
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json)
Hash identifier: PzjXykzQQcXQyy+2fb1nhHrQUXIy0LmfbTJ35fz+y8U=
Subject key identifier: C2:CF:8E:2C:14:E8:1F:CD:EB:F8:2F:71:45:26:77:85:29:3A:1F:65
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial: 3629
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
Manifest number: 35B1
Signing time: Thu 24 Sep 2026 14:24:49 +0000
Manifest this update: Thu 24 Sep 2026 14:24:48 +0000
Manifest next update: Thu 01 Oct 2026 14:24:48 +0000
Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: FA3xB19p+hVEh9LZbRvDWy1eNMPfL87d/y46GOXyVI4=)
2: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=)
3: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=)
4: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=)
5: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=)
6: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=)
7: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=)
8: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=)
9: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13865 (0x3629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Validity
Not Before: Sep 24 14:24:48 2026 GMT
Not After : Oct 1 14:24:48 2026 GMT
Subject: CN=6ab532b1-3831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:b2:d1:df:ec:7b:d8:84:02:28:b1:4e:9b:
81:c1:9a:f0:80:db:bd:3d:5c:9f:de:ed:98:58:30:
39:94:3a:c3:14:ba:d0:c4:55:12:ea:4a:a5:7f:c1:
da:c1:30:32:1f:8e:7d:2d:12:8f:c4:3b:db:a6:65:
05:0f:30:55:44:7d:35:81:2c:a4:e1:af:b2:a1:29:
da:d5:06:51:77:89:69:61:2b:83:e9:e9:28:bb:04:
c6:58:b7:da:f2:c9:9e:2a:80:5f:b6:30:1f:2c:ed:
fc:6c:78:44:2c:6e:9e:2d:25:39:95:f9:9c:9c:6c:
f6:3c:6f:07:64:04:58:ff:43:45:3e:3c:e3:35:db:
64:03:df:7e:92:d9:1d:df:21:4a:1a:3f:41:ce:17:
e9:00:5e:85:79:66:3c:57:bc:5d:a4:2e:8b:73:98:
5f:e2:61:82:73:b7:21:b1:9d:49:1b:e2:70:c2:52:
95:95:b1:f4:d5:8b:2c:8c:2c:29:fe:50:9d:8b:f8:
82:8e:ce:2f:fd:85:65:8a:cf:70:f8:99:cd:df:aa:
4e:20:5e:fd:17:1e:55:4a:5d:7b:ad:0f:3f:14:52:
49:a7:b5:e3:45:8e:8d:95:33:94:55:0d:49:02:e0:
c8:91:30:c4:49:c4:96:dc:c6:3d:69:f1:84:b9:58:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CF:8E:2C:14:E8:1F:CD:EB:F8:2F:71:45:26:77:85:29:3A:1F:65
X509v3 Authority Key Identifier:
keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f6:b9:f8:48:c8:72:de:3b:af:80:e1:09:00:97:93:24:6d:
7a:ae:8f:8b:3a:4b:49:f6:fa:30:d6:27:af:96:24:8d:40:0e:
d0:75:e5:50:10:70:d8:b3:bb:78:ab:fa:23:7b:f8:9c:7c:99:
c3:01:06:b8:b3:95:fc:38:68:a3:3e:e9:45:a6:2a:16:d4:38:
c4:1f:07:73:72:2e:66:bd:85:38:66:27:2b:24:bd:4a:fa:ff:
8e:53:ea:88:07:b2:29:c0:2a:cc:24:bd:1c:13:a0:cd:cc:25:
0c:46:80:08:cd:6c:e4:5e:ae:f9:7b:95:c2:d4:00:f7:5a:de:
90:79:0e:ff:e8:5e:02:fc:ae:51:91:d4:aa:5a:0a:95:4e:7b:
0d:21:42:b5:27:3d:33:4f:de:b3:ac:a8:73:97:fa:e2:3a:47:
f3:f5:b9:02:15:df:95:dc:d3:d0:bf:f5:97:ad:f0:02:62:d9:
ed:de:25:78:9f:6c:55:52:19:ff:47:3a:dc:90:51:83:cb:98:
25:2b:5e:f5:1b:ba:6e:88:34:86:0b:47:a7:fc:25:01:34:fa:
cb:8a:f4:6b:00:16:4d:24:30:da:92:55:5e:d1:40:fe:47:21:
9e:15:71:c5:ac:16:d4:42:61:ac:90:ff:59:9a:2c:22:b2:f8:
43:3c:6c:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz
RTY0NzMyQjIwHhcNMjYwOTI0MTQyNDQ4WhcNMjYxMDAxMTQyNDQ4WjAYMRYwFAYD
VQQDEw02YWI1MzJiMS0zODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA026y0d/se9iEAiixTpuBwZrwgNu9PVyf3u2YWDA5lDrDFLrQxFUS6kqlf8Ha
wTAyH459LRKPxDvbpmUFDzBVRH01gSyk4a+yoSna1QZRd4lpYSuD6ekouwTGWLfa
8smeKoBftjAfLO38bHhELG6eLSU5lfmcnGz2PG8HZARY/0NFPjzjNdtkA99+ktkd
3yFKGj9BzhfpAF6FeWY8V7xdpC6Lc5hf4mGCc7chsZ1JG+JwwlKVlbH01YssjCwp
/lCdi/iCjs4v/YVlis9w+JnN36pOIF79Fx5VSl17rQ8/FFJJp7XjRY6NlTOUVQ1J
AuDIkTDEScSW3MY9afGEuVjKYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLPjiwU
6B/N6/gvcUUmd4UpOh9lMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE
ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z
RmFaZFpaOG5RYlEtWkhNckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADPa5+EjIct47r4DhCQCXkyRteq6PizpLSfb6MNYnr5YkjUAO0HXlUBBw2LO7
eKv6I3v4nHyZwwEGuLOV/Dhooz7pRaYqFtQ4xB8Hc3IuZr2FOGYnKyS9Svr/jlPq
iAeyKcAqzCS9HBOgzcwlDEaACM1s5F6u+XuVwtQA91rekHkO/+heAvyuUZHUqloK
lU57DSFCtSc9M0/es6yoc5f64jpH8/W5AhXfldzT0L/1l63wAmLZ7d4leJ9sVVIZ
/0c63JBRg8uYJSte9Ru6bog0hgtHp/wlATT6y4r0awAWTSQw2pJVXtFA/kchnhVx
xawW1EJhrJD/WZosIrL4QzxsiQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:45:50 2026 by rpki-client