
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json)
Hash identifier: TNLxYoxfNc1k1Fc90O+/Qsg8r14J742lVmZiN/yjdz8=
Subject key identifier: EC:FF:ED:91:F2:61:3A:9A:47:E6:6C:19:68:25:E7:1B:89:11:E6:5B
Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
Manifest number: 0118
Signing time: Mon 27 Jul 2026 07:55:13 +0000
Manifest this update: Mon 27 Jul 2026 07:55:13 +0000
Manifest next update: Mon 03 Aug 2026 07:55:13 +0000
Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: YNKQ6TV9l8kOv7vDcbjIKC3eP4uoJVH0va5NWuPdEXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl
rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
Validity
Not Before: Jul 27 07:55:13 2026 GMT
Not After : Aug 3 07:55:13 2026 GMT
Subject: CN=6a670ee1-05a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:08:5c:ad:71:1e:0e:d4:c9:d8:3e:f2:91:
41:c5:ce:df:ab:a6:c3:d7:d2:33:e4:0a:6a:a8:a8:
b0:0e:e3:7b:69:64:b2:5b:0c:a0:58:62:c7:3e:a7:
28:9d:97:3b:a5:63:c5:59:2f:ae:21:db:1e:a4:bc:
cd:8a:b7:40:72:8f:94:8e:f6:a3:6b:ba:98:4b:a5:
1e:94:a0:ac:50:d6:84:c2:c1:5c:e9:b0:46:b7:1f:
74:fd:f0:87:d6:c2:1b:7c:74:f8:f8:99:5e:dd:b2:
1b:f0:e2:10:ad:07:a9:1b:e5:c9:69:74:cb:e4:20:
0b:e6:3a:76:53:fe:11:8f:21:e2:a2:82:7a:a5:6a:
21:e1:00:f5:b1:78:9d:ef:d2:19:52:08:8f:72:77:
4e:29:77:17:7d:82:9e:90:bd:15:ad:19:e7:9b:47:
9e:5b:b8:2a:40:31:cf:c4:ac:e2:c7:be:cf:e8:fa:
fe:46:2d:b6:1c:b9:4b:8e:12:04:1b:ef:ee:3a:da:
6a:44:c0:ef:aa:4e:2e:d3:5e:ca:e3:f6:fc:a2:2d:
ea:19:63:30:dd:db:2c:18:f7:d3:e9:8e:f7:0d:c3:
a7:d1:74:29:7d:41:51:ec:07:36:b3:41:35:fe:44:
50:bd:bc:66:8e:1c:6c:b0:f5:61:2e:aa:7a:ec:96:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FF:ED:91:F2:61:3A:9A:47:E6:6C:19:68:25:E7:1B:89:11:E6:5B
X509v3 Authority Key Identifier:
keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:1d:c8:34:8f:5c:2c:1c:dd:80:6a:a4:17:97:d1:80:bb:8e:
da:3f:0e:03:7d:5a:e7:e4:c6:1d:2f:07:0f:a9:40:ba:6d:bd:
b8:b2:32:ee:87:7c:ac:72:b9:be:1f:28:4a:42:d5:6b:b9:d8:
77:f3:30:d9:d4:ce:5f:5a:43:25:46:67:09:ab:71:cd:34:d1:
7d:8e:5c:6a:9b:e7:39:97:aa:34:fb:80:79:bd:5b:08:d1:96:
65:9a:c3:a5:59:cf:e2:7f:31:68:cc:4e:a2:71:97:c3:4c:b9:
a0:63:3e:06:17:47:52:2c:7a:8b:46:c2:63:c2:57:0c:3d:4e:
99:ed:ce:7a:5c:ec:85:27:d5:57:1a:01:4b:dc:ef:a1:c7:0c:
3e:a8:a7:41:cd:e8:66:d8:2f:70:d4:90:71:f6:42:ef:5a:48:
19:87:26:d1:47:65:3c:86:53:62:0c:4d:b6:0a:b6:b9:6b:87:
af:7a:27:91:42:56:49:c5:2e:35:ec:fa:33:d1:95:b5:f5:42:
77:19:f4:a1:1e:78:61:7a:f8:14:81:9c:33:c2:5f:57:40:70:
0c:72:a3:02:6b:d9:54:12:0a:ae:61:55:41:c5:81:6a:4f:ca:
5f:85:fc:1d:ce:0c:73:a7:5d:e4:f2:5c:9b:06:e0:ec:02:da:
16:81:c8:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZGNjgxMTAvBgNVBAUTKDk0MDhBMjAxRjAwRTU4RkU5MjU5OEVFMDM5MzkwNzhC
QUVGNzc3OTUwHhcNMjYwNzI3MDc1NTEzWhcNMjYwODAzMDc1NTEzWjAYMRYwFAYD
VQQDEw02YTY3MGVlMS0wNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGAIXK1xHg7Uydg+8pFBxc7fq6bD19Iz5ApqqKiwDuN7aWSyWwygWGLHPqco
nZc7pWPFWS+uIdsepLzNirdAco+Ujvaja7qYS6UelKCsUNaEwsFc6bBGtx90/fCH
1sIbfHT4+Jle3bIb8OIQrQepG+XJaXTL5CAL5jp2U/4RjyHiooJ6pWoh4QD1sXid
79IZUgiPcndOKXcXfYKekL0VrRnnm0eeW7gqQDHPxKzix77P6Pr+Ri22HLlLjhIE
G+/uOtpqRMDvqk4u017K4/b8oi3qGWMw3dssGPfT6Y73DcOn0XQpfUFR7Ac2s0E1
/kRQvbxmjhxssPVhLqp67JZRywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOz/7ZHy
YTqaR+ZsGWgl5xuJEeZbMB8GA1UdIwQYMBaAFJQIogHwDlj+klmO4Dk5B4uu93eV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC9CQTU2NUY1Q0RG
MjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQNlNXWTdnT1RrSGk2NzNk
NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkY2OC9CQTU2NUY1Q0RGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQ
NlNXWTdnT1RrSGk2NzNkNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdx3INI9cLBzdgGqkF5fRgLuO2j8OA31a5+TGHS8HD6lAum29uLIy7od8rHK5
vh8oSkLVa7nYd/Mw2dTOX1pDJUZnCatxzTTRfY5capvnOZeqNPuAeb1bCNGWZZrD
pVnP4n8xaMxOonGXw0y5oGM+BhdHUix6i0bCY8JXDD1Ome3OelzshSfVVxoBS9zv
occMPqinQc3oZtgvcNSQcfZC71pIGYcm0UdlPIZTYgxNtgq2uWuHr3onkUJWScUu
Nez6M9GVtfVCdxn0oR54YXr4FIGcM8JfV0BwDHKjAmvZVBIKrmFVQcWBak/KX4X8
Hc4Mc6dd5PJcmwbg7ALaFoHIcQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:31:15 2026 by rpki-client