
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: OgQVZdf3hVRx+N9jN8JUIAJdHUHgLK74HGEnZBVdBMA=
Subject key identifier: 97:71:2F:D9:5E:E3:BF:6F:CE:60:E4:42:88:AD:9F:F3:BC:08:05:F9
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 08B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 08AE
Signing time: Sun 26 Jul 2026 21:06:12 +0000
Manifest this update: Sun 26 Jul 2026 21:06:11 +0000
Manifest next update: Sun 02 Aug 2026 21:06:11 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: tlN8EGWemIka3/fNzhsU4dO98Ktsb6jFXHM39wkiXR8=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: 3luUYeTT67yCKVIevcEjzS34/Ev6QIZEGseKDtPOfG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232 (0x8b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Jul 26 21:06:11 2026 GMT
Not After : Aug 2 21:06:11 2026 GMT
Subject: CN=6a6676c4-1783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:45:90:7d:a8:cb:10:33:d0:44:c6:5b:29:
ae:0a:22:67:03:67:a6:32:97:b9:ae:e2:d2:e2:02:
3f:a4:2f:9f:2d:e6:e8:46:6c:ac:0e:ea:fb:f0:50:
d3:1b:bb:04:dd:db:aa:a9:87:95:8c:9f:59:f5:8a:
97:d4:13:8d:48:0c:bf:23:99:77:19:20:41:d6:90:
ff:3c:55:fe:bb:c2:de:68:28:fe:18:50:ac:85:7a:
a4:96:02:8b:46:33:a4:78:9d:a5:b6:f8:b3:ca:3c:
96:74:4e:33:99:1c:b6:d3:f5:ff:af:16:2d:16:24:
71:3f:52:a3:d2:8e:c1:f0:96:29:e5:fc:c2:51:f7:
f1:92:52:21:02:7c:62:2f:93:b5:ae:2e:c9:3b:64:
62:80:84:d0:db:09:6e:ff:6b:65:77:6e:7c:bc:7c:
9c:f1:13:18:56:73:9e:b8:9a:a3:f0:3e:52:1e:c8:
5a:f0:4b:41:1d:79:50:8a:13:79:30:71:35:c0:6b:
24:69:be:fb:e6:ac:9f:b9:3d:5a:7d:32:75:3c:ef:
f9:da:2b:67:d5:5a:6d:68:93:37:48:54:cc:5f:65:
30:c9:e0:11:6c:8c:95:a9:27:82:6d:36:20:65:d0:
9c:61:0e:38:7f:fa:be:6e:93:de:db:d1:ed:83:ff:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:2F:D9:5E:E3:BF:6F:CE:60:E4:42:88:AD:9F:F3:BC:08:05:F9
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9a:cf:a7:62:f4:b2:b4:66:59:f8:db:b6:a9:60:53:bc:26:
31:13:a9:bd:fc:d4:93:a3:31:f6:55:ab:87:ce:57:a9:83:18:
3c:b4:ff:ec:4a:7b:ad:36:ea:04:30:0f:ac:19:2f:aa:74:36:
1d:af:00:2a:2e:24:64:ee:47:32:67:69:1e:d4:e0:ef:2c:c8:
d3:e4:02:a9:61:ff:75:13:07:c8:08:14:b8:33:f6:1d:9a:3c:
16:39:c3:a9:5d:cc:ab:5a:d9:82:35:60:f5:20:2f:60:6c:a3:
77:15:05:48:aa:d5:94:24:e2:17:26:a6:f0:e6:c1:ad:c2:c6:
03:5c:e8:28:a0:f6:87:4c:10:72:8b:f3:f0:56:a9:38:85:8c:
22:a5:3a:3a:ad:6f:09:f4:62:23:6a:68:1c:82:80:02:e5:a6:
12:d9:3e:d9:2b:8d:ab:c1:c8:54:75:3a:86:63:f4:57:4a:7f:
a9:10:4f:17:96:67:c5:8f:d7:36:ee:4c:50:4e:11:60:6e:5b:
81:18:29:42:2e:30:58:c1:0e:a6:11:69:c9:95:ac:de:36:56:
5b:51:b9:c4:16:05:0b:e2:a8:fa:12:2e:10:7f:b2:d1:10:22:
f4:ec:5d:71:4a:13:17:0e:36:aa:f8:9f:3d:5e:ab:62:de:6e:
47:e3:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:53 2026 by rpki-client