
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier: p6KRVcc9LznltThPBIS/Gxsl92plVEPTNsQdmqu7zGE=
Subject key identifier: 20:AA:BD:02:15:6A:54:6E:03:C3:A2:99:0D:6A:EA:2A:73:37:B6:0F
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number: 0146
Signing time: Mon 21 Sep 2026 05:21:13 +0000
Manifest this update: Mon 21 Sep 2026 05:21:12 +0000
Manifest next update: Mon 28 Sep 2026 05:21:12 +0000
Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: KCyoYue0in2NyS8+PfjoM0JqSEMggd5JgRVVKyNA2+w=)
2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: SlpOf782RmBcU6vc9OruiEeR0DjviJjgOX1TVRThoh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Validity
Not Before: Sep 21 05:21:12 2026 GMT
Not After : Sep 28 05:21:12 2026 GMT
Subject: CN=6ab0bec9-f700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:3d:1c:d0:72:05:7d:8e:5f:61:04:eb:dd:
5c:dd:12:58:eb:fd:69:c4:d0:96:07:12:0b:47:6a:
92:34:4e:09:9d:e5:4d:8b:89:58:a2:56:cf:3b:70:
6a:0d:4f:ec:cc:4a:5c:d9:22:ca:ec:d1:61:6e:3c:
c7:f6:1e:e4:37:3d:93:45:49:2a:29:42:a9:cf:6b:
2d:fe:94:f3:76:a3:5b:d7:53:06:80:c9:7d:4b:e1:
ca:89:06:96:e8:28:40:0a:56:eb:25:e2:3c:01:d6:
29:4e:b5:4b:f3:7f:4d:76:99:65:1f:68:6d:74:36:
b5:76:70:5b:62:17:2a:7d:8d:78:01:a4:e1:ad:e0:
ed:25:21:02:87:5e:02:4f:f4:8f:8c:8f:3e:bb:4b:
ef:1e:72:53:b2:84:ac:b5:f9:13:ee:b4:e1:23:38:
37:7a:ff:b9:ce:72:b4:c6:80:3b:27:01:a3:55:54:
22:63:74:57:ce:15:f0:dc:4a:1b:03:12:4f:ef:0d:
3c:f2:3b:01:f5:79:ab:7a:fc:f6:2b:ea:da:cf:28:
e1:78:01:f7:d8:2d:f0:ec:29:8e:63:4f:da:72:d1:
48:f7:06:81:54:1c:fe:c8:02:cf:5e:d9:84:51:22:
b9:8d:a9:c0:8e:d7:26:1d:6b:4b:3e:a2:9d:4e:32:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AA:BD:02:15:6A:54:6E:03:C3:A2:99:0D:6A:EA:2A:73:37:B6:0F
X509v3 Authority Key Identifier:
keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:ca:58:9e:6d:7c:24:fb:13:b6:1d:1e:3f:32:76:b4:6a:29:
be:72:dd:90:a8:d9:8d:c1:82:12:4c:39:ae:85:f6:46:6e:ee:
bf:a3:7f:5f:b5:aa:e6:13:f0:92:a9:b5:d7:7a:63:f0:0b:63:
de:3b:8c:8b:d5:2d:eb:77:39:3c:33:88:e7:34:fc:9f:57:30:
f4:0a:78:6a:dd:3f:97:d0:a5:5c:e5:54:b0:92:b3:77:b1:5b:
56:29:fa:d9:c2:36:79:e1:b5:08:03:42:15:ec:82:b6:09:10:
11:55:95:8c:23:9d:62:47:a4:c3:75:a9:fa:18:af:7e:2c:4d:
38:a5:ff:80:ff:ae:d3:3f:42:91:c2:c1:d4:57:5f:30:ad:9c:
ed:0f:29:e4:19:1f:9b:e6:dc:f7:4e:70:6e:79:4d:f1:0e:bd:
9b:cd:69:0b:d2:c4:65:99:78:67:99:a0:16:be:7e:0f:30:e9:
12:83:16:1c:c5:e5:fe:c3:dc:b0:bc:df:66:cd:68:2f:b0:ea:
67:99:05:6a:d7:eb:83:04:92:31:5a:58:65:22:5a:89:30:f1:
f1:89:51:0c:b3:ea:d3:e4:d1:28:ce:ba:2e:f8:b1:39:24:68:
84:0a:df:fa:91:3e:51:86:3f:61:dc:58:f6:3c:cc:db:56:51:
4b:7f:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:54:06 2026 by rpki-client