
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
File: lUb_2jDoTm_o815o7CVUGDnprQ8.mft (raw, json)
Hash identifier: p9/L/PHSQmmI2mEIynNsiThdehkTfHTwtN6BOyBF9RQ=
Subject key identifier: 0A:9A:C4:FB:D3:A6:AA:81:13:44:4A:AA:64:89:8D:D6:2C:C5:CB:D4
Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F
Certificate issuer: /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
Manifest number: 75
Signing time: Thu 15 Oct 2026 09:09:59 +0000
Manifest this update: Thu 15 Oct 2026 09:09:58 +0000
Manifest next update: Thu 22 Oct 2026 09:09:58 +0000
Files and hashes: 1: lUb_2jDoTm_o815o7CVUGDnprQ8.crl (hash: 5PpJ415wSyx4HD0Hh4ljjctBk2iwwrpSvVh9zrLLsdg=)
2: 49589EFA2D9F11F1920FEBD19F833773.roa (hash: uJILbZP23g0BY4lJu6hf2ck9mZXHjl8Z2BTle1CDmr4=)
3: F594A6063FA511F1B714D040BE833773.roa (hash: PJXKD/lz4vo98t8D5ft0aEy9ZerUNxD870bJIgzENBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl
rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 09:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
Validity
Not Before: Oct 15 09:09:58 2026 GMT
Not After : Oct 22 09:09:58 2026 GMT
Subject: CN=6ad09867-24bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a4:02:60:1b:27:8b:46:ae:22:13:3a:7b:84:
2f:84:95:d4:11:e5:bf:a3:06:97:32:41:9f:e7:60:
e2:82:09:fa:d1:6f:9f:4e:64:22:77:26:3a:8a:fb:
ce:9b:3e:60:fe:3a:e4:26:a1:f5:d9:27:19:ac:96:
d7:32:35:78:5b:d0:b3:a6:be:ab:f8:7f:bf:a1:74:
cf:5d:38:05:4a:fb:6b:4b:32:83:ad:be:22:10:7e:
6a:99:de:53:10:96:77:42:8d:7e:e3:0f:28:b4:5e:
db:b6:17:16:f2:0e:74:af:2f:6c:51:65:f2:a5:93:
9c:bc:79:d2:50:78:17:9a:1e:4c:66:e4:e0:fb:66:
eb:3a:10:63:3c:e8:28:1b:7f:53:83:13:fe:b8:fe:
32:41:bf:42:83:b8:64:93:37:51:ad:62:21:c2:e1:
eb:7b:e4:44:fd:83:a4:21:58:12:3c:2b:73:17:41:
03:c5:b2:ab:fd:04:a3:14:01:68:7e:7e:75:83:1b:
43:6f:7f:9d:9a:af:13:2b:d3:15:b1:7b:37:6c:18:
4f:46:38:1d:28:0d:43:f7:52:97:f4:cd:31:5a:0b:
28:98:cc:6d:01:0c:8a:ed:d8:9c:22:7c:6d:c0:27:
45:3c:31:11:70:8c:56:53:6e:75:9d:31:ff:46:4e:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9A:C4:FB:D3:A6:AA:81:13:44:4A:AA:64:89:8D:D6:2C:C5:CB:D4
X509v3 Authority Key Identifier:
keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:28:93:51:55:05:4c:d3:34:3a:8c:9b:26:cf:5c:d3:ea:c8:
18:fb:4c:3d:73:66:da:fa:c1:7a:25:37:10:3d:99:27:df:6a:
32:41:07:ce:32:fc:11:14:70:46:30:8f:df:46:9e:d8:3c:d3:
d2:b8:df:e6:2e:fe:36:c8:a8:00:79:de:c0:14:b7:5a:72:97:
1c:56:85:ad:d1:2b:12:12:8c:11:d5:71:a2:29:af:2f:e6:72:
73:35:c4:c6:68:3b:87:ca:94:84:3f:be:d4:55:d7:83:11:45:
30:04:1a:89:6a:77:0a:ce:35:70:7b:dd:60:a4:54:aa:7b:46:
23:8d:26:a7:ed:d6:1f:07:bc:36:b4:7d:0d:80:59:9a:9d:92:
23:1b:8b:96:e8:57:b9:34:d8:83:28:ec:ee:37:00:9f:12:3f:
9f:05:e4:9f:ab:37:2d:71:87:f3:2b:ac:da:99:59:ed:26:3d:
a4:90:3d:59:c5:70:bd:39:a9:40:75:89:49:2d:e3:76:1a:a9:
c4:92:07:6a:39:0a:cf:f3:23:3c:44:14:55:82:6e:f3:63:fd:
52:b9:4b:47:58:de:1c:65:52:2e:f7:9f:64:fe:d3:cc:4a:03:
51:31:61:e7:f9:93:86:e4:89:02:27:4f:a3:f0:75:77:92:a7:
69:19:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:01 2026 by rpki-client