
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json)
Hash identifier: 27LoQPtEyokOZulBd+4V7hZrbkFgQI5XvesYemcoInc=
Subject key identifier: 89:12:79:C6:A8:55:9B:F2:F3:10:55:48:03:58:BC:84:26:B7:B5:A1
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial: 0CA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
Manifest number: 0C79
Signing time: Wed 22 Jul 2026 18:57:23 +0000
Manifest this update: Wed 22 Jul 2026 18:57:22 +0000
Manifest next update: Wed 29 Jul 2026 18:57:22 +0000
Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: z3DpioUmimSw1aFyzUHm1Scuov8lL54Shw6FXO39aS4=)
2: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 2kn/q1hOME//Yhn7qkH4G8jggbyrCgjoL4hoHZXGsZM=)
3: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: ouH4abzFqla8RyorGFEh8tsKVYnL5dBI2TdSDocSzXI=)
4: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: yzY+pKYkZw0uNGaXwIqrPcHyCwkxCWHWqVxFG+uHRA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Validity
Not Before: Jul 22 18:57:22 2026 GMT
Not After : Jul 29 18:57:22 2026 GMT
Subject: CN=6a611293-2536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:88:34:c5:c0:55:8d:aa:be:5e:c4:34:e8:45:
12:36:40:61:2a:78:b2:41:5c:af:55:2d:6d:e1:72:
65:62:85:32:05:93:2b:1e:68:ca:43:fb:9c:48:c3:
39:b7:b9:a0:fc:ed:bd:00:bf:2e:7a:9c:cc:56:73:
05:9b:0d:5e:2c:5f:88:4c:27:0c:90:a8:9b:c0:f6:
eb:65:11:85:6c:4d:c8:74:bb:0b:4e:fc:93:05:4e:
ce:8a:e8:fa:c4:7e:1a:bc:a8:f8:f2:5c:e5:dc:71:
05:76:ae:07:4d:54:80:ff:8f:ef:80:ac:62:a0:e0:
9a:80:06:70:c7:7a:ed:3f:53:28:af:d9:3f:74:16:
6a:0e:18:aa:81:b1:40:00:c9:6e:57:ee:6a:af:56:
13:0c:4d:0f:35:5e:d4:56:ee:e8:8b:8b:4a:48:16:
aa:02:ea:98:ac:6e:39:2e:c4:d7:08:a2:4b:b4:17:
50:40:a7:4a:2b:b3:2a:2e:80:3a:c6:bd:f1:b6:67:
79:81:06:de:7f:09:90:24:67:88:e8:01:44:71:45:
ee:48:20:4f:7c:65:5a:4f:db:91:c6:3c:47:51:75:
cb:11:3f:1a:08:74:0d:de:75:d8:11:32:29:d3:2f:
66:e5:cf:1f:49:a7:c2:96:e4:a5:50:b7:0a:36:19:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:12:79:C6:A8:55:9B:F2:F3:10:55:48:03:58:BC:84:26:B7:B5:A1
X509v3 Authority Key Identifier:
keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:7c:5f:a7:80:a4:0a:29:e1:01:c8:59:1d:1e:56:ca:da:73:
60:85:46:ad:a1:b4:75:c6:26:db:54:be:bb:aa:3e:81:d0:e2:
a3:bd:9d:5b:71:9a:2a:19:74:8d:fd:41:18:c0:3d:e9:c7:19:
79:db:c4:08:ef:4c:0e:37:b2:20:78:1f:c8:f3:ca:29:cf:38:
b9:f6:b7:2a:0a:e9:71:4c:96:4d:25:dd:c5:53:af:d6:43:5e:
80:06:0f:e6:c0:44:f0:85:07:55:3c:a9:1d:70:e6:3e:16:66:
d4:1d:23:d8:45:89:a9:87:bc:2e:99:1d:4e:00:14:ed:be:0d:
cc:fc:9f:3c:04:d0:6f:a4:23:bf:9c:d0:af:cd:63:b0:97:ed:
04:05:2e:3c:18:6a:34:80:2b:08:53:37:94:65:2c:e8:ac:8d:
72:c1:72:60:f2:f2:ed:9c:22:86:71:2d:ab:ac:76:0a:78:e6:
4f:7c:a2:f3:8f:9e:3c:0f:c9:0c:9e:c6:c9:58:7f:09:57:ec:
cf:ca:37:e8:9f:07:da:ed:b6:83:66:e7:58:e7:1c:db:36:e8:
4f:da:a8:fd:ef:6f:6f:1f:29:53:77:e7:95:e4:d5:4b:72:d7:
6f:21:d3:04:7d:ab:36:a0:97:a6:28:a0:6c:8b:f4:9f:c8:6c:
e3:e2:d3:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG
RTNERjk3RkIwHhcNMjYwNzIyMTg1NzIyWhcNMjYwNzI5MTg1NzIyWjAYMRYwFAYD
VQQDEw02YTYxMTI5My0yNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Ig0xcBVjaq+XsQ06EUSNkBhKniyQVyvVS1t4XJlYoUyBZMrHmjKQ/ucSMM5
t7mg/O29AL8uepzMVnMFmw1eLF+ITCcMkKibwPbrZRGFbE3IdLsLTvyTBU7Oiuj6
xH4avKj48lzl3HEFdq4HTVSA/4/vgKxioOCagAZwx3rtP1Mor9k/dBZqDhiqgbFA
AMluV+5qr1YTDE0PNV7UVu7oi4tKSBaqAuqYrG45LsTXCKJLtBdQQKdKK7MqLoA6
xr3xtmd5gQbefwmQJGeI6AFEcUXuSCBPfGVaT9uRxjxHUXXLET8aCHQN3nXYETIp
0y9m5c8fSafCluSlULcKNhnB2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkSecao
VZvy8xBVSANYvIQmt7WhMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1
QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk
X3Q2c1RCZENrU2ItUGZsX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAHxfp4CkCinhAchZHR5WytpzYIVGraG0dcYm21S+u6o+gdDio72dW3GaKhl0
jf1BGMA96ccZedvECO9MDjeyIHgfyPPKKc84ufa3KgrpcUyWTSXdxVOv1kNegAYP
5sBE8IUHVTypHXDmPhZm1B0j2EWJqYe8LpkdTgAU7b4NzPyfPATQb6Qjv5zQr81j
sJftBAUuPBhqNIArCFM3lGUs6KyNcsFyYPLy7ZwihnEtq6x2CnjmT3yi84+ePA/J
DJ7GyVh/CVfsz8o36J8H2u22g2bnWOcc2zboT9qo/e9vbx8pU3fnleTVS3LXbyHT
BH2rNqCXpiigbIv0n8hs4+LTZg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:17 2026 by rpki-client