
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier: rc6lNeRZ6Qjk15zL9EdGhkjmpgYm8aRiaA/2kfDg+2k=
Subject key identifier: 86:CB:B5:26:1B:92:AC:CA:75:89:E3:78:A0:6A:35:86:EE:1C:F3:C7
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number: DB
Signing time: Mon 27 Jul 2026 08:46:19 +0000
Manifest this update: Mon 27 Jul 2026 08:46:18 +0000
Manifest next update: Mon 03 Aug 2026 08:46:18 +0000
Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: TBoqxzwe/nDtdRw0aRwLLROkZxGyBuCssHfbCcxg7ys=)
2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: XsH+IJ5SSw5cAUWIZZhkMzbgbFC8kkMlwg6uRhNZXvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Validity
Not Before: Jul 27 08:46:18 2026 GMT
Not After : Aug 3 08:46:18 2026 GMT
Subject: CN=6a671adb-113e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:4f:fd:93:f4:f7:2f:97:4f:84:d1:fe:c7:
a0:b7:7c:e0:c5:eb:0e:94:aa:6c:bc:ff:0e:a6:5a:
a3:a5:bd:7f:af:18:3f:79:0a:64:f3:7d:8f:d9:50:
e3:e0:40:71:8c:25:fb:a9:a7:f6:f5:fa:bf:d2:65:
65:fb:11:fe:c1:5c:97:9c:f1:8a:7e:12:19:83:b0:
ac:ec:fc:5b:2b:61:05:b8:36:9a:5e:44:e8:31:65:
2a:0b:c1:e9:37:46:79:6d:db:5b:ec:90:9a:39:fb:
b8:28:6f:73:10:75:d4:3c:1d:7e:c3:1f:12:81:a3:
37:3e:9f:a1:a1:0c:9b:cd:bd:da:3f:5a:e2:a0:14:
66:c8:94:73:89:42:64:0b:5c:6b:20:c7:73:e5:ea:
08:f6:39:7d:db:18:71:05:98:bb:a5:ff:dd:6f:35:
03:05:4c:87:ad:20:cc:87:b3:af:68:d5:67:45:0c:
12:ce:b8:a8:4f:95:ee:27:b1:27:fc:c9:cb:c5:fb:
72:f9:29:1a:49:3e:2e:16:c8:ab:10:b8:e4:05:83:
2f:4c:a8:d2:37:38:d8:d6:55:68:3a:7d:58:d5:c6:
58:47:8c:13:b8:d3:0f:b1:27:8a:ea:8c:62:8b:62:
c4:5e:73:1b:7f:6a:0a:e4:62:2e:d3:98:66:29:79:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:B5:26:1B:92:AC:CA:75:89:E3:78:A0:6A:35:86:EE:1C:F3:C7
X509v3 Authority Key Identifier:
keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:32:cc:75:10:46:f5:02:0b:1a:e0:b1:af:e4:dc:85:76:bb:
3b:78:9a:75:2b:e7:b4:79:20:af:5b:42:da:a2:5b:81:02:f9:
4b:ba:68:36:9a:1d:76:ae:ba:ef:cc:85:5f:14:87:83:df:55:
56:0c:05:b1:fd:3e:c4:96:dd:6b:18:a1:4c:d6:aa:b0:0a:0b:
10:62:d6:3a:7a:a9:39:6c:fe:05:ec:a0:23:8d:75:79:7a:ef:
84:f8:10:9f:78:9f:ea:a0:41:73:f3:a2:b9:ae:61:af:d9:4c:
6f:44:0d:11:42:31:dc:cf:21:9a:b7:6d:7a:8b:cc:5f:14:3e:
d3:35:65:ea:56:cf:d8:42:bc:2b:91:69:2d:30:c6:34:5f:58:
dc:a3:e6:94:cc:62:bd:ec:68:2c:5a:d4:ec:d5:9e:6d:76:d4:
bd:c1:cb:24:4e:e8:86:be:fb:e7:e8:b9:68:df:4d:f9:60:d5:
99:f5:94:ec:76:6f:a6:4f:b9:06:e6:37:57:da:82:b4:55:ba:
94:74:cd:18:47:d2:53:d1:fc:fa:ff:14:66:79:9e:b0:74:fb:
7a:d3:4d:f1:88:dd:48:65:2c:d5:af:a2:98:71:46:89:33:c5:
b8:a3:80:1a:89:07:73:24:93:7e:71:30:12:ac:2b:c7:c1:eb:
bb:93:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:55 2026 by rpki-client