
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
File: laNNlXWF4FXwNo5HTaPR-bvPqN8.mft (raw, json)
Hash identifier: Uu5TGhoCe138aWVzw3Ab+NzGRTuys3MoDC9k8Ft80/Y=
Subject key identifier: 2D:8C:10:03:50:B4:72:C8:51:DB:A4:00:B2:72:19:64:CA:F8:13:D6
Authority key identifier: 95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
Certificate issuer: /CN=A91D2B56/serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
Manifest number: 31
Signing time: Mon 27 Jul 2026 10:59:44 +0000
Manifest this update: Mon 27 Jul 2026 10:59:43 +0000
Manifest next update: Mon 03 Aug 2026 10:59:43 +0000
Files and hashes: 1: laNNlXWF4FXwNo5HTaPR-bvPqN8.crl (hash: Dq8XlIUIuwLsx9Z7av5vz4xiChcw0bIUot34fIR43lM=)
2: 04EDE6343E2B11F1B4A6C6E4B6833773.roa (hash: iVmvGDCFN84Pkf1vGvrKze2zsX7JLtz20kszTrEJLI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B56, serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Validity
Not Before: Jul 27 10:59:43 2026 GMT
Not After : Aug 3 10:59:43 2026 GMT
Subject: CN=6a673a20-5269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:f2:33:c7:32:2b:8e:59:96:83:f9:0f:b7:
f1:74:ac:cb:62:aa:b7:a3:66:3d:9a:bd:53:18:88:
de:b0:4a:41:47:71:53:c8:ea:e1:fc:ec:2f:cf:5a:
8c:5d:34:0f:ca:44:37:69:fc:48:57:c5:99:d4:c3:
f4:26:d8:91:7d:a4:8d:3e:65:aa:ec:b2:62:34:e5:
3a:b3:00:ca:f1:aa:21:4b:c4:c5:b6:ae:72:c4:b0:
bc:d1:a4:5e:35:0c:4d:80:6e:ee:e6:e1:dc:80:84:
30:6c:7b:aa:0b:d6:9a:a6:22:fd:c6:51:91:04:e9:
42:5a:e9:56:f6:4a:58:3d:ce:9c:82:4f:0a:ae:18:
db:76:1e:aa:73:98:85:f8:04:ab:1a:1c:15:ff:60:
be:36:82:2a:a5:dc:4e:f7:ea:1d:9a:f9:8d:37:30:
e5:84:b6:e7:2c:3d:2d:32:b7:d6:98:b8:23:47:82:
db:ff:ee:26:4a:5a:de:0c:64:a0:fe:7c:8b:e0:03:
14:43:ae:02:cb:aa:73:35:eb:18:e8:91:e3:f4:80:
4f:8d:13:54:a4:6a:48:38:1e:c5:7f:f4:75:c1:57:
e7:9a:a1:e7:dd:ed:58:e8:c5:b9:b7:d8:c4:ba:d9:
c9:47:27:d4:ce:99:4e:40:ca:13:ca:16:2d:61:a7:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:10:03:50:B4:72:C8:51:DB:A4:00:B2:72:19:64:CA:F8:13:D6
X509v3 Authority Key Identifier:
keyid:95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:49:c1:53:f2:4f:5d:82:4c:7a:bd:36:24:8d:cd:89:5c:96:
a4:d5:59:c6:70:82:ac:08:55:e4:a7:7f:f7:52:fe:78:11:e2:
f5:f8:6f:a2:23:09:b2:3e:3a:84:40:5c:5a:d1:62:05:a1:71:
06:16:a4:fa:30:e6:82:46:af:73:5b:9a:d4:fc:ca:3a:ac:3a:
fd:b2:16:8b:20:c0:42:c9:b4:d0:b7:de:df:bb:b7:fc:28:37:
0f:4c:4b:71:ad:91:0d:7d:a7:0d:28:3f:d8:4e:4b:86:a7:13:
be:a4:d4:71:88:e0:cc:19:46:90:df:ca:8d:05:43:fe:76:49:
b3:16:e8:e3:e9:c3:11:44:3d:00:a7:da:ee:e2:51:c1:bc:29:
98:85:a8:a3:e6:ff:74:35:ac:cf:d6:93:94:19:0f:71:16:3c:
91:a1:f0:dd:d9:43:1d:55:97:e2:fc:ed:13:9f:3a:c5:ca:98:
9c:32:e9:24:e3:bf:ce:42:63:c5:59:59:09:43:13:89:07:f9:
02:a9:ef:3f:cd:0c:04:23:13:de:7a:c6:e3:b7:fc:41:6c:6f:
b0:39:46:05:5d:69:d7:92:1d:5d:b7:d6:87:ee:ae:25:39:b3:
3a:8e:5a:c4:ab:94:8d:44:7e:7c:8d:9e:b0:29:e4:96:78:72:
f7:5e:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:47 2026 by rpki-client