
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json)
Hash identifier: fKMclv6o4+84Ku6sgvO8QCy7+9uyKhTL70jSSpGAbuU=
Subject key identifier: F2:C4:A0:C3:19:AE:35:AD:4B:A1:66:11:70:29:32:49:2B:93:21:E0
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial: 0665
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
Manifest number: 063D
Signing time: Sun 20 Sep 2026 22:38:58 +0000
Manifest this update: Sun 20 Sep 2026 22:38:58 +0000
Manifest next update: Sun 27 Sep 2026 22:38:58 +0000
Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: WqyYjr2hhH5qEubFcawXNDQSabDcMrQLBIAgisyMERM=)
2: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: duFnEGiuT26TMk2ZSfK1MgR6+5z5a4gsXx+ILFt0PxU=)
3: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: u8F36rbb3MJiWZT69qWiPFv6z90jcQZPFE5OZpQvAOc=)
4: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: w+XVJvyQqIrmXBsUmFsNFlbtg+AluDO/hxGeKDlbC/I=)
5: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: mVZ3jUqq7v+mPV7fPjGzfalsiJzHL52IjarkxH7YoEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Validity
Not Before: Sep 20 22:38:58 2026 GMT
Not After : Sep 27 22:38:58 2026 GMT
Subject: CN=6ab06082-c7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:85:fe:75:05:d0:b1:6e:e9:ff:65:a5:2a:
60:24:21:c5:7f:33:25:1d:24:52:60:c2:06:78:29:
ca:37:78:7f:ea:0e:2b:fe:52:29:b7:dd:ad:2e:d8:
46:dd:74:f7:47:7c:a5:b2:1c:3b:68:c0:aa:25:d0:
9a:a3:55:a3:d7:67:a4:28:3e:78:9e:03:6f:dc:1c:
7f:3b:74:94:26:4a:9a:0d:eb:30:18:6a:56:4d:ff:
5a:37:58:af:6b:86:6e:1b:9b:6b:fd:37:c7:c7:bb:
08:a4:dc:23:6a:b1:3c:79:43:1d:5f:c2:f7:c1:e2:
0f:eb:1a:63:bb:78:47:51:81:07:f7:ab:e6:5f:e7:
63:67:a8:15:f6:bd:2f:91:82:35:1a:dc:85:ab:63:
72:d7:13:b7:e8:fe:7a:4d:e4:f0:5f:1e:6b:1c:4b:
f3:96:db:d7:47:ce:81:ff:fa:3d:4a:20:50:54:11:
99:60:f4:83:f1:67:f3:08:6d:5b:e3:69:cb:ff:f1:
b2:34:c3:b6:6b:b8:1b:1a:3b:c4:5a:c1:e5:17:15:
db:46:98:bf:52:d0:bf:21:a7:09:d0:0d:48:0f:ec:
be:ff:40:1d:99:e2:7e:6f:63:d4:36:e0:c2:0c:fd:
08:cf:a1:b6:cf:1c:41:c0:6b:f0:66:da:0c:45:58:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C4:A0:C3:19:AE:35:AD:4B:A1:66:11:70:29:32:49:2B:93:21:E0
X509v3 Authority Key Identifier:
keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:b1:07:19:50:13:90:b8:47:40:47:89:c1:cb:5e:2a:c8:73:
30:11:59:0a:0f:34:29:6d:44:20:59:3a:fa:62:c6:c0:c5:94:
5e:13:9e:09:14:f9:24:b6:99:66:de:4f:1b:78:c9:a5:4c:d0:
c8:4a:7a:18:4d:a4:43:1c:71:28:4c:18:0a:93:e3:8b:ed:a0:
b7:f3:48:45:1a:b5:f5:52:21:0d:c6:24:3c:a2:02:ce:27:ef:
a2:c3:1c:d1:fb:d1:ce:e4:bc:61:9c:1e:ca:31:68:f1:46:bd:
d5:2b:cd:17:86:ef:6e:2a:dd:78:61:be:88:6c:c7:6b:3d:32:
4d:ed:bb:29:16:76:35:2f:0f:9e:4e:4c:3e:61:bf:56:4f:dd:
5a:fd:4b:a6:a9:bc:ce:ec:81:ae:1b:2b:97:f9:49:34:6d:18:
1e:ac:45:a8:5d:4c:6e:43:b1:87:d6:29:ba:3d:74:46:d4:e0:
35:42:c1:a9:cb:1a:b9:fa:7a:f6:6f:7a:ac:f1:3a:7b:d2:bb:
ed:3b:ce:9b:82:80:c7:bb:a6:52:18:19:58:08:6f:12:eb:6a:
30:c5:90:56:36:19:74:0d:6f:bb:3f:42:fc:87:b8:df:e3:32:
00:ef:87:81:68:84:ae:c5:8e:87:ae:0f:b1:58:e9:6b:d2:5a:
84:90:72:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE
MkQ2OTdFQjYwHhcNMjYwOTIwMjIzODU4WhcNMjYwOTI3MjIzODU4WjAYMRYwFAYD
VQQDEw02YWIwNjA4Mi1jN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LKF/nUF0LFu6f9lpSpgJCHFfzMlHSRSYMIGeCnKN3h/6g4r/lIpt92tLthG
3XT3R3ylshw7aMCqJdCao1Wj12ekKD54ngNv3Bx/O3SUJkqaDeswGGpWTf9aN1iv
a4ZuG5tr/TfHx7sIpNwjarE8eUMdX8L3weIP6xpju3hHUYEH96vmX+djZ6gV9r0v
kYI1GtyFq2Ny1xO36P56TeTwXx5rHEvzltvXR86B//o9SiBQVBGZYPSD8WfzCG1b
42nL//GyNMO2a7gbGjvEWsHlFxXbRpi/UtC/IacJ0A1ID+y+/0AdmeJ+b2PUNuDC
DP0Iz6G2zxxBwGvwZtoMRVh2RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLEoMMZ
rjWtS6FmEXApMkkrkyHgMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx
Z0hkckhRNG5YU19TMXBmclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQbEHGVATkLhHQEeJwcteKshzMBFZCg80KW1EIFk6+mLGwMWUXhOeCRT5JLaZ
Zt5PG3jJpUzQyEp6GE2kQxxxKEwYCpPji+2gt/NIRRq19VIhDcYkPKICzifvosMc
0fvRzuS8YZweyjFo8Ua91SvNF4bvbirdeGG+iGzHaz0yTe27KRZ2NS8Pnk5MPmG/
Vk/dWv1Lpqm8zuyBrhsrl/lJNG0YHqxFqF1MbkOxh9Ypuj10RtTgNULBqcsaufp6
9m96rPE6e9K77TvOm4KAx7umUhgZWAhvEutqMMWQVjYZdA1vuz9C/Ie43+MyAO+H
gWiErsWOh64PsVjpa9JahJByjw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:40:56 2026 by rpki-client