
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: oA1ndkaqsdYcdqcrVQBrYnLC6mB+ElmwwqAJ+RLsdW4=
Subject key identifier: 82:72:22:67:2A:47:6E:EA:F5:91:29:0C:AF:8E:65:64:F7:37:DA:9B
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 0303
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 02CA
Signing time: Fri 25 Sep 2026 01:22:04 +0000
Manifest this update: Fri 25 Sep 2026 01:22:03 +0000
Manifest next update: Fri 02 Oct 2026 01:22:03 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: qZfYNASIFMg5HJLAMGmMAc45oHPhHT7A6rB0fYK67zA=)
2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: nquKdBYb17f91RwkbMJz0YJOyUNBfY9B+zJHnQj7Zk8=)
3: C3481400917811ED904ACF83C4F9AE02.roa (hash: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=)
4: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg=)
5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M=)
6: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: UTHobHs4mZ75Li/c4ZWnYTJJw1N7jQT2yw1kRGz49v4=)
7: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: rX8iAImSKJ7BiKpMtoKCx7hmjEJ7mmhaIkBGctc7F3w=)
8: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: tL8r7ZwrA8G9Ow3+rgRwQ7tcji7gVdiRGZltZQ0+9g4=)
9: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: UJJEQF3bRcxEzs9FxUgqB61bTKSaDvDmCO8VGSiwpHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Sep 25 01:22:03 2026 GMT
Not After : Oct 2 01:22:03 2026 GMT
Subject: CN=6ab5ccbc-945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:f9:ef:a7:4f:1a:5e:16:92:94:ad:12:1d:
41:66:14:4e:9a:11:99:33:02:2b:83:63:1c:fe:f0:
20:20:c4:9d:44:4f:98:23:a3:62:5b:08:a5:7f:5f:
c0:eb:88:e5:93:e2:e1:2c:67:b1:6f:3c:6a:be:90:
5e:89:3f:5c:02:8a:d2:63:53:8f:b5:73:73:3b:44:
f8:0d:7b:0e:0b:9a:dc:8c:34:7c:3f:eb:7d:09:ab:
9d:8b:1d:1d:e9:59:ee:b1:9f:cc:ad:90:a8:83:7d:
a5:29:a8:e1:3c:2c:27:34:5f:79:3e:a8:67:e6:4e:
e9:b0:2b:12:eb:0e:f5:5d:db:e7:88:f6:a0:67:15:
5f:d2:b7:83:3b:c2:59:6c:53:0a:86:4c:23:fa:18:
3f:4e:78:be:4b:d5:71:80:60:02:bc:4a:ca:66:c3:
ad:72:45:8a:71:2b:ca:ba:5f:32:01:96:6f:48:b3:
07:db:6a:d0:6c:b3:c5:dc:e7:c1:7c:01:cb:d2:df:
a9:ad:fe:c6:c1:4b:2c:ba:89:17:38:33:78:b2:f2:
d8:42:4e:5f:9f:83:27:41:61:46:27:fa:34:ff:85:
84:a4:d8:2d:04:e0:35:ed:d4:79:b1:af:55:f0:14:
19:f3:2a:fc:ff:d1:d3:70:fa:8e:d8:fc:09:99:c3:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:22:67:2A:47:6E:EA:F5:91:29:0C:AF:8E:65:64:F7:37:DA:9B
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:82:49:95:9d:8e:27:56:07:26:66:d4:91:e5:30:4d:91:5f:
e4:44:9d:50:70:5c:cf:14:de:d8:51:1f:82:d9:7e:af:ac:39:
57:f9:fb:2d:c4:4b:0d:5b:a1:c4:75:47:02:14:ef:ba:68:51:
83:9e:96:db:56:60:dd:ae:ae:01:9c:3b:d2:5d:67:0d:fd:eb:
07:0c:88:d5:ff:64:c1:94:ad:05:0b:a5:24:1a:66:22:aa:54:
e3:91:6f:6a:13:99:e8:00:65:47:bb:a6:7a:db:b5:aa:90:de:
23:26:30:61:b4:5c:30:b9:52:21:b9:bf:36:09:c8:73:6c:d1:
9e:ef:83:af:d7:96:01:d5:b4:d0:23:a4:22:10:20:02:94:d4:
78:9c:a5:e5:f1:80:c4:ec:bf:10:cc:f1:77:00:9c:5e:bb:a0:
87:78:de:d5:ac:05:87:9a:17:d1:6b:b6:a8:92:9f:c7:96:a1:
6b:74:30:c9:15:61:7d:fe:ae:51:14:7d:11:ca:02:44:3e:ea:
6e:2b:32:a8:c2:6b:6f:ed:47:30:a9:8f:ca:d6:a4:00:67:db:
0e:ad:7b:42:c1:8f:e1:e1:e8:46:54:e4:29:56:f2:ea:33:c3:
39:aa:e0:eb:a6:5e:96:2c:27:99:e6:99:7c:db:7b:b4:20:a5:
81:a1:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:05:33 2026 by rpki-client