
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File: -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier: zBzNO2I8Db4A+cEKD9gXaVy2OZdafCjEX1scXBIgwTM=
Subject key identifier: 36:CC:A0:61:F5:E5:AF:17:92:5A:15:7E:AE:60:30:1A:12:CB:E5:58
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number: 97
Signing time: Mon 27 Jul 2026 09:36:49 +0000
Manifest this update: Mon 27 Jul 2026 09:36:48 +0000
Manifest next update: Mon 03 Aug 2026 09:36:48 +0000
Files and hashes: 1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: 0vNdsbglbrdwrJmsXj/Muk9H1Lrp9bLrzYZiVdO5xXk=)
2: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
3: 4AAED6B23C1211F19A15FB09B6833773.roa (hash: zaCJCnJ8P+IQJ9n9t86hTBhempUXa3QuJJB9ZKjuD4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:36:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Validity
Not Before: Jul 27 09:36:48 2026 GMT
Not After : Aug 3 09:36:48 2026 GMT
Subject: CN=6a6726b1-0f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:0b:f6:0c:0e:8b:16:67:7c:a6:fd:21:a1:
33:70:71:f6:2a:37:ee:40:93:ec:c4:53:06:ab:24:
f1:00:ef:18:c8:56:aa:90:1e:13:1f:17:5d:56:b0:
a0:18:4c:8e:b1:24:96:de:e4:d6:49:cc:7e:59:fa:
04:24:9a:69:36:b2:0c:a5:9a:1d:4e:93:5b:60:1a:
8e:b4:07:9c:4b:1c:d0:7e:75:fc:c4:bd:eb:70:b0:
c6:3a:85:41:6d:71:b9:70:75:25:fe:c4:88:59:c5:
52:e6:56:5c:6e:48:a0:ad:dd:c0:d8:8a:24:bb:11:
f3:73:a1:51:73:03:e6:b1:f9:ab:b3:45:e8:3c:4f:
6a:84:c2:3e:93:09:26:57:01:04:c3:72:c2:73:09:
43:d5:a0:ed:a8:c5:e2:43:9c:60:0a:1d:02:cf:6d:
67:52:3d:9c:a5:2b:7d:c5:d3:17:d3:b6:ec:88:aa:
6c:6b:98:c0:66:68:08:d0:65:f4:2b:71:a0:fc:25:
06:be:9d:e8:ff:c6:f1:28:73:35:d7:e7:6e:80:5d:
d6:a1:4f:ba:c3:6a:ac:cd:46:57:4c:51:f4:18:32:
39:de:3b:10:7a:23:0e:2a:61:17:a3:b8:16:be:3d:
53:f3:de:33:42:74:4a:d0:47:a0:d1:8c:97:74:74:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:A0:61:F5:E5:AF:17:92:5A:15:7E:AE:60:30:1A:12:CB:E5:58
X509v3 Authority Key Identifier:
keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:4c:f6:88:01:84:5c:4f:d6:d8:62:9d:4d:ad:6e:e9:b5:de:
e0:fe:d9:8d:98:b6:2c:86:70:8b:56:97:fc:a6:43:98:16:93:
1f:69:39:79:e6:08:60:02:b2:82:9f:41:4b:fd:45:d0:4d:f1:
b8:29:63:e1:49:69:93:41:2c:f1:7f:2f:89:15:80:28:b9:88:
ac:e7:00:18:75:fe:71:81:f7:85:82:84:fe:17:5f:74:eb:55:
d0:2e:d3:c9:d2:1a:71:0a:74:24:d4:4c:e9:86:f0:2b:ba:93:
cb:48:c1:40:4b:32:51:51:95:cf:48:26:b1:75:42:21:74:b9:
85:59:52:05:d7:f3:e2:09:1b:bf:75:90:70:6b:63:3c:40:a4:
eb:ea:9a:27:44:85:05:0e:d3:45:cb:60:b1:18:76:fb:16:ec:
5d:92:4d:9e:65:63:63:10:6b:bd:2d:b6:c8:93:ca:95:23:7d:
2d:c5:92:ff:4a:ed:6a:1b:b8:5a:49:98:24:30:e7:a1:05:71:
c7:09:ba:3e:29:93:78:d2:ed:82:31:ad:1c:86:e5:c7:d3:d7:
dc:92:a1:be:4b:4a:b5:e5:0a:8a:23:75:09:1c:c2:32:70:0a:
ce:73:03:02:dd:0b:ab:40:9b:2a:ff:fc:f1:86:3f:8a:c7:bb:
04:95:a3:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI5RDcxMTAvBgNVBAUTKEZBNUJBRjQ2QjdDQjJDOEUzNDYzODNBQTgwQ0IzOTZC
MkI4MUM2NEMwHhcNMjYwNzI3MDkzNjQ4WhcNMjYwODAzMDkzNjQ4WjAYMRYwFAYD
VQQDEw02YTY3MjZiMS0wZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl5cL9gwOixZnfKb9IaEzcHH2KjfuQJPsxFMGqyTxAO8YyFaqkB4THxddVrCg
GEyOsSSW3uTWScx+WfoEJJppNrIMpZodTpNbYBqOtAecSxzQfnX8xL3rcLDGOoVB
bXG5cHUl/sSIWcVS5lZcbkigrd3A2IokuxHzc6FRcwPmsfmrs0XoPE9qhMI+kwkm
VwEEw3LCcwlD1aDtqMXiQ5xgCh0Cz21nUj2cpSt9xdMX07bsiKpsa5jAZmgI0GX0
K3Gg/CUGvp3o/8bxKHM11+dugF3WoU+6w2qszUZXTFH0GDI53jsQeiMOKmEXo7gW
vj1T894zQnRK0Eeg0YyXdHQ9HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbMoGH1
5a8XkloVfq5gMBoSy+VYMB8GA1UdIwQYMBaAFPpbr0a3yyyONGODqoDLOWsrgcZM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlENy9GMjNDNERGMkFE
NzMxMUYwQUY2NTAyNTRDNEY5QUUwMi8tbHV2UnJmTExJNDBZNE9xZ01zNWF5dUJ4
a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhrdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjlENy9GMjNDNERGMkFENzMxMUYwQUY2NTAyNTRDNEY5QUUwMi8tbHV2UnJmTExJ
NDBZNE9xZ01zNWF5dUJ4a3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVEz2iAGEXE/W2GKdTa1u6bXe4P7ZjZi2LIZwi1aX/KZDmBaTH2k5eeYIYAKy
gp9BS/1F0E3xuClj4Ulpk0Es8X8viRWAKLmIrOcAGHX+cYH3hYKE/hdfdOtV0C7T
ydIacQp0JNRM6YbwK7qTy0jBQEsyUVGVz0gmsXVCIXS5hVlSBdfz4gkbv3WQcGtj
PECk6+qaJ0SFBQ7TRctgsRh2+xbsXZJNnmVjYxBrvS22yJPKlSN9LcWS/0rtahu4
WkmYJDDnoQVxxwm6PimTeNLtgjGtHIblx9PX3JKhvktKteUKiiN1CRzCMnAKznMD
At0Lq0CbKv/88YY/ise7BJWj+g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:34 2026 by rpki-client