
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json)
Hash identifier: fldLKg7SbaVe+lAx8RQmGTF2B9m37oMNTSrxkUoKLRc=
Subject key identifier: 69:50:9D:65:A7:77:48:D2:F9:2F:7B:D8:0C:0A:7C:BD:9C:38:C5:6F
Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Certificate serial: 0886
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
Manifest number: 087A
Signing time: Thu 24 Sep 2026 20:47:08 +0000
Manifest this update: Thu 24 Sep 2026 20:47:08 +0000
Manifest next update: Thu 01 Oct 2026 20:47:08 +0000
Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: VjRijRTtFoMkMcUl8knTUk9hUoGAycwMhc/FOA74fQk=)
2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: yum8wC57OlDbLTsoFYFFmg3G0eHaYFBCQhxgQarxJdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Validity
Not Before: Sep 24 20:47:08 2026 GMT
Not After : Oct 1 20:47:08 2026 GMT
Subject: CN=6ab58c4c-30ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:81:86:44:89:eb:1a:b8:43:3a:26:aa:de:
24:c6:c4:e8:b3:bc:24:af:d8:c1:ca:82:32:d8:88:
87:6c:4c:6e:2f:aa:5d:fc:45:07:36:53:be:19:01:
cb:d3:76:52:63:32:05:f3:a0:5e:28:df:41:c7:08:
44:f7:66:1a:c8:ce:dd:d6:12:ce:52:74:1a:a3:d8:
d6:47:b6:da:bc:17:03:56:b5:1d:f8:5c:3a:80:17:
e8:f3:3c:dd:7e:d2:d8:9e:49:cc:29:61:f4:e1:6e:
ae:de:61:f9:92:f6:ce:29:fc:fc:ea:67:f0:5d:05:
3d:77:38:8f:cd:90:e2:a0:91:85:b9:11:aa:4f:72:
f6:f2:89:2d:cc:cd:0b:40:d0:20:61:bf:a4:7e:c7:
33:fb:84:bf:3a:d0:ea:5e:02:c0:82:55:25:bf:55:
78:0f:a8:a7:11:8e:0b:aa:83:68:4d:eb:c4:ff:c1:
ad:62:c7:2b:63:32:28:83:0d:c8:fa:4d:50:ae:e9:
ad:59:c1:10:e7:cf:a4:cc:c2:e1:e8:48:72:aa:c8:
a5:99:ac:ce:7b:50:84:e8:aa:f7:f2:af:4a:82:73:
d6:df:c7:b4:3b:f9:3e:f7:6e:7b:b3:32:68:2b:b6:
e7:65:9e:04:d4:05:9b:83:80:d3:55:14:a7:6b:55:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:50:9D:65:A7:77:48:D2:F9:2F:7B:D8:0C:0A:7C:BD:9C:38:C5:6F
X509v3 Authority Key Identifier:
keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:0c:f4:54:6e:32:82:b9:fa:c3:19:26:01:77:a8:c9:fa:50:
3d:8f:e7:5c:f1:0c:46:c3:b9:d5:ae:0f:7a:55:39:11:f6:82:
af:00:bb:92:4a:48:5e:a2:fb:a7:77:d7:76:82:c8:71:c2:95:
c0:09:fa:c9:c5:ab:94:3c:2f:a3:ed:84:46:91:3c:b2:f4:23:
fc:53:a7:85:67:1c:ef:01:82:e1:17:64:f7:9f:34:b0:14:19:
d7:4c:a9:47:17:65:43:f7:e1:04:b7:67:a3:24:96:72:b3:e7:
02:57:7e:7b:e2:4f:56:c5:c3:b2:e4:0b:4e:8d:62:2f:b2:a7:
aa:64:06:49:eb:43:4b:e9:c1:03:03:79:db:26:77:da:2c:81:
07:eb:44:32:35:b0:35:3b:63:7a:9c:82:26:5e:99:84:4e:84:
73:ed:9e:98:5c:a3:92:05:4c:44:30:15:ed:8f:95:47:db:c4:
8f:d2:78:f9:ed:d9:ea:ae:0a:8c:5e:ee:62:b6:4c:39:88:01:
1f:5c:9b:77:50:ed:53:1e:6f:d9:83:02:66:46:a0:77:aa:23:
b0:65:cc:b4:e0:b9:6d:33:c3:a3:ca:7d:c1:bb:ba:fc:5b:14:
a3:cb:50:fa:39:54:d7:fb:86:53:42:d9:fd:c2:e0:3a:37:1a:
43:1b:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:36:57 2026 by rpki-client