
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier: gBcZR6M/TyRuXXA6Qcfs0qfQtTqfzVTHkm9RkRJyZSo=
Subject key identifier: D4:C2:9B:3A:52:53:7D:5F:13:0B:38:AE:70:60:EE:8F:F2:42:D1:24
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial: 07EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number: 07D9
Signing time: Tue 22 Sep 2026 21:08:54 +0000
Manifest this update: Tue 22 Sep 2026 21:08:54 +0000
Manifest next update: Tue 29 Sep 2026 21:08:54 +0000
Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: PYNymVXzhqNTRx+DwWGQ2UmZbAbZXQhdXd8+qMamLfA=)
2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Validity
Not Before: Sep 22 21:08:54 2026 GMT
Not After : Sep 29 21:08:54 2026 GMT
Subject: CN=6ab2ee66-88ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:09:3e:93:84:50:b9:23:74:37:95:de:06:
6b:3b:a3:52:03:c1:d2:c4:b9:8d:67:07:59:58:6f:
bd:7a:d5:37:62:bf:96:7c:3b:1a:a0:32:3b:80:a3:
97:f5:c8:2a:66:3c:7c:8c:9a:a7:9e:58:e2:21:54:
f3:55:f4:41:49:ea:42:da:b1:fb:1b:ba:ee:df:d4:
59:2c:cd:93:c1:ba:d8:77:2c:5f:e7:14:cd:d4:27:
81:7a:b0:2c:57:55:5e:fe:f4:76:fa:b0:d7:f8:22:
85:5f:2a:26:62:cd:f3:00:7a:4d:b9:16:44:67:f8:
7e:24:7c:0f:3c:72:b3:0e:79:c8:62:35:9d:40:2a:
dd:78:07:64:0b:a3:60:2a:a3:ed:65:24:76:f0:f7:
4a:34:fb:a5:2b:01:db:a7:ac:b2:9d:25:39:18:c8:
6f:65:7e:4a:19:21:db:a0:5a:bb:39:44:a2:8a:8d:
c2:eb:d7:c3:93:01:2a:77:99:3d:7c:44:27:16:d7:
7c:1a:70:e3:c3:f9:44:51:06:35:6f:74:83:03:cf:
20:f4:e0:9a:3c:9e:b5:c6:6f:a1:89:b2:85:9b:28:
43:ad:fe:25:8b:38:ef:18:60:b3:fa:73:dd:47:30:
1c:8a:d8:9f:26:e7:24:cd:30:01:b1:d9:a3:8b:97:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:9B:3A:52:53:7D:5F:13:0B:38:AE:70:60:EE:8F:F2:42:D1:24
X509v3 Authority Key Identifier:
keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:8d:f2:60:aa:da:6e:18:a6:85:cc:1f:d2:a7:09:98:ad:c9:
5f:dd:a5:75:76:ed:b3:cb:01:8d:d1:86:f4:8b:34:d2:08:e8:
08:11:8b:44:40:d0:d6:f0:fa:7c:98:75:58:83:e4:99:21:0b:
eb:ff:17:c4:c9:5f:fc:1c:0a:d5:89:60:01:f9:35:41:ef:1b:
0a:d1:6c:64:c2:7f:8f:3c:97:77:fe:5e:56:87:68:f7:9c:c4:
fa:7d:e9:98:0e:32:ec:dc:12:8d:ea:37:bb:9e:81:1c:bd:56:
3f:72:10:a2:b3:29:f4:ea:4c:a1:bd:2a:23:2c:ef:00:8a:dc:
6e:71:25:8e:8c:58:df:d5:b4:73:c8:df:a1:6f:91:df:e9:f3:
2f:3a:2b:ce:d0:80:50:23:06:e0:27:57:06:d1:f3:23:9b:e7:
86:8f:79:81:2a:98:14:c9:ac:61:76:ab:3c:10:b2:b6:bc:9f:
cc:4f:a7:0e:fd:50:11:b7:eb:ba:a5:8a:ba:6f:d1:fe:9c:ee:
5e:c7:15:87:6b:47:7e:c8:91:9c:2b:34:55:50:dd:58:56:6e:
f0:3e:1a:75:b1:3d:4e:0c:96:e3:eb:e1:f7:36:2f:ac:de:c4:
d9:a7:35:f5:c9:f2:91:c8:55:10:cc:f8:0b:dd:11:33:7b:20:
73:c3:e2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:03:53 2026 by rpki-client