
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json)
Hash identifier: +zRjH7sYaoois12DZr0qCqzAOEhy7WTrRbg8Sm2dP1Y=
Subject key identifier: 05:A4:B0:82:E3:62:1E:8A:65:25:70:76:DE:29:EA:23:B8:91:95:8D
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 054B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
Manifest number: 050B
Signing time: Tue 22 Sep 2026 23:18:41 +0000
Manifest this update: Tue 22 Sep 2026 23:18:41 +0000
Manifest next update: Tue 29 Sep 2026 23:18:41 +0000
Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: kf2HGTr1/zY2SFqxEnfJcbPVGhIU8il8MihoFode3Ig=)
2: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=)
3: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=)
4: 2D6288A4AE0611F1BEA6785E4B11F970.roa (hash: XFW6SnFPAV4WXehvZc70rBV7iQTFvf7ToBkJjvUsDGg=)
5: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=)
6: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=)
7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=)
8: ABDFBE34A75A11F1AF10EB3B3411F970.roa (hash: lcUds1gRLf7ptoRIc8Q0v3/2oJ+IL+a0fqYf/i4R1v8=)
9: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Sep 22 23:18:41 2026 GMT
Not After : Sep 29 23:18:41 2026 GMT
Subject: CN=6ab30cd1-b56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:fb:35:a6:e3:a4:02:c9:e4:cd:2c:5f:98:
22:62:0a:96:bd:b3:05:91:73:5f:70:c0:d9:e0:ce:
ea:4f:68:6e:df:1c:83:98:4e:54:85:c9:5f:b9:cf:
9c:81:da:5f:57:e3:31:6c:3c:f2:7e:6d:1e:b8:e9:
58:99:1e:9f:0e:90:5f:ce:22:79:f6:6c:d2:f1:33:
a6:75:f9:b0:0a:c1:3d:0c:5a:4c:47:ba:8e:6d:2c:
9c:3c:34:21:93:d3:bd:f6:b6:4d:9e:06:35:84:fc:
47:0a:43:ee:65:b1:8f:f2:26:22:a8:6c:ed:98:a6:
fa:d4:5d:55:d0:8c:b1:56:e8:2b:f7:54:c6:91:eb:
48:f5:66:6b:3b:7b:b5:dd:85:a0:0c:8f:f8:79:1a:
99:f9:f7:6e:1d:34:46:17:1f:f0:ca:6d:9d:6e:ef:
41:c2:da:8a:72:cd:8d:95:00:ff:b5:7f:c7:11:dc:
e1:fb:31:c1:eb:5c:bb:60:3e:05:d3:d7:73:a0:04:
bb:c1:b9:4a:9d:f3:7d:15:6d:89:50:12:7c:ef:84:
53:d0:d8:50:67:79:f5:b3:a6:ce:14:72:15:66:48:
a6:2d:f9:02:95:7e:ef:48:71:db:3f:74:cd:8c:5e:
ce:ef:21:e7:b9:18:75:13:1c:93:e3:2a:43:7c:be:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:B0:82:E3:62:1E:8A:65:25:70:76:DE:29:EA:23:B8:91:95:8D
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2a:fb:ca:61:e1:5d:95:fd:44:85:b8:11:91:85:b1:2d:e2:
8b:2b:75:0d:d9:7c:4c:c7:1e:ab:02:26:6f:5a:44:2e:74:9e:
16:d7:69:61:ed:a4:22:60:da:82:1c:ec:97:d4:fc:e2:dd:f1:
56:0f:03:28:cf:b7:86:43:c6:08:3b:7e:42:7c:d0:34:ad:0d:
66:5d:a1:5b:6c:32:50:d2:94:a2:52:59:2d:20:8d:a8:88:06:
a7:2f:2d:0c:2c:7e:da:b4:73:46:88:7d:d1:07:6b:56:db:f4:
03:b3:b6:02:8b:8a:e8:46:23:a9:92:c4:da:a4:68:0b:fa:ed:
85:fe:82:11:66:73:98:2c:ee:24:53:bc:53:c5:da:30:e6:22:
b3:da:da:b0:5a:4d:f6:40:67:fe:e6:41:44:e0:71:b7:08:dd:
19:46:fe:cb:0c:42:31:f4:27:30:dc:77:40:3b:59:fc:5b:eb:
1f:4f:05:b7:76:69:79:8c:31:d3:de:53:8d:c0:4b:6d:fb:8a:
7d:f4:0e:ad:e7:67:89:37:00:c4:1b:79:48:e7:a4:6c:d3:ae:
20:cf:42:7c:1d:04:c8:5b:ee:df:08:cd:8e:f0:4d:da:81:ee:
5d:6f:c6:0a:1c:9a:9a:3d:ca:fc:a1:27:e0:ad:00:62:ac:aa:
94:0d:78:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2
NERBNTBCMkEwHhcNMjYwOTIyMjMxODQxWhcNMjYwOTI5MjMxODQxWjAYMRYwFAYD
VQQDEw02YWIzMGNkMS1iNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwqr7NabjpALJ5M0sX5giYgqWvbMFkXNfcMDZ4M7qT2hu3xyDmE5Uhclfuc+c
gdpfV+MxbDzyfm0euOlYmR6fDpBfziJ59mzS8TOmdfmwCsE9DFpMR7qObSycPDQh
k9O99rZNngY1hPxHCkPuZbGP8iYiqGztmKb61F1V0IyxVugr91TGketI9WZrO3u1
3YWgDI/4eRqZ+fduHTRGFx/wym2dbu9BwtqKcs2NlQD/tX/HEdzh+zHB61y7YD4F
09dzoAS7wblKnfN9FW2JUBJ874RT0NhQZ3n1s6bOFHIVZkimLfkClX7vSHHbP3TN
jF7O7yHnuRh1ExyT4ypDfL6lgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWksILj
Yh6KZSVwdt4p6iO4kZWNMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx
MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB
amY3dFJfRkVmalJrMmxDeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzSr7ymHhXZX9RIW4EZGFsS3iiyt1Ddl8TMceqwImb1pELnSeFtdpYe2kImDa
ghzsl9T84t3xVg8DKM+3hkPGCDt+QnzQNK0NZl2hW2wyUNKUolJZLSCNqIgGpy8t
DCx+2rRzRoh90QdrVtv0A7O2AouK6EYjqZLE2qRoC/rthf6CEWZzmCzuJFO8U8Xa
MOYis9rasFpN9kBn/uZBROBxtwjdGUb+ywxCMfQnMNx3QDtZ/FvrH08Ft3ZpeYwx
095TjcBLbfuKffQOredniTcAxBt5SOekbNOuIM9CfB0EyFvu3wjNjvBN2oHuXW/G
Chyamj3K/KEn4K0AYqyqlA14pg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:06:41 2026 by rpki-client