
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json)
Hash identifier: gP6QNdtUbbAUqndQVlON66wQbu4t57SLegQqF6Nh8cY=
Subject key identifier: DF:00:5A:0F:81:83:A7:EF:75:5F:F3:FF:BE:22:47:9B:6E:9D:EC:7C
Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31
Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
Certificate serial: 12D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
Manifest number: 12AD
Signing time: Tue 28 Jul 2026 17:10:14 +0000
Manifest this update: Tue 28 Jul 2026 17:10:14 +0000
Manifest next update: Tue 04 Aug 2026 17:10:14 +0000
Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: vKB9rcKLQbXTrGqSlAKKYq0k9Jaa2Lpom6vMLj0SqnE=)
2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: xwp+vsBFySucNW4Yhnh8sJi71zn8ZQofjYnVbPZEHro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl
rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4816 (0x12d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
Validity
Not Before: Jul 28 17:10:14 2026 GMT
Not After : Aug 4 17:10:14 2026 GMT
Subject: CN=6a68e276-1316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:e4:df:ca:98:ea:f4:a0:fb:57:29:7d:24:
27:15:7c:03:a0:04:49:7d:1e:76:bc:85:db:c2:ad:
1b:e0:27:7a:92:e2:79:d6:69:ae:73:7d:67:7d:d5:
b1:b7:dd:db:5d:9f:72:82:da:d3:88:64:0d:d6:80:
e2:93:5a:7b:be:24:d6:17:7b:36:b0:cd:c9:03:31:
bd:84:81:db:ad:43:b1:75:5c:2d:92:ae:7b:d0:e2:
4c:6f:3c:5b:33:4b:b7:de:7a:19:25:68:43:d6:61:
75:fa:bb:f3:bc:62:9b:20:6c:78:55:62:fe:67:1b:
db:a9:2a:64:dd:b4:5b:c1:41:8c:ac:e9:e9:4e:01:
0c:1a:d2:df:ce:2c:e8:59:56:36:1f:76:a5:58:b8:
73:2b:03:e7:d2:7b:f3:28:55:f7:27:da:4a:29:9a:
a8:cb:12:ed:b3:7c:fc:36:77:a8:70:b2:82:50:2c:
b3:f7:fc:76:ed:13:5e:df:cb:f4:ef:ca:78:51:ac:
4e:3f:1d:8a:7e:f5:2d:fe:d0:6a:f5:dd:3c:24:e3:
6a:96:52:91:12:04:06:1c:4b:80:67:94:87:37:f0:
56:f4:e6:8a:6e:19:ce:c2:00:9a:97:36:94:9c:8a:
e6:9e:fa:c2:60:01:ea:ca:1f:67:ae:39:a0:68:de:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:5A:0F:81:83:A7:EF:75:5F:F3:FF:BE:22:47:9B:6E:9D:EC:7C
X509v3 Authority Key Identifier:
keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:52:40:f8:4b:83:af:6a:ad:27:25:b9:cd:9b:f0:a5:5d:8b:
11:c6:9e:bb:3b:ea:97:9c:2c:c9:6d:8d:99:bc:91:40:39:9c:
03:b4:8e:9a:47:f7:fc:e7:2f:62:cb:64:1f:bf:7b:1e:d6:c7:
10:e7:8d:4a:89:1c:8b:9a:ae:18:dc:d1:f6:1c:70:7d:1a:f1:
e0:f2:50:43:0b:08:a9:9c:67:34:50:84:14:6b:f0:2d:27:d2:
9e:10:1b:88:ce:2a:e7:e5:b9:e6:ea:8f:a1:44:12:13:c4:df:
8e:e5:85:af:fa:85:1c:ed:35:c1:28:a2:7e:9e:ad:a7:7c:d6:
45:d7:68:50:bb:ad:03:7b:cb:b6:02:c8:58:01:ee:61:7a:4e:
77:a0:ce:f3:7e:7c:a4:8b:db:68:f7:0c:c1:a3:59:5a:62:85:
38:0b:e4:f7:e9:24:f8:99:b1:b1:50:08:7a:13:11:c2:e3:27:
57:0c:4f:8f:8b:e1:f1:c1:b3:51:12:42:8b:ad:02:64:c2:d5:
e5:4c:f1:a6:6e:c9:26:40:e2:a3:cf:18:c9:69:28:d0:a4:22:
8d:28:cf:1d:42:a7:11:4d:e0:5b:5b:0e:20:26:24:74:8f:96:
b7:68:28:e0:b8:32:1a:59:17:c0:cb:1b:a5:13:a8:ad:ac:36:
48:58:fd:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw
MTk4OEZGMzEwHhcNMjYwNzI4MTcxMDE0WhcNMjYwODA0MTcxMDE0WjAYMRYwFAYD
VQQDEw02YTY4ZTI3Ni0xMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlnk38qY6vSg+1cpfSQnFXwDoARJfR52vIXbwq0b4Cd6kuJ51mmuc31nfdWx
t93bXZ9ygtrTiGQN1oDik1p7viTWF3s2sM3JAzG9hIHbrUOxdVwtkq570OJMbzxb
M0u33noZJWhD1mF1+rvzvGKbIGx4VWL+ZxvbqSpk3bRbwUGMrOnpTgEMGtLfzizo
WVY2H3alWLhzKwPn0nvzKFX3J9pKKZqoyxLts3z8NneocLKCUCyz9/x27RNe38v0
78p4UaxOPx2KfvUt/tBq9d08JONqllKREgQGHEuAZ5SHN/BW9OaKbhnOwgCalzaU
nIrmnvrCYAHqyh9nrjmgaN7VwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8AWg+B
g6fvdV/z/74iR5tunex8MB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz
MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3
eUNoWUVzTVR6SGdCbUlfekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARFJA+EuDr2qtJyW5zZvwpV2LEcaeuzvql5wsyW2NmbyRQDmcA7SOmkf3/Ocv
YstkH797HtbHEOeNSokci5quGNzR9hxwfRrx4PJQQwsIqZxnNFCEFGvwLSfSnhAb
iM4q5+W55uqPoUQSE8TfjuWFr/qFHO01wSiifp6tp3zWRddoULutA3vLtgLIWAHu
YXpOd6DO8358pIvbaPcMwaNZWmKFOAvk9+kk+JmxsVAIehMRwuMnVwxPj4vh8cGz
URJCi60CZMLV5Uzxpm7JJkDio88YyWko0KQijSjPHUKnEU3gW1sOICYkdI+Wt2go
4LgyGlkXwMsbpROoraw2SFj9ww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:39 2026 by rpki-client