
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier: 44KCvGxp+suF71jaiZsoBVYSBaB1N3iNQO0NDMmBSl8=
Subject key identifier: 43:82:0D:57:CD:63:3B:04:36:E0:36:95:43:20:B4:A1:1A:E8:94:A7
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number: F7
Signing time: Sat 19 Sep 2026 06:24:38 +0000
Manifest this update: Sat 19 Sep 2026 06:24:38 +0000
Manifest next update: Sat 26 Sep 2026 06:24:38 +0000
Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: awCCVcUGiMTa5u4UxqUj8Vg9X0JQUclLJVbJWqsvLgA=)
2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: XsH+IJ5SSw5cAUWIZZhkMzbgbFC8kkMlwg6uRhNZXvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Validity
Not Before: Sep 19 06:24:38 2026 GMT
Not After : Sep 26 06:24:38 2026 GMT
Subject: CN=6aae2aa6-4c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:5d:a2:a0:8e:3b:c6:fe:df:df:ee:62:85:
7e:50:19:36:c6:02:5c:40:25:d2:e3:2b:06:91:71:
4b:86:90:b1:c0:ab:e6:5b:6f:92:91:bb:01:1e:cb:
56:e8:38:68:ea:81:4d:ce:86:a6:c9:e3:23:f7:57:
ba:96:28:81:ee:0c:c2:44:a3:c4:c4:13:ff:0d:56:
5d:b6:bd:e1:5c:6a:31:74:8f:bf:73:84:4a:4b:44:
ec:4a:8a:de:a2:f8:46:a7:04:25:ca:25:89:fb:eb:
ed:7e:ba:1f:98:09:e7:3b:fb:aa:6c:00:5e:8f:54:
61:45:ff:f7:b7:a4:a8:9c:06:a6:67:08:e8:16:c7:
ea:2a:46:ff:c6:2d:75:61:ea:b8:f2:3d:4a:ee:eb:
64:05:85:e5:0d:90:c6:e7:80:aa:e5:d5:a9:2d:9e:
31:3a:18:9d:1e:2b:9f:20:16:0e:dc:5a:e0:90:74:
a1:b2:60:f3:a7:ec:8b:9f:29:24:8a:ba:a4:76:83:
11:c0:a2:9b:17:5f:6a:fd:21:eb:d3:f5:2a:4a:07:
ae:1c:ab:cf:51:28:9e:b2:0a:7e:62:d2:c6:8d:bd:
05:ab:0c:ec:74:aa:e4:2c:49:95:33:a3:b4:90:d1:
f7:3b:6f:74:65:12:19:c3:93:75:b3:2e:2e:cf:e9:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:82:0D:57:CD:63:3B:04:36:E0:36:95:43:20:B4:A1:1A:E8:94:A7
X509v3 Authority Key Identifier:
keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:c7:9b:a5:02:2a:3b:dc:23:9d:07:f1:48:4d:19:b7:a0:a2:
54:8a:61:86:b4:8d:34:87:e8:9e:f5:dc:c7:f9:44:b0:1a:02:
b5:e6:f5:e6:38:27:71:f7:27:28:ad:84:6e:fd:50:e4:76:a6:
d1:6f:25:31:89:d3:a1:a9:58:ad:38:8f:81:32:25:75:e7:fe:
0d:1a:64:8b:43:d0:80:48:f4:7e:5c:46:ed:b6:43:46:06:34:
9c:91:3d:09:55:07:16:77:5d:c5:17:35:be:20:82:0c:d8:2c:
39:98:3f:26:0c:55:39:4d:ca:b8:5f:82:27:a1:8c:4c:2f:9c:
b3:a4:1e:ab:80:cf:70:fa:41:5b:4f:8b:a9:fd:e7:78:74:1e:
35:92:d7:51:25:fb:ab:0a:1a:06:c4:d3:91:21:dd:22:16:ea:
87:64:01:7b:24:52:94:2a:49:fa:55:95:33:89:30:83:9f:6a:
cf:b0:0c:c1:8d:3d:d3:4c:fe:fd:bd:40:d5:73:3b:b4:6b:5d:
1e:d1:0f:32:4b:e3:68:35:24:a1:62:1a:31:f3:28:10:79:8e:
26:04:a3:3b:c8:76:07:dc:66:49:c1:5d:38:97:14:51:31:75:
57:31:35:a8:6a:64:52:d5:c2:38:98:f6:f2:2a:4e:f6:95:71:
b6:0b:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:31:16 2026 by rpki-client