
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json)
Hash identifier: 6an46UJdQVyuqtPLKepe+ASt7VJKatVkI8UkoAHz2k0=
Subject key identifier: D1:22:EB:5D:1D:17:A4:01:B0:31:DD:49:55:92:8F:C9:08:45:C8:69
Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Certificate serial: 0C83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
Manifest number: 0C66
Signing time: Sat 10 Oct 2026 18:45:34 +0000
Manifest this update: Sat 10 Oct 2026 18:45:33 +0000
Manifest next update: Sat 17 Oct 2026 18:45:33 +0000
Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: uJ+k7b6vWn0uhtYKhtkKpdiLPcZnMi6163QzsUpvssk=)
2: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: 1aYucsJJizOrJGwERLeDG0d5XIi/bHOIooEKsMrUEo8=)
3: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: QfT2Eaqv5QPDrORQi1WneHGHYWsLdTVYS3iMbBaZBv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 18:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3203 (0xc83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Validity
Not Before: Oct 10 18:45:33 2026 GMT
Not After : Oct 17 18:45:33 2026 GMT
Subject: CN=6aca87ce-0107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:73:7f:71:ea:c9:7f:46:fe:09:9b:74:b3:
af:f7:8e:24:2b:b6:f7:99:dd:d5:39:f1:ba:47:3b:
f6:d7:fe:c4:32:fe:19:e5:d2:1a:3d:fc:7c:2f:09:
93:94:a9:22:ee:f1:1d:51:a2:7f:7a:d1:19:9a:93:
d5:1c:9d:88:d2:3f:96:bb:67:e2:6e:c9:5a:2a:1e:
4e:91:cf:e3:13:78:02:cd:4a:8b:fb:ed:16:ba:ea:
56:05:74:77:e6:48:b0:16:11:65:3a:48:d3:1f:8b:
49:c7:69:00:75:bf:36:d4:53:aa:42:59:b2:cf:27:
a2:49:8d:61:13:84:d2:e9:ec:fe:9a:60:04:30:0f:
14:4b:31:5e:7e:22:84:8e:33:d7:a4:d9:73:79:88:
df:55:dd:26:1b:c4:c2:38:b8:69:cf:69:61:02:fa:
cc:2c:71:54:32:7c:1e:31:a8:ae:1a:f1:3c:ff:31:
e0:ae:99:16:cf:ab:c2:b6:91:16:fc:21:c3:d8:8c:
24:d4:1b:67:34:36:e0:3e:89:bf:77:42:52:19:c3:
ef:22:e7:1d:58:a0:9f:e8:d7:62:a2:73:23:dd:d9:
3f:aa:20:80:04:83:20:cd:b9:3b:91:57:d8:03:f3:
77:c3:6f:5f:e3:c3:1c:f9:52:f1:91:2e:b7:a6:86:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:EB:5D:1D:17:A4:01:B0:31:DD:49:55:92:8F:C9:08:45:C8:69
X509v3 Authority Key Identifier:
keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:cf:9f:9c:0c:c6:6f:85:06:b5:15:1c:2b:bd:96:f8:e3:27:
70:aa:dc:05:a9:d6:f2:71:31:20:76:60:83:b2:97:b7:11:93:
b1:1d:a7:74:64:86:74:1a:e3:bd:22:72:a0:9f:64:07:91:38:
e7:b7:4c:cc:39:1b:94:de:d4:c3:fe:d3:0a:5c:07:6e:32:e9:
68:ea:e9:44:7f:c7:9c:32:25:8b:66:21:d7:e2:ca:8b:2d:52:
80:ca:2b:fd:75:e0:1b:20:6c:e5:d5:53:70:83:9e:11:c6:e2:
5d:f3:d7:7d:44:87:a8:61:46:a8:70:59:ce:f4:9a:4d:ec:1a:
71:d1:85:b9:de:d9:60:6c:a6:bd:68:db:0e:93:cd:65:73:ab:
29:da:2f:a0:b8:1f:17:40:f2:34:dc:c4:31:fc:b1:c2:90:10:
34:b2:1a:87:c9:c0:c5:77:af:02:47:f4:d0:16:6e:90:96:6b:
0b:14:a6:59:51:ac:78:a1:52:e9:20:f5:da:83:81:40:8d:87:
d8:af:d7:e5:8d:fc:a6:6c:12:27:11:f0:68:5b:a3:3a:dc:71:
98:c4:58:c5:d0:24:4b:d4:b5:69:0b:0d:5e:d5:e4:8b:5c:cd:
cc:54:40:78:05:d4:30:97:1d:b4:6d:cc:80:91:e0:82:98:0f:
4b:8c:9d:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3
Mzk4MEE4MTAwHhcNMjYxMDEwMTg0NTMzWhcNMjYxMDE3MTg0NTMzWjAYMRYwFAYD
VQQDEw02YWNhODdjZS0wMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzYZzf3HqyX9G/gmbdLOv944kK7b3md3VOfG6Rzv21/7EMv4Z5dIaPfx8LwmT
lKki7vEdUaJ/etEZmpPVHJ2I0j+Wu2fibslaKh5Okc/jE3gCzUqL++0WuupWBXR3
5kiwFhFlOkjTH4tJx2kAdb821FOqQlmyzyeiSY1hE4TS6ez+mmAEMA8USzFefiKE
jjPXpNlzeYjfVd0mG8TCOLhpz2lhAvrMLHFUMnweMaiuGvE8/zHgrpkWz6vCtpEW
/CHD2Iwk1BtnNDbgPom/d0JSGcPvIucdWKCf6NdionMj3dk/qiCABIMgzbk7kVfY
A/N3w29f48Mc+VLxkS63poZtOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNEi610d
F6QBsDHdSVWSj8kIRchpMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy
MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj
d1pvTFU1UFZXLWR6bUFxQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZs+fnAzGb4UGtRUcK72W+OMncKrcBanW8nExIHZgg7KXtxGTsR2ndGSGdBrj
vSJyoJ9kB5E457dMzDkblN7Uw/7TClwHbjLpaOrpRH/HnDIli2Yh1+LKiy1SgMor
/XXgGyBs5dVTcIOeEcbiXfPXfUSHqGFGqHBZzvSaTewacdGFud7ZYGymvWjbDpPN
ZXOrKdovoLgfF0DyNNzEMfyxwpAQNLIah8nAxXevAkf00BZukJZrCxSmWVGseKFS
6SD12oOBQI2H2K/X5Y38pmwSJxHwaFujOtxxmMRYxdAkS9S1aQsNXtXki1zNzFRA
eAXUMJcdtG3MgJHggpgPS4yd2g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:45:01 2026 by rpki-client