
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier: FCWAztlRnPj62h/2wuVTxj/3hNUjyrSuDHPKL6eKTlU=
Subject key identifier: 58:62:79:FE:50:3C:47:3B:97:D6:32:CB:9C:89:64:50:26:A7:DB:54
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial: 3605
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number: 35C4
Signing time: Sun 20 Sep 2026 14:15:38 +0000
Manifest this update: Sun 20 Sep 2026 14:15:37 +0000
Manifest next update: Sun 27 Sep 2026 14:15:37 +0000
Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: jfhjfqbVJ15Wjysz9mlGScxrDd3dSZPo2hw3rO32/aI=)
2: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: mRRQUvKxyPfmPaRjVyhQzZiLqbyD63uPoSK3GiULemA=)
3: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: aMHBQ0J7YfPV7IMIB5NQWhqNvs3O4UzTOKWMInuGuiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13829 (0x3605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Validity
Not Before: Sep 20 14:15:37 2026 GMT
Not After : Sep 27 14:15:37 2026 GMT
Subject: CN=6aafea8a-7593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:19:0a:c5:a0:be:23:15:15:f2:4b:5e:e4:
ab:0d:5b:e9:26:06:8d:92:67:ae:9b:ae:2c:b2:bc:
0b:52:30:18:54:24:db:28:48:a8:89:c4:80:ac:ef:
68:63:80:92:07:77:b7:58:6a:f6:a4:83:e1:93:37:
71:d1:78:00:78:82:2c:b0:63:e6:0c:b5:4a:cf:f4:
02:44:0b:1b:e6:d6:ab:5b:0b:e8:06:05:4b:2f:36:
db:51:00:09:0d:43:03:d8:b8:ce:e3:57:c6:e6:4d:
d4:70:aa:5e:ad:2f:ea:76:3b:c4:5c:47:2b:26:ea:
55:db:0f:5b:f0:d7:37:91:93:4a:cf:05:3c:fe:ce:
da:fe:40:7a:b2:fb:bf:01:a8:86:a1:8e:75:e2:ac:
6a:c9:b1:d4:f7:f4:30:82:1e:40:4f:9a:55:68:ab:
af:de:a6:f8:8f:d7:d5:ca:21:e9:41:c0:fa:89:2f:
ec:81:18:5e:f7:7a:69:68:b8:0e:04:3b:93:a3:5b:
73:a8:f2:00:31:65:3b:ad:bb:7f:f5:98:02:1f:25:
d1:09:e8:ee:1b:ec:9a:7b:7e:e2:44:45:44:df:3c:
9e:fc:71:52:a3:3c:b6:6e:1e:40:7c:b7:de:20:31:
fc:3d:af:41:a4:09:10:79:e0:0e:3f:d3:1a:e5:e4:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:79:FE:50:3C:47:3B:97:D6:32:CB:9C:89:64:50:26:A7:DB:54
X509v3 Authority Key Identifier:
keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:4f:9d:72:88:5d:b1:28:c8:04:01:64:c4:05:b6:43:b2:
da:5b:20:b6:f7:d6:40:ca:8a:e1:a6:ca:c0:75:60:cf:d5:90:
73:9f:0e:ab:91:e5:f7:ea:1c:8e:79:91:90:7f:50:00:09:1d:
ba:1b:c7:68:c0:88:74:36:0f:c3:23:39:d3:a7:90:9d:c4:33:
19:c3:6f:eb:b3:3d:6c:4a:1d:ba:e0:1f:c9:16:f2:61:7a:8d:
44:ef:90:d6:cc:c9:47:88:7b:1b:28:d1:cb:18:47:ce:83:02:
d4:48:a9:59:cb:41:13:3a:6c:fd:e8:57:d6:80:79:2c:05:4b:
ae:1d:ba:7f:00:6b:20:41:91:69:68:4c:19:39:9a:94:2a:41:
01:51:ee:86:39:13:c2:73:bb:8f:1b:32:a1:24:9d:0b:ff:1c:
0f:00:10:e6:a5:df:08:6f:80:94:94:57:03:11:73:d0:68:e7:
2c:fc:f5:84:c7:d8:b9:2d:d4:17:a8:be:36:24:3e:77:be:2f:
b2:54:a5:ea:ab:69:84:83:81:18:a6:fb:96:ce:d4:1a:7b:47:
5a:5b:fd:ad:4f:18:c4:86:c8:30:d2:a1:ea:41:f0:24:13:40:
c1:f4:a5:a8:be:43:e9:81:d6:a4:4f:b0:b5:05:ce:5c:fb:d8:
d8:35:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:17:24 2026 by rpki-client