
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json)
Hash identifier: SQzHs34jAEya3wsdixGikNR8Mq4UgpFXBD7swkKhezI=
Subject key identifier: 11:07:88:0B:92:B5:43:B8:F7:F9:D8:1A:90:BB:0C:B0:78:68:3A:14
Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
Manifest number: 0213
Signing time: Tue 29 Sep 2026 03:26:42 +0000
Manifest this update: Tue 29 Sep 2026 03:26:41 +0000
Manifest next update: Tue 06 Oct 2026 03:26:41 +0000
Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: +ueON6fJ6pAYcf6K5rR5vvWuUgcSIZIqIGg2J/5Ur/Q=)
2: A2C289B63B0E11F1ABA6C37BA3833773.roa (hash: jmWcCNtWVugfcNe6D5Skhd/Vluv6OV5nBx2KESd91tA=)
3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 03:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Validity
Not Before: Sep 29 03:26:41 2026 GMT
Not After : Oct 6 03:26:41 2026 GMT
Subject: CN=6abb2ff2-bacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:41:79:17:5f:66:c2:41:af:54:67:fa:6f:
73:86:2d:98:08:d4:54:95:9f:31:56:d4:27:0a:0a:
d1:39:92:c0:6a:40:74:9b:b9:a4:15:5c:8e:b9:c3:
62:2f:6e:f8:21:c3:07:b7:fb:03:4a:92:3b:23:ee:
ba:f0:fa:a1:b6:40:7c:a3:a5:0a:31:62:6e:31:f3:
02:5d:c4:d3:e3:a7:d8:dc:81:89:01:ff:f6:94:53:
21:bc:a8:a1:08:6a:ec:43:2c:b2:3d:a8:3f:65:3f:
f5:2b:7e:e7:3e:8d:86:94:6c:a8:71:31:50:95:59:
12:b2:95:6d:8c:c7:f3:4f:e9:01:08:df:c7:bb:b2:
67:26:84:47:87:24:7b:1a:a7:11:18:3f:29:b4:47:
0a:e7:06:17:c8:85:5e:17:0f:da:58:b7:9d:2e:18:
1e:1b:e3:0d:11:4b:e2:13:67:fe:a5:15:d1:b5:04:
ba:67:90:00:df:42:0c:84:07:97:f9:0a:e7:68:ea:
b7:86:ea:a8:f1:8c:0f:24:5d:d2:cb:48:92:24:2e:
06:85:52:6c:69:28:0f:f0:40:03:1e:b0:65:73:d1:
d6:56:3b:3f:35:3c:2a:2b:2f:ac:b6:6a:a7:c5:d1:
44:dc:e7:ab:fa:aa:95:5c:36:7f:ed:bc:ac:b3:77:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:88:0B:92:B5:43:B8:F7:F9:D8:1A:90:BB:0C:B0:78:68:3A:14
X509v3 Authority Key Identifier:
keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d9:d2:0a:59:ce:3a:9f:53:32:33:34:9f:79:73:ec:5b:f0:
3d:e3:e4:5c:3a:e0:c2:32:d1:05:ef:38:0b:00:b5:c1:2b:af:
2a:67:63:96:8e:a0:8f:f1:13:29:e2:b6:78:a6:61:68:b9:f5:
73:a5:e6:f9:69:72:bb:7b:73:b7:64:6c:0e:f8:06:08:72:88:
f8:43:cd:30:f4:41:27:e8:b5:52:f3:24:3c:f4:57:73:0f:21:
31:bf:0a:b8:a2:53:28:f4:25:83:6f:c4:1a:01:18:00:8e:e2:
55:c6:e9:cd:55:2a:8e:73:5b:f3:91:4c:80:c0:08:e2:9d:a9:
d9:a3:03:ca:ed:79:29:c1:4b:ee:0f:29:bb:a7:52:3b:fb:c3:
cd:87:2a:de:33:5b:78:a2:ae:2e:a9:f9:0f:67:e7:c1:7f:9f:
aa:5a:24:89:50:3a:85:9f:6c:8a:2f:e7:73:f9:4a:6c:6f:ac:
a0:20:9b:b1:50:12:c8:6a:22:a5:4e:f5:cb:56:b7:88:9c:40:
27:3b:00:ec:5a:a0:5c:8f:fc:c0:86:8a:4c:a7:bc:d1:45:ec:
15:56:4a:ec:48:ea:c9:a8:ed:5d:dd:8e:43:4d:d0:96:76:96:
1e:df:09:32:77:76:c0:1d:4c:b8:ba:a3:5e:74:5c:1e:b5:b5:
6f:7d:70:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:36 2026 by rpki-client