
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json)
Hash identifier: SPeAR8nRuNQQGF8iOG2aauOGILosgjoWkE+HpztItZw=
Subject key identifier: 85:83:9E:87:D5:A7:78:1D:7C:DA:9C:E1:81:44:91:DF:75:FD:B5:1F
Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Certificate serial: 073E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
Manifest number: 0734
Signing time: Tue 28 Jul 2026 22:24:58 +0000
Manifest this update: Tue 28 Jul 2026 22:24:57 +0000
Manifest next update: Tue 04 Aug 2026 22:24:57 +0000
Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: SQ1KXT8QLjryXJ3cbBpH/1k/lsDcIVREe3JL/pLjT+0=)
2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: X5seaG41aTTcYS0YJ5ID592qQAd6TABWJEt0PwhEjdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854 (0x73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Validity
Not Before: Jul 28 22:24:57 2026 GMT
Not After : Aug 4 22:24:57 2026 GMT
Subject: CN=6a692c3a-0881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:69:f5:4c:1d:06:6c:7a:3d:54:bd:e9:c1:
b7:07:69:5a:87:31:9c:bd:76:90:6a:18:9e:85:cd:
3e:fa:b5:15:8f:70:69:e1:89:26:cb:d5:2f:15:0d:
33:05:05:2d:b5:bb:16:37:dc:f4:72:41:d2:3c:f3:
5c:a2:a4:2f:24:d5:b6:6f:61:f6:73:be:8c:7b:90:
6d:6d:9a:a1:ff:75:8d:65:f2:c3:2b:2e:c0:cf:f3:
a2:f7:21:75:e7:44:00:84:22:ed:10:c9:33:da:c5:
c3:b0:c2:97:eb:5b:63:27:8a:57:e6:7d:7f:5b:09:
66:bc:20:97:b6:0d:3c:7e:fe:c8:60:d0:8e:c5:17:
e6:bf:15:d9:2a:db:bb:67:62:b4:b9:eb:6b:7d:45:
c8:c5:10:b0:29:0c:71:ec:be:de:6e:8e:f6:00:3e:
6a:6d:26:63:cc:0d:b5:55:d0:e3:5d:3f:00:11:5f:
06:de:91:9e:9e:1a:25:2b:20:51:62:d3:35:99:fb:
e2:e3:24:72:13:12:77:91:58:86:6e:cf:b1:7a:8f:
e1:a7:08:c9:4e:70:d8:17:14:ff:ad:31:d3:d8:a7:
a2:e6:cd:4b:79:44:bf:f4:fa:99:47:d8:0e:d1:03:
d2:b1:92:e0:5b:13:08:7d:66:df:a1:f3:10:ee:33:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:9E:87:D5:A7:78:1D:7C:DA:9C:E1:81:44:91:DF:75:FD:B5:1F
X509v3 Authority Key Identifier:
keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:76:9e:37:de:57:0d:ec:69:2f:02:e1:ad:94:0b:d8:67:75:
4e:ad:3d:4e:70:92:8a:4c:94:69:5b:ab:c2:2f:f3:2f:a2:b0:
4c:8f:3c:87:83:82:f3:3a:ca:85:cd:e7:4b:ad:98:f1:15:83:
ac:fb:de:f5:2b:ee:c0:db:06:ff:67:3f:a1:a9:d1:f6:54:53:
f3:0e:50:fa:e1:6a:61:4a:00:3f:da:19:9d:d5:f6:3f:15:ca:
f1:d3:6e:68:7c:f3:65:85:7c:9a:14:9a:5c:f1:b2:8a:71:21:
a4:76:82:2d:02:7f:f3:db:31:b1:73:74:72:2d:21:57:c3:1d:
c3:9a:ce:c8:c4:f4:fe:58:b6:ec:3f:51:ad:6e:59:eb:89:92:
4c:e3:cf:d2:fa:4d:e5:ee:1a:b5:21:20:24:7c:08:9a:2a:1a:
54:c5:96:0b:d7:02:cd:29:47:10:90:a9:e2:50:f2:2b:ad:68:
49:47:af:37:12:aa:e7:56:d6:55:76:37:f7:4f:f7:61:43:ef:
82:c9:05:6b:8d:2a:30:b0:d7:fc:41:88:63:c2:44:ec:bc:30:
c6:6b:2c:2d:c2:8e:a3:e5:3c:82:64:5a:e1:86:a2:1c:b6:11:
de:d9:55:6f:bd:6c:42:58:d7:f9:da:24:46:37:76:76:ef:f8:
cc:ed:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:54:52 2026 by rpki-client