
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json)
Hash identifier: VHLEBZBjKAJGKsFS6E0K1e17I8C1989KNH8B3OPSbLA=
Subject key identifier: A7:46:39:6F:08:8C:9E:10:68:94:DC:17:22:DB:9B:40:11:BC:26:ED
Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83
Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
Manifest number: 01E8
Signing time: Mon 27 Jul 2026 05:05:32 +0000
Manifest this update: Mon 27 Jul 2026 05:05:32 +0000
Manifest next update: Mon 03 Aug 2026 05:05:32 +0000
Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: L4jD3hCkwusa+2w2OC395LZEBCY43S+R6tfN5wvHRzI=)
2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: 341ByImzn/WsspGGEhwYJpQ72ArO+/p3lUbnRz/LSbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl
rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
Validity
Not Before: Jul 27 05:05:32 2026 GMT
Not After : Aug 3 05:05:32 2026 GMT
Subject: CN=6a66e71c-dfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:de:4b:3c:a1:6e:fb:10:e6:cc:8d:f0:39:
b1:90:84:f1:dd:50:6c:35:ce:0b:72:11:cd:20:43:
f9:e1:66:cf:86:6e:f2:6c:88:36:2e:a5:85:aa:3b:
c1:c8:d7:3f:0b:08:11:aa:2c:1e:9f:9c:65:69:ee:
5c:d2:4b:93:bb:b0:b1:40:55:a3:2f:8e:c0:2a:3f:
3e:79:64:ed:9e:87:e1:38:31:14:6e:0d:82:36:f3:
20:29:e8:09:74:c9:28:6d:3d:f5:77:5f:f4:e2:29:
02:c2:37:0f:d3:2b:58:7c:20:16:86:cf:28:79:06:
1c:6f:3f:7b:2a:7d:90:26:fb:cb:00:23:4b:d9:54:
e3:57:6c:30:93:aa:e1:d0:e6:18:2d:15:b2:0e:f7:
fd:76:cc:bf:75:34:83:b2:e5:54:98:0c:e2:ca:01:
92:30:78:c3:b2:0a:50:d2:09:77:ab:4a:4c:1c:f1:
3e:0a:11:db:db:c5:64:25:c6:5a:f4:42:a6:4f:11:
a4:9e:ba:91:18:8a:97:3d:7d:69:0a:19:60:9e:a1:
78:5c:0d:e6:3e:b2:35:56:c9:b8:dd:1b:e6:86:1f:
b9:8e:aa:d7:fe:40:2e:7e:85:08:78:50:5b:af:fb:
56:88:f7:d7:1e:7c:44:a3:22:79:14:2e:86:9f:bc:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:39:6F:08:8C:9E:10:68:94:DC:17:22:DB:9B:40:11:BC:26:ED
X509v3 Authority Key Identifier:
keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:b4:8e:a8:8b:08:0d:33:9c:5d:8b:43:ea:c8:1f:f4:0d:1f:
b1:1a:a1:32:39:2d:9e:86:71:83:66:14:a8:10:8d:be:ed:87:
c1:8a:33:48:f1:0d:2d:3a:d8:aa:31:e3:0f:34:a1:17:92:42:
47:98:fc:e8:4d:ea:3a:f4:0f:f9:44:ec:80:db:70:93:0c:c5:
58:a7:84:7d:43:09:5f:d9:2e:b8:23:aa:99:23:8e:10:20:b2:
99:6e:d6:9f:72:b6:65:bf:c4:c8:e9:06:8d:e0:84:e9:a3:62:
99:98:dc:7a:b4:cb:b4:da:9a:3a:f5:03:d3:a1:a5:8f:02:14:
40:ca:43:a1:e6:56:63:f3:49:a9:6e:f6:5c:5d:00:58:48:7a:
c3:83:ac:f5:89:5a:55:75:b1:70:b2:16:cf:08:ae:7b:84:c0:
58:0d:e1:31:51:20:69:b4:ea:59:35:4a:0c:75:6f:f9:3a:b8:
95:00:27:4d:fc:7d:ac:c4:31:ef:e7:ec:94:a6:ff:1e:dc:0a:
d0:8e:df:19:b1:30:2e:a2:70:59:9c:68:df:06:ef:cc:33:10:
ab:75:b2:60:57:85:cb:75:9a:c8:b9:c1:5c:2e:a2:ef:ff:91:
cf:7a:fa:c2:f8:ce:c0:6e:bb:ee:6c:0b:a2:3c:d4:e7:e8:8f:
34:dd:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:27 2026 by rpki-client