
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier: suK9ewhBv27nLTFG4A/JoSkN6farFm4Wze8FvZAnZWA=
Subject key identifier: A4:9A:78:FF:4A:75:D4:32:90:88:7A:2E:C1:B4:7D:2B:16:3E:C0:7C
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial: 08B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number: 08A3
Signing time: Sun 20 Sep 2026 20:37:44 +0000
Manifest this update: Sun 20 Sep 2026 20:37:43 +0000
Manifest next update: Sun 27 Sep 2026 20:37:43 +0000
Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: sYFDKjfj11ESs440rr/3aJJJBhYBUiHb2cx7a1ropWc=)
2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: qWStS0v5bHsp5UQ+CjZRahzRxVHNB9C2cwcqgmnOyvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Validity
Not Before: Sep 20 20:37:43 2026 GMT
Not After : Sep 27 20:37:43 2026 GMT
Subject: CN=6ab04418-cac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:f7:cb:79:17:f3:fd:6b:65:fc:24:71:29:
88:03:4d:57:74:25:0a:3b:ca:9c:16:6b:69:2c:97:
f0:d3:12:3a:2a:74:64:c6:21:40:ca:6e:85:07:c1:
16:a4:0e:2e:80:f1:2e:b0:8f:7f:67:a2:31:f9:c7:
5e:16:90:a1:19:19:f4:46:0a:02:4d:c2:4d:5c:b0:
5a:8d:76:9a:e2:5e:29:48:47:42:8d:c4:56:5f:cc:
9b:44:8d:12:ef:02:b0:0e:42:29:00:dc:8e:14:80:
70:a0:82:d5:c3:65:b8:4d:b9:e2:36:22:01:49:00:
a5:3c:73:13:14:8e:f6:51:99:71:05:20:6a:7e:c4:
20:84:45:3e:70:07:17:18:09:81:a9:eb:12:4e:66:
08:90:9b:18:c6:01:60:0c:02:96:09:2f:97:c3:9c:
a2:30:ef:dc:37:92:3d:df:f0:1b:b1:7d:09:48:b0:
73:29:63:d1:4d:4e:e0:d9:d9:ab:ae:8e:ca:50:17:
d6:e2:48:89:3f:17:ad:7d:58:7b:3d:ac:b6:35:4d:
90:cb:83:71:e1:27:b9:1c:e7:45:06:bd:32:ba:c1:
13:29:75:15:f0:ba:ab:f6:7e:fa:3c:b8:89:1c:fa:
f6:46:be:60:91:c7:35:b7:90:1e:d9:fb:1d:be:16:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9A:78:FF:4A:75:D4:32:90:88:7A:2E:C1:B4:7D:2B:16:3E:C0:7C
X509v3 Authority Key Identifier:
keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:35:40:9e:c9:38:0b:6e:cd:3e:51:23:f1:86:0b:42:b7:8d:
7f:63:9c:cb:55:1c:06:92:c1:55:ca:e0:88:b9:d2:bb:76:95:
4c:52:58:e9:5a:8e:04:11:5c:6a:c2:fb:5f:9c:c7:f7:a2:35:
ed:a1:36:1f:69:85:1f:1f:10:c7:ee:45:8e:73:ff:90:bf:ce:
0b:1f:da:ac:c2:6e:b7:72:6a:48:99:b6:79:49:34:bc:22:ee:
78:f4:43:90:33:fc:c4:8e:28:56:c9:12:c1:81:ce:63:4a:c9:
81:0d:a8:23:24:65:3e:e1:50:21:52:75:1f:29:2b:b8:d3:7a:
18:96:5d:b0:10:a3:5f:9d:45:10:8c:e9:ad:6e:b3:9f:19:e3:
39:b1:0c:ec:d4:51:ee:82:c6:a6:08:d7:8b:e8:c8:80:a7:11:
99:c4:2f:9a:47:5e:c8:3d:e5:21:45:e6:51:c4:53:fd:8e:c3:
b0:bc:60:af:58:11:4b:ea:52:1c:ab:9f:8e:72:12:0b:52:4f:
92:d7:00:fc:b7:38:25:77:26:f6:2d:52:97:b3:47:e4:16:5e:
d5:2d:42:42:16:10:65:af:64:97:ec:fa:21:29:63:33:58:e3:
70:c6:e1:43:ab:61:bc:be:36:50:52:70:d2:02:ab:5a:bf:f7:
84:14:d8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:09:54 2026 by rpki-client