
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json)
Hash identifier: EaBGdp89qgevdPxwLDesaw8DBuUtG4fjX4dGGf1njhw=
Subject key identifier: D1:8A:D3:3B:9C:F5:CE:DD:6B:12:A1:92:81:1F:35:A3:F8:02:2C:6E
Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
Manifest number: E8
Signing time: Mon 27 Jul 2026 08:31:30 +0000
Manifest this update: Mon 27 Jul 2026 08:31:29 +0000
Manifest next update: Mon 03 Aug 2026 08:31:29 +0000
Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: WLFazxzr9SFNLxMwk0p0afqR/lso7PKAX3gL4oZMtag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Validity
Not Before: Jul 27 08:31:29 2026 GMT
Not After : Aug 3 08:31:29 2026 GMT
Subject: CN=6a671762-fa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:bc:02:42:b8:ef:48:b9:d8:36:77:ae:af:
8f:83:6d:a0:ee:7b:73:d5:af:de:96:7a:a9:d0:df:
96:d7:a0:d2:fb:45:da:9a:47:18:9b:e5:90:f0:ec:
97:78:6a:1f:5e:27:7b:cb:2c:87:2f:29:56:cb:75:
44:7f:39:de:56:1f:d0:2d:4f:cd:00:34:bd:e1:5b:
d3:46:89:29:e7:b4:aa:f1:6c:74:9e:41:f5:4c:97:
dc:be:c8:3a:e3:b1:26:bc:97:60:e9:b2:5f:7b:c5:
7f:0a:b7:5b:f2:90:f5:b1:b5:a0:fe:97:30:d7:36:
0c:e5:9e:eb:31:76:4f:d1:a0:6a:87:d3:27:91:bc:
19:dd:6f:43:5d:ca:5f:36:82:76:c9:59:f1:8c:0c:
02:72:61:68:fe:08:19:54:70:6e:e1:55:96:69:e2:
e2:70:73:dd:9f:5c:98:7b:05:32:f5:29:b7:fa:2b:
f2:53:a3:8d:0b:5a:73:97:21:ba:d3:c8:84:0f:60:
6c:bd:54:bd:6d:74:fe:c7:57:62:25:91:bd:00:9d:
60:84:6c:08:2c:79:11:73:15:28:3d:ce:27:b1:e8:
51:23:7b:08:65:bc:6c:46:ea:b9:b9:0b:64:7f:e9:
64:71:1e:24:b2:fa:f6:68:1d:cf:c8:af:f4:38:8a:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:D3:3B:9C:F5:CE:DD:6B:12:A1:92:81:1F:35:A3:F8:02:2C:6E
X509v3 Authority Key Identifier:
keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b6:50:0a:03:6d:60:28:4d:d7:1c:45:71:65:28:3e:88:5b:
a4:bb:2d:f1:d1:cb:d6:c9:68:c8:8f:52:ce:a7:8b:58:8c:0a:
42:7a:77:6f:4a:28:e2:f7:37:d2:30:b8:52:47:bc:6c:85:ac:
bd:90:1c:b0:a4:0c:ea:06:79:24:23:5e:d9:52:fc:f9:04:a5:
cc:ab:d0:75:a6:6d:d5:91:ec:52:7e:b7:8a:64:b1:6f:6a:98:
92:85:ce:60:38:f7:7a:2b:d8:71:d0:3c:a1:05:ba:fe:e2:55:
e1:5f:d0:74:e7:cc:6b:bb:0c:d0:bc:30:b3:a8:1f:6e:6d:15:
c2:ad:fe:e0:73:4e:fd:d8:70:ff:0c:f5:6e:e9:4a:ef:57:91:
e5:d2:44:57:4b:7c:43:16:31:9e:f3:1c:f5:4c:77:02:28:43:
dc:a4:8f:bc:f2:e9:25:37:e3:9b:4f:0b:e3:7d:b9:ef:e8:1b:
1c:c0:b0:76:1b:24:18:76:4d:4e:23:0e:78:af:f9:d6:55:f9:
f7:28:01:03:a1:d4:58:63:ce:bf:9b:0e:bc:61:7b:24:42:85:
70:d1:ef:55:20:86:ae:4d:8a:fd:b8:fc:5d:d6:00:db:e6:b3:
87:a8:94:a9:d5:4d:0b:c8:d5:9a:b8:92:c6:a8:49:85:c7:71:
4e:b0:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:52:29 2026 by rpki-client