
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json)
Hash identifier: ZYVdp+pFR3YZIylpdiXRx2UN6OSbPy3aDh+raotQ6hU=
Subject key identifier: 57:13:6D:E7:86:3C:FF:A3:7E:D0:25:4B:73:90:B0:C6:45:84:24:D2
Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
Manifest number: 08E8
Signing time: Sun 26 Jul 2026 20:54:39 +0000
Manifest this update: Sun 26 Jul 2026 20:54:38 +0000
Manifest next update: Sun 02 Aug 2026 20:54:38 +0000
Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: SxZVyUk3VN7thPalWwM8ZdGWOUjsOcFLWXVwbP6oUgY=)
2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: ZvW50NxBS75UluAXlHVMuxFqxEWVEP7STBY/nxFqOto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Validity
Not Before: Jul 26 20:54:38 2026 GMT
Not After : Aug 2 20:54:38 2026 GMT
Subject: CN=6a66740e-1709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:bd:fb:d6:54:87:b5:26:4a:3b:8b:6e:d4:
92:85:cf:10:42:52:ae:e1:5d:63:ed:91:db:99:8a:
79:2e:be:9a:f5:4a:75:7e:63:b3:40:a9:e4:94:3d:
de:95:2a:69:a8:37:06:e6:01:69:77:11:3f:bd:63:
37:33:c4:75:34:cb:96:c7:91:92:47:96:1d:29:aa:
10:34:ac:26:11:48:eb:ae:ce:c4:6e:69:50:11:f3:
a1:82:f3:47:b7:c1:4b:cc:5c:a2:7c:93:ba:f2:fa:
49:ca:02:56:46:b0:dc:f7:29:c5:46:8b:4b:cf:e6:
05:17:25:a2:22:48:f4:6e:7f:b8:bd:96:8e:14:da:
cf:c7:0b:ad:b0:4b:71:01:41:80:7f:b1:63:de:e9:
e8:18:25:d9:ba:a0:31:f5:2b:fb:af:30:75:bd:93:
c2:80:32:1c:7a:a4:cc:b9:0a:7b:dc:d0:c2:b3:63:
bf:06:90:65:21:fb:aa:ad:e3:d3:aa:df:0a:9f:29:
a1:3c:0a:6f:bc:f3:a5:7a:ea:34:48:df:0a:ee:6c:
71:e4:20:7d:53:ae:39:ef:47:1b:40:87:36:f3:75:
6e:f7:9a:47:9b:2b:0a:6b:1b:25:a8:ed:65:bf:cd:
b2:5a:9e:1f:7d:69:98:18:cb:1e:bb:64:52:e8:8e:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:13:6D:E7:86:3C:FF:A3:7E:D0:25:4B:73:90:B0:C6:45:84:24:D2
X509v3 Authority Key Identifier:
keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:df:67:06:58:d1:b1:e6:7d:3e:7a:99:49:ba:43:a6:19:a3:
1b:e2:cf:5f:d1:5c:03:39:d0:cd:88:29:73:eb:d9:fb:0e:6b:
6f:fd:7b:21:3f:2b:39:ad:2c:d7:a4:11:53:a3:78:9f:5d:48:
e8:f7:e7:6c:d7:59:68:66:a9:33:fa:6b:07:19:10:77:71:78:
ca:46:b5:1a:03:9c:3d:6e:8b:61:76:62:23:4f:1b:6c:90:c2:
78:25:93:77:78:44:d9:53:b1:ef:ec:3f:5e:ca:1f:ba:e6:07:
18:8c:93:bb:92:f9:48:f4:56:e8:b8:c1:0a:10:cf:ca:e8:6c:
11:01:65:7f:7d:de:38:1e:a3:f0:54:90:5c:a1:18:91:ca:af:
99:71:49:f6:d7:18:99:93:8a:35:cc:f5:2a:df:10:54:8a:95:
aa:cd:cf:70:ee:bc:55:1f:b4:10:f2:ad:5c:5f:c1:2b:cb:43:
41:55:21:c5:61:74:8b:f0:06:01:eb:c0:20:04:06:9c:b1:4e:
03:ac:6c:81:a6:5b:e2:ee:c1:83:a8:b2:89:49:ae:83:24:86:
56:7a:89:fb:8c:0d:3c:0e:f7:61:97:74:04:8a:aa:d6:f9:b6:
73:68:cb:9b:f7:72:29:6d:98:8d:b8:ee:d9:c9:f5:57:1c:bb:
cd:d7:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:54 2026 by rpki-client