
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: rD5rk1pouROpaB/uTKaGw6vWCmPGTkQ1yqcIa+14Bvo=
Subject key identifier: CE:6E:DB:26:13:A1:43:D8:B4:8F:56:E3:13:D3:84:2E:52:83:96:F7
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 026E
Signing time: Fri 27 Mar 2026 01:40:49 +0000
Manifest this update: Fri 27 Mar 2026 01:40:49 +0000
Manifest next update: Fri 03 Apr 2026 01:40:49 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: OhgArXjZayJox3TKTARfu+CIEz65qHjdyo4gmdEvfFU=)
2: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: UJJEQF3bRcxEzs9FxUgqB61bTKSaDvDmCO8VGSiwpHY=)
3: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg=)
4: C3481400917811ED904ACF83C4F9AE02.roa (hash: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=)
5: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: UTHobHs4mZ75Li/c4ZWnYTJJw1N7jQT2yw1kRGz49v4=)
6: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: rX8iAImSKJ7BiKpMtoKCx7hmjEJ7mmhaIkBGctc7F3w=)
7: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=)
8: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: nquKdBYb17f91RwkbMJz0YJOyUNBfY9B+zJHnQj7Zk8=)
9: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Mar 27 01:40:49 2026 GMT
Not After : Apr 3 01:40:49 2026 GMT
Subject: CN=69c5e021-e236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:91:23:d2:66:c7:67:e1:15:0f:5f:0e:1f:
6f:0c:70:58:10:ba:69:e0:7d:05:f2:1c:e1:6e:4e:
ae:11:a2:c6:00:e2:eb:13:ff:98:f9:c8:b3:f7:80:
b3:dc:54:84:2e:5b:9c:6c:4e:31:6e:ac:39:38:8b:
02:c9:2c:bd:ff:e6:a0:e7:16:9b:d1:a5:ea:9a:30:
86:c1:80:bf:21:55:af:9c:2a:67:b2:1b:2b:e1:a4:
78:ab:7b:22:50:91:7d:eb:8e:1c:5c:58:3e:6d:b4:
e4:22:bb:d4:0b:23:68:e2:e9:c8:cb:2a:ad:79:da:
48:f3:36:0d:0d:ea:7d:25:da:4a:c3:b0:9e:83:97:
d5:47:44:fa:65:a2:cf:ab:89:4e:44:f0:2a:e1:c0:
3b:9d:72:22:f0:59:4a:d0:92:39:4b:7a:d2:99:25:
94:ac:fb:2c:e5:19:3f:33:fe:72:9b:09:cf:6d:33:
52:7f:57:a2:f8:20:70:62:40:6b:cf:ea:75:21:75:
8f:ba:ad:92:15:0a:58:e1:1e:2c:40:f1:4e:27:c6:
fb:7b:53:7c:24:c3:f4:50:fb:e8:fc:f8:83:61:92:
8c:ac:cb:bc:4e:c4:03:5c:f0:54:1e:40:08:cc:2b:
46:8f:ee:99:59:85:cc:b3:2b:c1:0a:22:00:4b:36:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:DB:26:13:A1:43:D8:B4:8F:56:E3:13:D3:84:2E:52:83:96:F7
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:12:7d:dd:47:18:73:63:f0:34:41:f6:7c:f2:00:99:dc:5f:
bf:62:64:22:8b:8e:37:43:60:ba:2c:c3:57:b1:87:26:d3:89:
31:3f:da:22:23:9c:71:39:81:68:f9:f9:55:36:6f:c2:5e:1e:
f8:80:8e:30:c9:b6:ea:c3:b5:d7:be:9d:ae:e4:72:5a:a9:30:
5f:0a:20:ac:ca:ab:ec:54:60:00:d7:a7:0e:82:ee:11:d4:d7:
40:d9:b9:43:ee:6d:69:45:39:34:04:11:2a:b8:07:da:49:fc:
9c:8a:68:f5:2a:86:7f:6d:d6:e5:17:43:02:4e:4f:83:48:68:
bf:07:f0:56:20:8f:d9:b1:4d:19:36:e4:84:64:75:3d:4d:87:
3b:08:e9:9e:d7:35:94:14:52:66:51:06:dd:1e:28:22:5b:b7:
0d:5c:18:12:59:7c:5a:26:db:e8:b8:47:b0:42:38:da:6a:1b:
92:f8:04:20:e8:cf:66:32:b4:77:a2:ec:c4:d2:ff:7a:08:eb:
b4:43:42:ad:88:06:93:0c:b6:a0:ef:70:e3:fb:f6:f5:50:47:
05:42:9a:07:1f:66:bb:c3:b5:f8:c1:11:e0:c2:7a:3f:23:5c:
6c:15:e5:03:54:73:43:33:12:8d:38:96:6b:ed:0e:36:5e:ed:
09:96:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:28 2026 by rpki-client