
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier: +3dD2LwMqmwvjnbFH/SwRGaT8ivgSL6WQEbJoycur7M=
Subject key identifier: BB:86:89:BE:6D:3C:75:CD:67:D3:92:48:A2:75:F3:CE:52:26:2A:64
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial: 0A93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number: 0A7F
Signing time: Tue 28 Jul 2026 19:56:32 +0000
Manifest this update: Tue 28 Jul 2026 19:56:31 +0000
Manifest next update: Tue 04 Aug 2026 19:56:31 +0000
Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: aBayCbMGgcHSPAtgGrOQrKIeahwj/G9ojcyqg6crjMc=)
2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Validity
Not Before: Jul 28 19:56:31 2026 GMT
Not After : Aug 4 19:56:31 2026 GMT
Subject: CN=6a69096f-4e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:a5:4b:70:aa:e6:cb:30:b8:5c:14:e8:74:
7c:10:45:ea:3d:60:80:ff:9e:60:bb:e7:5c:0f:3a:
91:70:72:a6:28:4b:13:26:6f:5b:8d:95:ba:84:44:
0c:67:0e:19:a8:fb:bd:8f:3f:63:7d:aa:aa:a5:38:
b1:58:57:a5:9d:4f:0a:4d:4b:87:06:50:41:88:71:
15:3f:7a:35:8e:dd:14:c8:e5:50:45:da:af:b2:3e:
b6:74:76:e6:9d:d4:8a:fc:97:ca:0c:f9:90:7b:99:
50:3d:32:3f:a0:f7:c6:63:eb:81:8f:d8:0b:57:09:
27:ee:1f:12:ca:af:a4:7e:78:11:e3:58:b5:c8:a6:
b1:f2:64:b1:d0:bb:45:23:d8:d7:d1:48:e5:91:5e:
5f:3e:24:eb:ac:69:0b:17:ec:53:e1:f2:d3:49:df:
22:dc:d1:07:40:01:cd:f5:df:98:8c:34:5a:49:71:
a6:8a:e3:ac:27:c5:c2:fb:ca:3f:33:e1:f8:87:5d:
c5:4a:af:c4:05:40:c9:64:ff:54:1f:be:2c:fa:2d:
66:4a:fb:d2:19:04:24:d1:3e:a8:cc:37:3b:2e:bb:
b4:3e:be:e8:37:d7:a3:d5:29:2a:cb:ad:e3:16:76:
51:b0:f1:f5:4b:b2:bd:73:c1:be:ac:8a:c9:c4:07:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:89:BE:6D:3C:75:CD:67:D3:92:48:A2:75:F3:CE:52:26:2A:64
X509v3 Authority Key Identifier:
keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8e:99:45:c0:5c:fa:a0:a2:f1:c7:7b:f3:83:7b:58:46:8e:
65:15:6c:07:08:53:51:43:0e:88:d2:d6:ba:96:a7:84:34:33:
cc:70:52:da:87:9b:d5:6b:a7:9c:18:ed:28:60:36:14:5e:30:
79:8e:4b:b3:10:1c:68:92:73:d1:07:9d:2f:0b:3f:91:61:1c:
31:e9:d2:0b:1f:d9:40:55:16:5a:14:fd:7d:b7:e6:94:0a:f6:
2f:28:99:ca:53:6f:fb:d3:1a:37:4b:ca:b0:75:60:0f:06:23:
26:f2:53:20:51:0b:eb:23:5f:40:9b:74:74:5f:07:3b:d2:bb:
e5:53:51:0c:91:1c:2e:ed:d8:f1:05:32:94:b5:68:b4:3e:74:
46:8d:57:b6:d9:25:c5:21:ef:67:c2:b8:52:b2:3b:00:d1:ab:
8f:9c:78:b1:84:5a:13:1b:52:f4:9d:e7:f6:f9:61:6f:ed:16:
bd:73:14:a8:c8:46:da:e5:d3:d1:26:36:50:4b:d5:90:f8:b5:
f8:ee:ec:b6:e6:5b:87:f9:5e:17:2d:51:6c:31:d9:a1:0e:ff:
cc:a1:a6:6d:3c:04:92:48:42:c2:b5:1a:eb:af:56:c5:bd:75:
37:d0:4b:87:76:0e:e5:3c:89:6a:25:7b:34:a5:a0:7f:77:96:
b1:80:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:45 2026 by rpki-client