
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
File: lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json)
Hash identifier: NE4kv3gu1VNAOyCHZSEg10f2FEUQ8gQfijelAuLj1pc=
Subject key identifier: 48:F9:1C:45:B7:2E:27:E9:86:BC:D6:DB:25:4F:07:59:D1:7B:87:77
Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Certificate issuer: /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
Manifest number: 10
Signing time: Fri 17 Apr 2026 08:45:55 +0000
Manifest this update: Fri 17 Apr 2026 08:45:55 +0000
Manifest next update: Fri 24 Apr 2026 08:45:55 +0000
Files and hashes: 1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: aVvp10nmelt4LSPm+hQkAwZqWpIvcYVBRTKlQMyae+0=)
2: 20763B5024C611F191287557A6833773.roa (hash: 0r6vS9qeg1815ILGWf03i2uDlWfL7ibwuznjphtmkNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Validity
Not Before: Apr 17 08:45:55 2026 GMT
Not After : Apr 24 08:45:55 2026 GMT
Subject: CN=69e1f343-724e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:1d:b1:a5:25:59:81:83:5d:a7:b9:7c:d3:
e4:47:0c:a1:da:fd:71:07:db:78:86:29:f1:1f:6f:
a8:4e:69:1f:ee:4d:74:e4:04:62:45:73:70:e9:a9:
5b:89:f3:c7:8a:e2:61:b2:40:af:60:d0:e8:3f:07:
53:14:5f:3e:4b:a9:21:12:3a:21:79:4b:93:0b:cb:
d8:ed:d6:bc:95:0c:b3:fb:3d:cf:dc:1b:97:40:42:
d7:19:28:79:c9:0e:5a:89:8e:e0:47:79:a6:0f:58:
40:59:e2:04:a3:fa:41:23:07:54:97:13:8e:55:ed:
65:11:e5:d7:9a:92:0b:9b:f7:a3:77:68:52:14:47:
cd:c8:c7:1f:28:ed:88:88:64:12:8d:0a:dc:5b:11:
bf:b1:d2:c9:26:88:bc:67:7c:94:99:87:26:1d:c2:
73:46:ec:94:ef:d5:9a:a5:e3:e6:56:3f:f4:ce:29:
af:bb:6f:7d:09:a2:d0:57:f6:89:b4:64:77:83:be:
37:03:77:eb:05:5f:7d:78:e0:a7:1b:ee:f4:c0:78:
0d:2e:09:a6:b5:0f:a8:7f:bb:04:ea:cf:dd:99:a4:
69:7e:20:16:85:a2:5f:53:8e:0b:74:ac:b5:c3:ad:
0d:e9:05:88:00:16:3b:0b:aa:f0:1d:df:67:db:35:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F9:1C:45:B7:2E:27:E9:86:BC:D6:DB:25:4F:07:59:D1:7B:87:77
X509v3 Authority Key Identifier:
keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:14:21:53:bf:47:57:1b:27:58:df:05:71:78:05:a8:bc:24:
1b:cd:37:34:41:d3:35:57:bf:a1:31:2a:16:4f:0e:a8:39:3c:
3b:16:62:9e:d7:ea:bc:7f:e8:51:e7:98:b1:b0:7b:1e:1c:a9:
53:d0:10:cd:9f:ab:b1:5c:b5:ea:6c:9f:52:33:d5:36:78:f0:
17:74:3d:36:d6:2c:45:a0:70:67:59:cc:d0:92:0a:b7:af:0a:
ba:cf:69:98:c8:65:58:8f:f4:72:f5:81:df:a2:0d:7f:46:22:
85:b7:e7:ee:9d:20:c9:f3:d8:6e:28:47:48:a8:4d:1c:0a:7a:
eb:a1:da:28:92:46:8d:ab:85:e3:0e:c2:d9:e8:74:b6:46:c4:
f3:99:a8:3c:3e:02:32:c7:4d:64:8c:fc:35:fc:a8:19:6c:54:
46:ec:9d:48:0e:b7:ef:79:00:69:8e:14:98:8e:4b:1c:b7:1c:
52:91:03:4b:ea:85:ea:a3:0c:f5:2c:58:ec:b3:75:10:86:d2:
8a:44:8b:a5:08:ca:84:26:e3:02:38:a9:6d:8e:0c:7e:89:f0:
f7:9c:2d:da:13:87:f1:e6:ac:41:e5:fe:e1:bd:92:01:6b:27:
6e:31:55:35:9f:64:ae:3b:69:8d:e5:d2:eb:63:e6:0c:50:1c:
97:7b:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:09 2026 by rpki-client