
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File: L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier: sqbGr4Ko0lABel+Fy5TOUbqiPGw+Pqk9+HL0TT+yLT4=
Subject key identifier: 09:C7:2F:2A:12:BB:46:49:87:ED:40:69:E6:8F:FC:2D:5B:C1:B1:BE
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 2625
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number: 2595
Signing time: Tue 24 Mar 2026 15:38:32 +0000
Manifest this update: Tue 24 Mar 2026 15:38:31 +0000
Manifest next update: Tue 31 Mar 2026 15:38:31 +0000
Files and hashes: 1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: cFvgeg3XRBGZGhVybrAZTHsnJ8rIWRXIu7zwNj/OSnc=)
2: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
3: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
4: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
5: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
6: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
7: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
8: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
9: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
10: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
11: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
12: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
13: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
14: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9765 (0x2625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Mar 24 15:38:31 2026 GMT
Not After : Mar 31 15:38:31 2026 GMT
Subject: CN=69c2aff8-a3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:a0:ac:22:01:8f:be:74:6a:65:1a:29:bd:
f0:47:fd:7f:24:80:26:19:d9:cd:c6:2f:94:02:ef:
75:e7:cb:10:1f:43:6b:8e:6d:34:cf:54:6d:c4:84:
97:d0:a8:67:32:5a:37:64:aa:33:70:b4:42:99:a4:
7a:1d:45:e5:aa:50:b0:0c:62:d9:8e:69:df:ab:ea:
f4:03:07:0f:49:14:9d:8f:4d:81:90:88:03:09:e3:
5b:91:17:ac:20:88:14:dc:d6:43:34:f7:bc:7d:00:
2d:51:48:09:e6:14:a2:40:86:c1:43:25:bd:c6:7f:
78:60:48:3b:ed:d0:05:2d:86:49:9c:23:ff:4c:7a:
ce:77:ab:04:ed:07:3e:0c:31:97:27:c7:cf:da:a0:
ef:d1:d1:5f:6c:2f:5d:fe:cd:6e:71:c3:7b:7f:9e:
8a:26:4c:4b:ec:44:e5:ea:24:75:14:1a:37:d1:7e:
8c:69:d2:e0:72:08:ea:4f:18:58:3d:40:5e:90:ce:
7c:71:09:3d:39:58:87:f4:9e:75:02:f2:d7:40:9b:
e0:ad:43:94:c1:16:fb:7a:b4:ba:4a:5b:b7:21:7f:
bd:3e:48:3c:18:fc:dd:8f:98:46:bd:e5:b0:ef:dd:
09:db:51:d1:67:47:3b:80:9f:6e:d5:dc:64:4d:00:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C7:2F:2A:12:BB:46:49:87:ED:40:69:E6:8F:FC:2D:5B:C1:B1:BE
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:47:31:1c:c2:5b:e4:b0:09:5f:d0:ff:2b:b1:3c:c3:0a:d5:
53:54:bf:f8:cd:55:7b:e9:e0:60:b4:3f:c7:43:9c:01:49:f8:
43:99:c6:a8:c5:b7:59:e3:b2:15:81:dd:af:ec:1b:8b:d3:ab:
14:4a:d1:c0:ba:1c:4e:48:b0:94:64:86:70:42:22:40:81:95:
19:eb:0b:85:0e:bf:ed:70:ba:e1:4c:96:e7:c2:bb:e6:03:90:
5c:ef:bc:bc:b2:72:0b:0c:fd:3c:e9:d4:56:fc:75:14:f5:36:
41:15:a1:7b:2b:a5:8e:e3:8f:c1:c1:73:d0:54:95:b8:bb:de:
fd:d1:11:b9:a2:72:f3:2c:3b:35:be:6a:41:01:52:71:56:4a:
55:fa:30:1c:8a:51:30:c4:90:a2:77:71:6d:e9:0c:63:4d:72:
ab:ea:fe:97:1c:4e:c0:52:33:14:18:b8:44:2b:96:22:95:15:
6d:9f:6f:1e:de:9c:56:33:60:db:ee:b8:8d:8c:ea:c5:11:ec:
a3:7c:86:0f:6a:80:13:e0:5c:20:58:6b:dc:ef:c2:a1:b5:3e:
96:86:af:28:4e:70:f8:03:d5:28:98:ad:23:88:ed:e1:56:bc:
b1:4a:ce:0c:d4:24:7f:ab:54:67:d3:b8:dd:7a:ec:40:c1:45:
e9:61:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:51:27 2026 by rpki-client