
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
File: lNWHtudb8QivW0JJIsSouqs-6UY.mft (raw, json)
Hash identifier: TIrmWzKdmpNQj2dCTV3DoVXXKLj6DphA3qvye87lJcw=
Subject key identifier: 66:35:D4:4B:D6:33:BC:DC:A3:00:BA:8E:12:0C:6F:FF:07:F1:96:D0
Authority key identifier: 94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
Certificate issuer: /CN=A919F0DA/serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Certificate serial: 08EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
Manifest number: 6324
Signing time: Tue 22 Sep 2026 14:15:33 +0000
Manifest this update: Tue 22 Sep 2026 14:15:32 +0000
Manifest next update: Tue 29 Sep 2026 14:15:32 +0000
Files and hashes: 1: lNWHtudb8QivW0JJIsSouqs-6UY.crl (hash: hmx1X3BL92ftZSKnCQYMXrTJnGBfH4l+Ch+b9044Ejw=)
2: 2EwZ0hUXedU8MsQsLwPOl0n0hxY.asa (hash: TGf0bRJoVa0x3yeNVSpjlC+5jJ4ta8F4ZrNpJjWklHg=)
3: 22EA7FCC21F111EC85C6186EC4F9AE02.roa (hash: 9KLwgwkyaa7an2F9mrcWsNNuRJDsvBpE+VEjLxF0blI=)
4: 58273588C2BD11EBA13EC07AC4F9AE02.roa (hash: /ZcPMVw8bWVz/s13IxgyN1M54yl3P16y416rb4tcIPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Validity
Not Before: Sep 22 14:15:32 2026 GMT
Not After : Sep 29 14:15:32 2026 GMT
Subject: CN=6ab28d85-837d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:11:e7:7a:50:ef:b9:04:e8:0d:17:72:f6:
b8:3c:8c:5b:9c:a4:59:02:ea:22:4e:1c:5e:36:47:
3a:6a:38:ea:c8:15:dc:2d:b2:02:d4:30:28:32:90:
fc:18:e0:03:5b:a9:35:67:eb:8a:88:7b:55:47:9c:
80:6a:db:6f:80:90:51:94:ee:a2:92:0f:b8:f0:21:
a4:29:d6:62:f4:1e:c2:9f:9a:99:c5:7f:66:0f:c1:
32:0d:28:a1:bb:4b:28:05:56:25:cc:90:ef:15:26:
dc:26:9b:f4:53:d9:dc:ba:3f:0c:23:68:32:12:8f:
02:f6:43:39:6a:29:01:3e:ad:e0:de:be:f9:9f:59:
09:93:72:c8:55:b1:05:4c:2c:66:83:04:1a:9a:2f:
40:36:60:2c:98:fd:bc:e8:25:e6:d7:d1:4d:a7:35:
3a:34:02:33:f4:42:18:ae:c5:ae:27:5f:ca:d3:65:
e8:9b:0f:6c:d0:4d:5c:9b:33:03:3c:31:90:c7:c2:
70:10:e6:94:f2:ed:26:d0:b8:22:37:fe:ce:25:d9:
95:b9:10:74:12:15:ad:ba:6c:fa:73:b5:9d:62:ea:
f9:1c:2d:97:9e:fd:5e:e8:6e:75:cf:74:b3:b2:5f:
80:8c:c5:51:66:2a:30:63:2d:80:cf:36:c9:f5:4e:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:D4:4B:D6:33:BC:DC:A3:00:BA:8E:12:0C:6F:FF:07:F1:96:D0
X509v3 Authority Key Identifier:
keyid:94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:e0:0c:1f:0d:37:77:0a:a8:bb:42:2c:44:fe:7a:db:a9:15:
ac:9a:a4:a4:ca:7b:22:16:32:12:79:d6:64:32:29:7a:65:e3:
ac:54:eb:4d:e6:29:0f:b6:52:e1:b8:fc:d2:61:6f:bc:65:b6:
cf:3e:bb:c1:a7:da:75:a8:b3:cd:c5:85:f2:7c:76:7f:89:8c:
20:01:8b:23:36:f3:0b:7d:a8:b0:0b:de:50:01:7d:32:1a:1a:
ce:e8:0c:aa:2b:bd:68:23:b6:f7:93:0b:0f:62:fa:c0:ca:cb:
c3:1f:b6:e4:05:47:10:e3:e6:07:b7:47:1a:3a:78:6f:79:46:
eb:ac:68:aa:fe:c3:53:a1:20:0a:76:3b:d3:93:fd:60:84:88:
6f:b6:fd:b0:c9:af:b9:24:53:88:b3:29:6f:1d:f1:89:50:03:
e2:ca:df:82:82:4c:8b:39:28:53:21:77:dd:cc:5d:a8:b9:e3:
d7:b9:57:6e:ec:59:3d:e8:47:90:3a:19:68:23:5b:82:44:f3:
53:7a:e8:ff:c3:4c:68:d0:1e:ca:6f:7d:6e:c9:a5:9c:c5:23:
6b:c8:21:05:ae:a3:ef:e1:d9:f3:bb:a1:e4:08:0f:0c:6d:4e:
8e:35:82:0f:83:77:a7:af:f5:3c:4f:7d:7f:63:be:c7:14:d0:
28:aa:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:30:59 2026 by rpki-client