
Subject: CN=6af94821-6359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:5f:53:94:65:13:9d:9c:5f:ba:54:44:53:
48:01:3a:a0:07:0e:9d:77:6f:c6:90:2d:88:c4:96:
7f:62:15:6e:bd:5f:7e:0b:96:70:44:e4:51:50:ea:
82:df:12:f3:2d:7b:61:6d:6f:61:06:1f:79:47:b8:
24:e9:72:5f:e8:ed:da:c7:52:03:fc:0a:02:ad:a5:
d2:0d:c0:ee:8a:f9:7e:6d:16:2d:57:df:92:a7:cd:
53:7d:72:71:3d:5f:b2:b1:da:e2:cb:1b:a1:bb:9e:
57:60:44:38:05:dc:06:0c:e3:a7:a2:56:98:57:a8:
cd:d5:2d:86:6e:49:5b:0c:3b:1d:f0:9f:b7:e5:5c:
31:4b:0d:2f:24:13:5a:f2:cd:12:e2:af:86:4f:4c:
f9:8e:01:cb:7d:57:a8:8f:27:f2:c0:0a:e0:d4:43:
b8:2c:d8:b5:c2:87:73:5a:f9:2b:c0:e6:d9:41:d4:
90:af:b7:9f:04:63:22:0a:28:2d:f1:be:d1:0f:d4:
e8:0b:b6:9e:b2:19:a7:cf:18:f4:32:d9:20:a8:a2:
d7:4b:2b:93:da:d9:00:dc:72:a5:86:0d:27:4c:89:
ce:35:3c:44:30:a4:e0:bc:d5:66:fc:9d:29:6d:5d:
b1:3e:ef:c0:d9:d5:ed:12:df:9d:a7:02:ec:4d:50:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:7D:8D:73:49:EF:8F:40:5D:E9:CB:AB:C1:6B:3C:FA:FF:C4:EA
X509v3 Authority Key Identifier:
keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:da:f1:57:b6:52:bb:c6:9d:bd:b2:a9:c9:22:e0:46:7a:26:
ab:87:46:e9:2b:79:81:ef:7b:39:4b:fb:1e:b6:39:27:94:71:
10:32:98:8e:8e:21:2e:8c:77:79:2f:ac:fb:37:ab:62:73:af:
9e:81:6f:8e:27:a9:9e:97:e7:3f:98:68:23:b8:d4:34:07:ca:
d1:7d:bc:ad:b6:1a:d7:d5:5b:f5:24:78:e7:09:22:38:99:49:
a3:89:9d:2c:b0:03:bf:61:41:b4:c2:18:da:8d:bf:98:b0:c1:
62:c2:4f:5b:d9:cc:69:26:82:54:02:ec:90:c6:71:b7:09:99:
ac:82:bf:54:d0:af:7e:18:7f:17:16:c3:d8:42:5c:42:f4:8e:
07:72:bd:01:13:5d:25:5f:36:1b:bb:5c:7f:70:02:b9:a5:cd:
ba:75:95:e3:13:04:3a:e2:5b:d4:83:f6:16:65:5e:e7:7b:9c:
e1:df:50:b1:d5:f4:c7:d7:19:ef:1d:61:70:bf:25:2c:63:3b:
79:f1:06:1a:0d:48:3b:1a:e2:f8:c6:1c:0d:88:32:58:47:8d:
9e:db:65:4e:e5:97:cf:c4:e7:f8:82:ed:27:6b:83:09:33:c7:
7f:ac:70:34:52:d0:26:82:63:1c:5b:40:85:d2:e4:af:45:c1:
ae:a3:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:51:48 2026 by rpki-client