
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json)
Hash identifier: inWHfZaKTj2vp+KYB/BlCLPYmdLWfTnPKGo6ALjoOck=
Subject key identifier: 39:0C:F3:5A:CF:12:C8:D8:E5:85:76:01:7D:6D:DA:92:D2:86:18:44
Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
Manifest number: 0266
Signing time: Wed 23 Sep 2026 01:56:55 +0000
Manifest this update: Wed 23 Sep 2026 01:56:54 +0000
Manifest next update: Wed 30 Sep 2026 01:56:54 +0000
Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: 5frVrm79VI7p3mbgLue0cSlH7ss8BJO9x+8Nj/MdcgE=)
2: 25C794C0652411F196C4FA3A8447A888.roa (hash: N45LL33IihqS/P4Wkd4Y5RM4yOWChQgClLZI5lkYTq4=)
3: 252E9EB4652411F196C4FA3A8447A888.roa (hash: uLZNLe/3LKewURqIVc5uNnrl/e0YDlahAtsJGHncajc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Validity
Not Before: Sep 23 01:56:54 2026 GMT
Not After : Sep 30 01:56:54 2026 GMT
Subject: CN=6ab331e7-8bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:db:6a:f9:4d:90:ae:97:cc:12:7b:d2:81:
bf:21:a6:95:9e:ff:76:9d:b3:76:ef:6a:14:9c:d5:
9b:d6:5b:2f:12:6c:bf:42:32:36:dd:01:d8:ba:1a:
7f:8d:21:29:f6:be:9b:e5:8b:03:dd:32:2e:f1:d7:
ef:c6:43:c7:d3:1c:73:3f:c2:67:63:22:a3:f1:10:
78:96:ee:7a:f0:df:8b:0c:82:d7:05:44:c6:94:7d:
63:1f:d7:54:46:a2:fd:c0:27:80:21:99:e8:dd:36:
ed:fe:15:e6:7c:92:57:70:cd:bf:2e:5f:f2:4a:8b:
3f:db:5f:36:e4:1f:77:c3:80:3c:7a:3d:13:db:30:
b7:04:bc:01:94:8e:d5:63:1b:ed:1e:62:90:1f:37:
a6:fc:00:8b:c3:f0:75:c3:27:a7:91:82:06:c6:a2:
1c:7e:9c:8f:c5:59:32:ab:7b:19:09:3d:f0:02:f2:
2c:3f:c4:20:c6:0e:f2:04:af:d4:a0:51:32:6c:14:
5e:f8:86:43:8b:c8:19:01:98:2a:29:ef:da:12:93:
cb:1b:73:87:f0:cd:91:ec:8b:58:41:b3:33:63:b7:
ac:19:34:7e:aa:bc:45:b6:48:f1:7b:45:23:79:b3:
d8:38:1c:fa:a4:05:a5:50:b0:63:be:80:ff:92:f3:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0C:F3:5A:CF:12:C8:D8:E5:85:76:01:7D:6D:DA:92:D2:86:18:44
X509v3 Authority Key Identifier:
keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:60:7c:f8:64:b7:2f:96:1c:29:4a:6c:10:c8:dc:7b:a4:
59:69:75:46:17:4e:63:54:3a:79:34:ba:73:b9:30:ee:4a:98:
18:10:50:4a:a9:e8:5f:a2:3f:b9:3d:8f:e1:58:58:55:b6:0f:
e9:3c:6a:77:43:35:68:0c:c4:c2:53:24:8a:17:c8:45:b6:9a:
d0:c2:80:09:d4:d0:77:38:ca:10:15:dd:59:38:b6:92:73:10:
62:e4:4f:c0:46:ee:ab:ae:af:9a:d9:62:9d:cc:61:73:ca:e5:
05:94:ba:25:ad:cb:17:a8:88:4a:c9:40:b9:3e:92:a4:6f:b9:
e0:6e:43:ae:7e:07:5f:a5:04:f0:3d:fd:0d:70:97:71:85:2a:
f2:ac:4b:3d:e3:73:a6:d2:25:93:dd:90:26:e4:d2:4e:e5:00:
e5:be:02:f7:e6:1d:bd:2b:c9:e3:74:25:a4:5a:7b:bc:a7:27:
4f:27:0f:6a:49:75:35:e8:7a:ec:b2:83:d9:98:38:b3:65:a3:
4a:91:84:0a:22:60:d0:0b:e7:76:ad:6d:e5:76:9e:ab:27:1f:
e3:6d:11:27:d4:ad:00:f7:54:5e:43:67:d5:84:ed:ab:0e:5b:
13:aa:f3:59:c4:13:d6:2b:42:cd:a5:22:0d:e4:9f:ca:35:02:
5f:be:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:11:49 2026 by rpki-client