
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
File: LlZ8tNZla-4M-dworw3nIVt_Z-g.mft (raw, json)
Hash identifier: pYSyCHKqnyKrZ4kO93QZxEMln70x36lGdImCqaqUTHw=
Subject key identifier: 4D:6B:5F:C2:BD:68:73:98:06:D4:E6:AD:27:FB:09:E2:1B:85:4F:6C
Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
Certificate issuer: /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
Manifest number: 81
Signing time: Fri 09 Oct 2026 08:28:16 +0000
Manifest this update: Fri 09 Oct 2026 08:28:16 +0000
Manifest next update: Fri 16 Oct 2026 08:28:16 +0000
Files and hashes: 1: LlZ8tNZla-4M-dworw3nIVt_Z-g.crl (hash: dFb0pb7bJQ7L7f7MHHo5tM6WyiTggzDn8qFxoe6xp/c=)
2: F7C02BF6885911F1B22A50DC5811F970.roa (hash: /wR6FGdhOPqF6g3hYPb/kar7/EqNQG1KP1NPSwyZHb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl
rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
Validity
Not Before: Oct 9 08:28:16 2026 GMT
Not After : Oct 16 08:28:16 2026 GMT
Subject: CN=6ac8a5a0-2f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:0b:14:09:55:6a:5c:83:bc:ca:fe:bd:4d:
ce:95:0c:91:16:91:97:55:82:b0:4d:82:53:9a:bd:
78:49:bc:3a:76:b0:33:84:05:f9:f9:98:c7:fc:65:
62:90:1e:eb:66:a9:da:aa:87:09:19:7b:72:2e:5d:
33:ae:8f:b0:f0:11:6a:8a:c0:3b:8b:ce:bc:ff:0e:
4e:da:9e:3c:2d:52:c1:a7:2a:79:d6:6a:25:f4:7d:
dc:fd:46:84:0e:c1:55:ae:09:ba:c4:2d:05:ae:9e:
e0:ba:b0:d8:5e:69:16:1f:f6:99:d3:fa:ed:2a:4e:
a8:96:82:c9:2b:37:f5:24:9f:9b:38:fc:15:83:1d:
82:c8:bc:af:3b:08:be:e6:2a:31:6b:56:ae:72:3a:
e6:15:26:40:05:8c:ae:6c:d9:21:d3:d1:a2:60:46:
95:78:df:1d:3e:29:40:53:33:d8:d5:e1:a4:f3:19:
1b:63:04:de:68:7e:57:fe:e0:bf:d5:7f:63:06:97:
a5:4f:f1:f4:a6:41:a7:5c:d7:04:a9:48:07:90:79:
95:d7:8b:15:7b:b0:57:9e:51:4b:7d:d1:37:4a:1a:
56:68:70:52:6c:99:03:df:3b:4b:1a:74:b8:91:db:
3b:ae:9c:a2:1e:fc:d6:d5:44:4f:c2:e5:f0:13:1a:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:5F:C2:BD:68:73:98:06:D4:E6:AD:27:FB:09:E2:1B:85:4F:6C
X509v3 Authority Key Identifier:
keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:08:db:e6:4a:1d:e4:b4:91:ee:e8:4c:43:51:01:1d:9d:71:
d6:95:7a:b2:17:32:54:62:01:0a:54:f7:12:2b:8f:1e:19:d1:
1f:e1:3c:36:2b:0b:aa:85:29:26:38:cd:62:f8:29:ac:eb:5f:
50:69:62:b1:5d:71:18:56:f6:ab:ce:56:42:25:c0:54:4b:4a:
15:26:50:be:25:32:30:43:4f:b4:3e:f5:17:3b:5d:b4:a6:fa:
70:e0:3d:99:1a:85:fb:ba:a8:ba:10:9a:a6:ac:f7:f0:3b:c9:
fa:4f:27:c2:af:ac:c5:b8:b2:0a:90:33:fc:ea:fd:39:94:a8:
21:2d:47:e2:54:55:5c:9f:0c:31:a0:da:76:f4:6c:eb:08:e1:
1f:c7:ff:20:b8:9c:5e:4f:17:5d:89:1d:d9:44:0f:00:1f:5e:
62:a4:28:f0:6c:be:ef:96:fb:88:f9:e7:1f:70:f3:d0:73:3b:
db:c7:e6:cb:11:cc:6d:d7:7c:87:57:ce:0a:c7:2c:09:ff:a4:
f7:c3:d7:c6:e7:3e:95:46:53:e3:5a:6c:f8:0a:3b:7f:23:81:
19:8f:97:f3:6e:f1:3d:53:98:d6:be:7d:ea:76:dc:c3:e8:df:
29:16:2b:4d:e2:8f:49:8a:d2:95:d6:cb:0f:cf:4d:4b:7e:4e:
b5:79:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:26:27 2026 by rpki-client