
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
File: LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft (raw, json)
Hash identifier: dBzditc1/yte3QNsxHnXSQVl7erLJfTxTPay5kiEwfA=
Subject key identifier: 8F:5D:A8:8A:AC:41:04:0C:E1:3A:BB:8C:4B:50:89:34:EA:2D:BE:93
Authority key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
Certificate issuer: /CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
Certificate serial: 06D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
Manifest number: 06D3
Signing time: Sun 26 Jul 2026 23:03:30 +0000
Manifest this update: Sun 26 Jul 2026 23:03:29 +0000
Manifest next update: Sun 02 Aug 2026 23:03:29 +0000
Files and hashes: 1: LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl (hash: 0/Y5PpqrpGuH8eyjKWK0dbgbSr/xkZHbxhq6HIISUQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl
rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B50D2, serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
Validity
Not Before: Jul 26 23:03:29 2026 GMT
Not After : Aug 2 23:03:29 2026 GMT
Subject: CN=6a669242-7a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:0d:ac:fa:06:93:1c:44:93:6a:0c:18:4f:
eb:d7:1c:c8:79:f8:40:c2:5a:c7:ef:4e:37:76:77:
88:99:1d:65:e0:ff:aa:b9:08:bd:34:93:34:36:1a:
38:55:b6:13:e9:03:ae:bb:65:e9:3a:d9:0f:9d:7a:
3d:14:87:cf:9d:8c:57:e2:78:cb:4d:f8:d7:f1:f7:
33:05:cc:54:1f:f1:77:fa:d8:e4:53:18:52:84:58:
b9:5d:60:f7:95:d0:7b:b8:18:69:f1:83:d9:0c:2b:
48:de:57:34:d0:c1:02:95:23:a4:e0:38:7c:c6:8b:
3c:40:4a:69:2f:4f:3b:59:ed:02:5d:a0:1b:3a:c0:
e9:e0:5a:46:b0:1a:6b:43:50:e6:9f:04:68:be:c0:
86:1b:e7:57:64:50:d5:20:c7:85:ed:d9:be:0d:91:
63:bd:e8:f3:2a:46:b1:e3:4a:78:a7:70:a3:72:6c:
46:ff:07:d4:04:eb:1e:b9:bd:ab:1f:96:db:42:c1:
94:19:07:47:08:57:a1:2b:59:e3:38:e5:2a:89:ca:
ec:87:e2:c5:5d:40:5e:a7:0f:21:39:3c:2c:db:73:
f2:7c:bc:8e:8f:bc:6c:02:da:bf:50:7f:28:ce:39:
17:2f:d4:d7:1f:f7:18:61:3b:c9:31:7c:1b:3b:ff:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:A8:8A:AC:41:04:0C:E1:3A:BB:8C:4B:50:89:34:EA:2D:BE:93
X509v3 Authority Key Identifier:
keyid:2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:69:04:81:a9:df:0f:bd:e4:e6:2b:ae:16:49:6e:74:a5:92:
9f:2e:30:54:19:ed:36:7e:88:14:eb:54:74:70:a0:b1:06:a9:
9e:f6:a5:d3:1f:f3:d3:fc:36:b6:96:a5:02:5c:7a:14:f4:d6:
5a:00:14:f1:cd:85:c0:71:61:04:81:85:48:b7:52:68:21:d2:
b8:e4:cb:9b:33:88:82:ba:46:e8:84:fe:a1:12:40:18:bc:09:
c2:32:eb:24:ff:54:7f:fe:6a:80:26:85:fa:b6:0f:67:73:18:
c9:d8:46:66:59:b7:ef:12:a6:f9:72:4e:ad:a7:05:c5:04:b4:
33:16:5d:ed:d0:cc:50:2e:f6:bc:17:e1:48:65:ae:01:8c:f0:
fa:dd:84:b0:b8:e6:10:7e:4e:04:88:76:6a:f3:a9:8d:56:1d:
28:47:19:64:b1:73:ee:d4:cd:3c:27:90:d6:ec:c7:55:07:dd:
3c:e7:25:31:31:f6:d8:8a:1b:a5:4b:ed:f3:cb:40:40:38:e4:
b3:c2:91:eb:c7:c0:d9:80:a5:0e:0c:31:18:fb:9e:e9:bc:84:
4c:ef:a4:94:ef:b9:41:9e:a6:f8:65:d0:97:33:48:07:74:34:
25:22:9b:46:63:3c:ee:09:09:3a:2d:75:2a:d3:4c:92:93:a1:
f0:f4:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:19:51 2026 by rpki-client