
$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json)
Hash identifier: 9AkqI/nY6pzMCb5jo7aPSYb1Pvu5HnmoNbrbVPV8110=
Subject key identifier: B4:63:11:61:A8:76:D6:90:9B:7F:BC:EC:94:8E:6D:01:B2:25:62:83
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
Manifest number: 0217
Signing time: Wed 29 Jul 2026 04:01:13 +0000
Manifest this update: Wed 29 Jul 2026 04:01:13 +0000
Manifest next update: Wed 05 Aug 2026 04:01:13 +0000
Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: v0XNaUG3eDtk513rKxWIxPmRz54RcHGEUVMjnE8mGhM=)
2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: EOojy2+JzC+p+QaVV3QkjR8Q0Zfn9YjNT084DP1KFTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Validity
Not Before: Jul 29 04:01:13 2026 GMT
Not After : Aug 5 04:01:13 2026 GMT
Subject: CN=6a697b09-5f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:d3:0d:a8:4a:05:b8:c1:62:ee:b0:14:1f:
44:df:6f:17:8f:40:c7:2f:59:8e:8a:be:c0:eb:40:
90:62:64:dc:93:2b:16:45:79:c1:87:17:82:b3:64:
b3:5c:4d:52:23:e9:17:38:e1:98:fd:33:97:52:bf:
8c:01:87:0c:e1:85:44:16:96:b9:8e:39:56:ae:65:
2d:5f:11:bb:63:a1:36:78:1a:53:b3:07:3d:3e:27:
a1:17:cd:f7:d4:81:75:f3:fc:d2:7c:a1:1d:af:60:
67:19:f1:54:7b:44:36:00:14:a3:89:2e:12:c8:20:
d1:18:1f:8d:2e:66:4a:44:37:b1:77:52:73:19:e2:
ea:3a:6b:5c:b0:64:6e:2b:f0:2b:90:1b:87:55:2e:
6d:06:f1:f6:d0:6b:14:15:49:c7:3e:c3:bd:c0:90:
c0:d3:19:be:8e:31:34:c8:b9:07:fd:67:d2:9c:85:
0e:ae:1f:b0:6c:b2:df:cc:ed:09:e9:be:dd:a3:cf:
8e:56:27:f2:53:9b:77:76:7b:23:0b:75:78:38:39:
bd:c3:3d:d5:31:80:bb:eb:5c:89:90:ef:89:06:81:
66:62:95:9e:33:0c:05:31:0b:02:4d:9c:28:05:a3:
e8:a3:39:7a:19:bc:3e:8b:2b:91:00:e0:31:fa:5c:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:63:11:61:A8:76:D6:90:9B:7F:BC:EC:94:8E:6D:01:B2:25:62:83
X509v3 Authority Key Identifier:
keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:80:d1:d3:0f:93:76:ce:bd:dd:90:db:97:59:e8:dc:88:f1:
ac:d6:45:89:bb:0b:95:31:be:06:0c:fe:44:0f:51:34:15:29:
5d:47:8e:f4:ca:9a:1a:09:11:57:e3:6c:bd:02:0b:f3:3e:e1:
42:1d:68:86:7b:04:07:b4:63:8c:d4:08:be:43:58:eb:60:70:
49:58:3d:8e:02:2f:ab:5e:09:2e:c5:de:c1:af:62:3b:d0:f0:
30:aa:4c:aa:a6:34:51:24:2f:e4:5f:5c:3f:bb:c1:72:96:14:
2f:86:24:4e:86:c2:7d:da:ff:39:5a:25:85:fb:4f:60:f4:73:
c5:f5:c7:54:f0:10:34:07:4b:bb:62:98:d2:86:80:e3:15:2c:
56:3f:48:8d:fa:a6:04:8c:35:f1:a4:3c:9d:12:b8:a5:2a:9f:
36:79:22:80:ad:e5:e6:3e:0a:5d:4b:cf:76:0c:48:38:69:43:
1f:ec:40:70:d3:6f:94:4d:f8:72:12:14:fd:71:09:e9:a4:46:
94:56:6d:f7:60:3a:a2:13:96:5f:c8:80:b3:66:96:62:be:1a:
b9:2b:77:e7:64:ec:96:2a:ca:4b:96:0a:03:24:02:e7:16:35:
4a:05:4a:a3:e0:90:06:61:3e:08:3d:38:cd:0c:1e:2f:14:7d:
b7:83:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:35 2026 by rpki-client