
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json)
Hash identifier: I3YyxWwzyfG1HWDUC3gQtPpd3IhlqKvjS6AtZ/ihWAI=
Subject key identifier: DD:ED:35:1C:4C:69:8B:BE:3F:5D:2F:A3:C9:CC:93:AF:EC:F9:9B:BB
Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
Manifest number: 0128
Signing time: Sun 27 Sep 2026 06:15:49 +0000
Manifest this update: Sun 27 Sep 2026 06:15:48 +0000
Manifest next update: Sun 04 Oct 2026 06:15:48 +0000
Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: p5Yu3PYcExNbQeMjiNJOaSZeacfjK6BXZ2q05bt9kIA=)
2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: MMDAkBT8dwrfvYzJiNfMzsz7yHu7krdnJt0J0a8S0+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 06:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Validity
Not Before: Sep 27 06:15:48 2026 GMT
Not After : Oct 4 06:15:48 2026 GMT
Subject: CN=6ab8b495-2fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:22:47:d2:cc:51:c7:b2:1f:34:49:66:00:
6a:4a:40:cb:cf:10:91:ea:eb:8b:9c:a7:12:8d:a5:
1e:13:04:0e:7e:40:4b:a1:21:c5:df:66:b3:b0:ce:
30:51:5b:ab:9d:f2:84:92:80:26:30:07:24:17:e7:
0a:e0:b5:83:3e:be:66:cf:bf:20:81:46:7b:a1:5f:
2a:58:d2:6f:03:a4:70:2b:28:26:8c:8c:4a:e3:99:
6a:af:22:2c:48:d9:4e:e1:4b:0d:2e:95:48:48:54:
a7:77:1c:14:88:be:4a:ee:1e:d4:8f:de:3a:ed:20:
28:4c:50:a5:6a:96:a1:99:e4:3c:39:14:38:a8:c2:
7c:00:44:c4:b7:a3:07:ff:94:a3:ef:45:13:1c:31:
d1:b9:18:37:0a:81:f5:43:70:e8:40:cc:5f:92:53:
d4:4a:bd:a7:b3:0e:f4:78:ee:58:c9:6e:22:7f:82:
f4:08:36:8d:d5:e0:5c:80:fd:80:fe:19:ac:77:22:
23:a6:9a:65:7f:e9:b3:47:29:d5:ff:e6:dd:1f:95:
b4:1e:76:47:5e:b7:85:d4:97:b0:93:41:3f:1a:53:
e1:be:15:01:b7:2c:0d:bd:08:96:7c:62:af:7c:40:
7e:f5:46:54:ec:6e:1d:ba:ec:d7:9c:21:ce:24:8c:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:35:1C:4C:69:8B:BE:3F:5D:2F:A3:C9:CC:93:AF:EC:F9:9B:BB
X509v3 Authority Key Identifier:
keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:97:e8:13:43:b0:3b:02:48:b3:fb:1f:9b:5a:77:75:98:b2:
47:45:7c:c5:36:99:92:22:b0:7c:25:5d:23:a5:33:81:bc:f3:
c5:5c:72:08:07:52:64:d5:9b:d4:db:9b:12:f1:86:95:c8:c4:
fc:dc:35:b7:5a:42:1f:c9:1b:1f:d5:c5:83:0c:08:b3:3b:a3:
98:cd:9e:59:29:63:8f:13:bf:c6:c3:64:cb:9d:64:f0:62:cf:
95:30:1b:97:74:5b:b7:b3:45:da:bc:ff:f2:eb:5c:66:04:1e:
04:8f:4c:90:71:f3:05:67:30:ea:2e:43:19:2e:78:99:4d:36:
02:3c:dc:1f:9a:09:14:d0:3f:13:f1:7c:53:c2:85:00:9d:97:
c6:42:a5:e2:fc:f5:76:de:76:73:6b:30:8d:01:87:86:90:2b:
e1:92:c1:09:4d:09:a6:b5:d2:33:dd:b7:4a:eb:5b:46:e9:f9:
14:85:28:ae:4e:73:0e:d9:89:27:c6:96:a7:33:33:e7:32:ed:
b8:9a:bc:95:0e:68:7c:0a:72:36:e3:32:ad:39:c6:11:d6:f9:
ab:3d:50:c2:5a:fa:62:e3:8e:6b:3a:3a:c9:df:e6:2a:a9:1d:
b0:af:1e:dd:a4:10:96:8d:aa:0f:ce:50:d0:06:ee:ae:5e:f6:
aa:79:ca:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA3NjkxMTAvBgNVBAUTKDJGQ0IzQzI1NTY1Qzk0MDQxN0JFRTJBQUY4ODM4Q0U0
MzNFMkI4M0EwHhcNMjYwOTI3MDYxNTQ4WhcNMjYxMDA0MDYxNTQ4WjAYMRYwFAYD
VQQDEw02YWI4YjQ5NS0yZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxh4iR9LMUceyHzRJZgBqSkDLzxCR6uuLnKcSjaUeEwQOfkBLoSHF32azsM4w
UVurnfKEkoAmMAckF+cK4LWDPr5mz78ggUZ7oV8qWNJvA6RwKygmjIxK45lqryIs
SNlO4UsNLpVISFSndxwUiL5K7h7Uj9467SAoTFClapahmeQ8ORQ4qMJ8AETEt6MH
/5Sj70UTHDHRuRg3CoH1Q3DoQMxfklPUSr2nsw70eO5YyW4if4L0CDaN1eBcgP2A
/hmsdyIjppplf+mzRynV/+bdH5W0HnZHXreF1Jewk0E/GlPhvhUBtywNvQiWfGKv
fEB+9UZU7G4duuzXnCHOJIz88QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3tNRxM
aYu+P10vo8nMk6/s+Zu7MB8GA1UdIwQYMBaAFC/LPCVWXJQEF77iqviDjOQz4rg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDc2OS81NDU2ODhDQUZC
MjQxMUVGQjc2QjlGNEJDNEY5QUUwMi9MOHM4SlZaY2xBUVh2dUtxLUlPTTVEUGl1
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDc2OS81NDU2ODhDQUZCMjQxMUVGQjc2QjlGNEJDNEY5QUUwMi9MOHM4SlZaY2xB
UVh2dUtxLUlPTTVEUGl1RG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt5foE0OwOwJIs/sfm1p3dZiyR0V8xTaZkiKwfCVdI6UzgbzzxVxyCAdSZNWb
1NubEvGGlcjE/Nw1t1pCH8kbH9XFgwwIszujmM2eWSljjxO/xsNky51k8GLPlTAb
l3Rbt7NF2rz/8utcZgQeBI9MkHHzBWcw6i5DGS54mU02AjzcH5oJFNA/E/F8U8KF
AJ2XxkKl4vz1dt52c2swjQGHhpAr4ZLBCU0JprXSM923SutbRun5FIUork5zDtmJ
J8aWpzMz5zLtuJq8lQ5ofApyNuMyrTnGEdb5qz1Qwlr6YuOOazo6yd/mKqkdsK8e
3aQQlo2qD85Q0Aburl72qnnKJg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:14:18 2026 by rpki-client