
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json)
Hash identifier: UhvAHDF5G7W/IBVRySquOPhkwKTET38yFT+aPNt0Xd8=
Subject key identifier: 48:41:24:7E:8C:14:EF:28:89:33:45:D6:6E:6C:C6:B7:F3:5E:C7:46
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 065F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
Manifest number: 0608
Signing time: Thu 08 Oct 2026 23:13:16 +0000
Manifest this update: Thu 08 Oct 2026 23:13:16 +0000
Manifest next update: Thu 15 Oct 2026 23:13:16 +0000
Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: Di7sSMvuTc0G8BTcG85Adr2liZ0ZvQuSaiivfOJNL3Q=)
2: F88F642285E411EEB951413BC4F9AE02.roa (hash: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=)
3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=)
4: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=)
5: 74489676FBF711F0B6045B12716F56BC.roa (hash: PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=)
6: B8BE560A4A1311F1B8639EABC7833773.roa (hash: 0shpOtzz25Mvg5oIuXMAte2E3hh2gNHtDigSWNBabd4=)
7: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=)
8: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: PGfOZ8aur6eFpfgp1qb3p6zkq3ccsWlLdh66JdofFDY=)
9: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: loULOkxTyFtV5eU4JwAnNk7SaUEpMQGahUv+OEZBH2g=)
10: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Oct 8 23:13:16 2026 GMT
Not After : Oct 15 23:13:16 2026 GMT
Subject: CN=6ac8238c-913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d2:03:48:67:0a:5f:d9:8a:e0:33:0e:fa:4d:
02:d6:a3:05:a1:c0:20:6b:b0:2a:94:05:90:c5:dc:
4c:f8:6e:aa:f1:a8:d7:31:4d:82:ab:f8:65:4a:3c:
25:f4:68:2a:fb:db:fe:e0:9d:06:9a:09:c8:b9:3a:
be:f9:1f:db:8f:47:c6:8b:8b:79:7b:cc:22:37:cb:
29:dd:70:24:14:67:42:bf:70:c4:aa:43:91:57:01:
a2:87:5b:c6:a1:40:a7:6d:00:49:8e:7d:0e:7b:f9:
94:5c:a0:22:5d:c7:de:fe:47:f0:39:a1:2d:8b:45:
a1:33:aa:de:f7:67:e5:b9:5a:c8:2f:37:6a:b0:c8:
5a:d6:42:05:af:a5:e8:78:b5:c4:39:57:ab:25:aa:
f3:60:44:a8:51:f5:7d:9b:ba:14:3c:1d:71:df:94:
db:72:38:a6:e3:87:ec:14:15:ef:aa:96:d7:95:fe:
05:55:8e:d6:55:c6:46:3a:45:5e:1a:cb:8d:89:75:
c7:ce:35:14:d6:24:d8:67:01:f8:a3:c9:7d:6f:88:
97:6c:5a:47:dc:82:32:5d:d2:7f:87:b6:33:f1:64:
28:78:16:6e:56:55:60:a3:4b:71:be:2a:f7:cf:3f:
86:0e:77:44:da:22:93:a6:c9:73:7b:92:9b:9f:02:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:24:7E:8C:14:EF:28:89:33:45:D6:6E:6C:C6:B7:F3:5E:C7:46
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:54:c0:ff:d7:d3:20:ff:24:93:ca:b2:ad:d9:09:f6:09:e7:
5b:f2:62:af:ad:79:88:e5:e5:61:53:62:82:4a:c2:2c:b6:1d:
1b:2a:83:01:8e:1e:6e:9e:32:39:09:a5:01:91:4d:42:f3:a7:
1a:8b:96:16:10:28:89:34:42:24:a7:c5:02:38:09:32:85:d0:
de:29:ca:08:b5:79:e4:46:5d:84:76:c3:4d:25:d6:97:68:65:
7f:57:95:29:4f:df:bb:1b:b1:a8:e2:f1:43:38:97:b1:11:5d:
06:82:d9:6c:a4:16:08:ea:90:47:39:43:6a:65:58:fe:73:34:
d2:74:f2:a3:31:44:e6:2c:60:40:44:59:57:3d:6c:e1:e9:9c:
a3:cb:13:60:01:1b:8e:94:ea:3b:65:6b:6a:9f:e1:b5:fd:29:
f9:bb:9a:83:1e:f9:e3:9f:8e:02:33:eb:fc:47:39:f4:f1:95:
f2:3d:b2:c6:4a:ae:a0:a3:b9:bf:c3:6e:3e:5d:f8:c3:01:bc:
3e:91:8b:08:47:53:57:ab:d9:6b:7f:05:53:b8:b9:e1:af:ac:
07:dc:4a:6a:8b:21:f2:f6:db:60:02:ff:80:27:90:5d:34:8d:
d3:60:5f:ab:6d:18:f0:8b:8b:87:cb:1a:a6:7e:39:e1:4c:30:
ff:63:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:06:54 2026 by rpki-client