
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json)
Hash identifier: tT7bz0Ng2Qz0slnXr1LAgwdkoh0oQpzVobqcW4qDpuo=
Subject key identifier: 59:7F:20:A4:30:3C:61:40:25:7D:37:92:90:DC:18:E8:29:07:C7:78
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial: 0399
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
Manifest number: 0365
Signing time: Wed 13 May 2026 01:06:30 +0000
Manifest this update: Wed 13 May 2026 01:06:29 +0000
Manifest next update: Wed 20 May 2026 01:06:29 +0000
Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: flbl0WiwSUTJBOyr9IdvRpTWOXkqGlv9+uadqAN20dY=)
2: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: FYMzyNcEn5qwGYhJASILxE4oZoESG/51dhB+oC1Em0M=)
3: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: /voKyazUys3+SCuvprRad6peYAmU9/zZXHb+lbxgXpY=)
4: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: S96e2L/6aXmXiFJ00QZgjPrWRuJuyQ7qqjj+2N0NuLQ=)
5: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: SiY7LuS+ZlIJQnelc/yqPh4vr6EgWEyfHgpapGWLzMQ=)
6: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: WEjLCi1DlMb0pJbL9Z4xrjtw1122zr6GBemO2jaZ1hw=)
7: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: kqpliSLk4gpJx/EOT2g+xNj5gqC5mlAWqnW//7mPB5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Validity
Not Before: May 13 01:06:29 2026 GMT
Not After : May 20 01:06:29 2026 GMT
Subject: CN=6a03ce95-8d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:ef:4a:55:fc:79:fd:2e:78:65:a6:c5:80:
c0:70:01:b5:45:12:14:0b:70:7f:b2:ad:cf:ea:ce:
8d:3f:1c:df:1b:0d:c5:07:a7:7c:be:68:a3:d7:cf:
7d:96:d9:07:0e:32:2e:cd:fe:c9:ed:4b:7b:d2:2f:
6c:aa:28:63:e8:8d:60:8d:f7:39:67:2f:70:8c:23:
37:1d:2b:c5:12:23:24:6c:a9:3e:1f:b8:12:a5:e6:
44:92:99:a4:35:c8:fc:1d:c8:61:ac:0b:42:b5:a5:
4a:63:2a:5e:07:e6:40:06:4c:42:1f:4f:98:22:de:
7b:5a:44:28:83:95:3e:2b:eb:ef:aa:f4:1c:a8:6d:
2b:7e:42:b4:6b:89:af:65:27:43:02:57:25:ab:79:
f8:2d:4d:3e:90:63:39:9e:83:dd:37:a8:79:96:34:
a2:54:21:61:9f:d3:3f:25:74:f3:b7:44:1e:36:bc:
a7:6c:4b:fc:00:8b:d8:51:6e:60:01:bd:18:74:28:
ee:70:f4:fd:a9:2f:a9:4f:de:9c:b6:70:d9:d8:bc:
27:2e:22:86:68:c2:c2:3e:b4:0c:52:0e:07:46:94:
9b:eb:c4:91:fa:3a:58:96:29:3a:fa:07:4a:06:28:
5f:3f:68:f5:c2:33:7f:6b:fb:45:03:59:64:46:9f:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:20:A4:30:3C:61:40:25:7D:37:92:90:DC:18:E8:29:07:C7:78
X509v3 Authority Key Identifier:
keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:85:5c:c3:5b:3d:5f:7e:93:97:9f:2c:23:d7:61:e1:a8:ad:
30:8a:87:24:a0:99:cf:54:d5:d0:b4:c6:c2:be:27:45:03:fb:
0a:46:77:02:fe:b5:9e:88:a3:79:b5:fb:e5:3f:dc:5e:3a:94:
ed:f4:4a:b0:39:84:32:56:6c:35:a9:ec:2d:4e:8d:54:37:35:
56:d6:c0:b7:a9:33:e1:45:2f:b6:4b:31:bf:8a:6e:a5:53:4c:
55:f0:d0:f3:49:35:67:99:ed:ab:f5:a3:48:37:c9:fd:7a:cb:
80:97:a0:54:3f:2a:82:49:a6:66:99:c5:fc:58:f6:62:b6:01:
40:37:06:ed:c1:b7:f7:8a:51:f2:3b:0e:03:23:f1:c8:d6:56:
d3:71:8a:cd:c6:60:ad:f8:bf:7f:f7:f6:3c:9c:ca:f7:b1:1d:
57:0f:e8:fc:67:e2:94:31:a7:17:38:c7:f0:71:1a:c3:97:fc:
13:f4:86:3a:50:d7:6e:c4:bf:8c:31:3d:81:df:fb:be:44:ed:
37:b9:35:e5:83:43:ef:38:10:ac:60:5c:9a:97:7a:1e:03:f1:
87:dc:70:a6:95:57:6d:46:fb:77:9c:39:24:34:fb:77:3c:b0:
33:ae:c9:5a:d7:14:ce:be:40:f0:bc:ce:45:c2:03:9b:d8:c4:
f2:17:9e:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy
OEQ1MkEwRDUwHhcNMjYwNTEzMDEwNjI5WhcNMjYwNTIwMDEwNjI5WjAYMRYwFAYD
VQQDEw02YTAzY2U5NS04ZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHbvSlX8ef0ueGWmxYDAcAG1RRIUC3B/sq3P6s6NPxzfGw3FB6d8vmij1899
ltkHDjIuzf7J7Ut70i9sqihj6I1gjfc5Zy9wjCM3HSvFEiMkbKk+H7gSpeZEkpmk
Ncj8HchhrAtCtaVKYypeB+ZABkxCH0+YIt57WkQog5U+K+vvqvQcqG0rfkK0a4mv
ZSdDAlclq3n4LU0+kGM5noPdN6h5ljSiVCFhn9M/JXTzt0QeNrynbEv8AIvYUW5g
Ab0YdCjucPT9qS+pT96ctnDZ2LwnLiKGaMLCPrQMUg4HRpSb68SR+jpYlik6+gdK
BihfP2j1wjN/a/tFA1lkRp9K/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFl/IKQw
PGFAJX03kpDcGOgpB8d4MB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz
MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk
OVdQajlfNF82SFFvMVNvTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjYVcw1s9X36Tl58sI9dh4aitMIqHJKCZz1TV0LTGwr4nRQP7CkZ3Av61noij
ebX75T/cXjqU7fRKsDmEMlZsNansLU6NVDc1VtbAt6kz4UUvtksxv4pupVNMVfDQ
80k1Z5ntq/WjSDfJ/XrLgJegVD8qgkmmZpnF/Fj2YrYBQDcG7cG394pR8jsOAyPx
yNZW03GKzcZgrfi/f/f2PJzK97EdVw/o/GfilDGnFzjH8HEaw5f8E/SGOlDXbsS/
jDE9gd/7vkTtN7k15YND7zgQrGBcmpd6HgPxh9xwppVXbUb7d5w5JDT7dzywM67J
WtcUzr5A8LzORcIDm9jE8heeYw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:40:11 2026 by rpki-client