
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier: wUFAh8qWrFjfx305ijMc6UOWppxYl4RmOeB7pvqOqO4=
Subject key identifier: ED:70:AF:27:A8:FA:C6:3D:A2:13:5E:E6:6D:82:12:C9:27:AF:7E:29
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial: 0A7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number: 0A68
Signing time: Fri 12 Jun 2026 19:41:50 +0000
Manifest this update: Fri 12 Jun 2026 19:41:50 +0000
Manifest next update: Fri 19 Jun 2026 19:41:50 +0000
Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: SwxXYKLUj3hIa+ArbL4XLF8nam6qkpAHzyasKuZESE8=)
2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Validity
Not Before: Jun 12 19:41:50 2026 GMT
Not After : Jun 19 19:41:50 2026 GMT
Subject: CN=6a2c60fe-09b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:fc:c1:10:88:aa:96:57:71:72:8c:12:ac:
57:4d:9a:bb:6a:3b:ca:f6:56:0e:b3:61:59:7f:cd:
0e:9e:dc:05:9d:f9:17:9f:45:53:42:07:7a:01:22:
c0:0c:b9:92:13:a6:b5:80:5d:09:79:c7:7e:cb:0b:
1e:9c:1e:6d:f2:a2:65:cc:a9:cd:7d:65:6a:06:51:
a2:80:1a:74:85:a9:17:a4:dc:b4:a5:d2:35:51:c6:
4e:83:d2:27:11:17:ea:fe:e6:90:c0:a9:60:b3:a6:
22:6a:9f:90:63:3e:02:b1:d5:c4:62:83:dc:2e:93:
c3:16:49:a7:49:3c:fd:77:80:17:b8:ea:3c:85:2e:
64:59:dc:78:08:79:2b:1a:32:42:73:44:79:eb:90:
ae:e4:96:ec:b6:ca:ad:04:9d:aa:b7:60:34:41:9a:
90:5d:3e:c3:a1:85:ae:1c:55:9e:6f:8d:63:4c:1b:
3c:03:26:ca:35:3b:5c:dd:62:8f:fd:4c:ed:76:1b:
f4:da:8d:20:9e:8c:0d:fd:6d:60:46:35:1f:5a:c6:
af:16:b2:60:43:6c:8d:9f:bd:ae:54:b6:94:fd:81:
23:ac:60:8a:af:8a:22:36:4c:08:e5:8b:c1:6b:8a:
87:9d:f7:a4:ec:f6:c5:15:37:b7:10:bb:f9:9a:8e:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:AF:27:A8:FA:C6:3D:A2:13:5E:E6:6D:82:12:C9:27:AF:7E:29
X509v3 Authority Key Identifier:
keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:be:40:10:14:45:90:6e:0f:f7:92:3d:e6:6d:c2:93:ab:60:
27:4a:3b:84:68:70:70:87:16:fd:1c:ec:b8:f2:91:eb:da:87:
48:a6:77:fd:0f:9a:04:0c:d3:37:1d:07:63:25:bc:12:3f:35:
48:a8:a5:8c:43:09:33:6b:a8:28:06:ac:32:ac:36:d7:64:6b:
97:a3:d9:74:5e:4c:95:12:79:35:cd:4e:89:0d:1d:f0:ad:de:
8a:2c:28:e4:f7:ad:45:ec:f2:b8:eb:0f:95:7b:00:a1:0a:3b:
e1:ca:04:93:36:09:88:b3:e7:61:39:df:39:e0:27:ec:b4:e6:
5c:d8:b0:ec:0f:ac:51:9b:60:d2:06:09:32:2f:76:a6:7d:76:
7b:e5:bc:cc:47:f3:a1:dc:46:6f:84:8e:fa:55:1f:dd:4c:c6:
03:dd:b3:a4:ae:01:0d:a2:c9:17:98:6f:84:62:87:71:d4:64:
62:a4:ab:be:5c:56:13:88:a8:ea:44:fb:e8:a2:98:f1:8c:1c:
4a:48:d9:d3:18:a9:3e:8b:cf:fe:2b:01:45:4c:a5:68:e5:91:
78:ec:ae:07:82:1e:ed:c1:41:92:88:00:65:af:ba:4e:b6:0c:
d8:44:aa:4c:0b:1e:a0:e3:e2:6f:99:68:71:2d:34:59:53:39:
3b:fc:e2:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx
OTg5MTkzQTUwHhcNMjYwNjEyMTk0MTUwWhcNMjYwNjE5MTk0MTUwWjAYMRYwFAYD
VQQDEw02YTJjNjBmZS0wOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6GP8wRCIqpZXcXKMEqxXTZq7ajvK9lYOs2FZf80OntwFnfkXn0VTQgd6ASLA
DLmSE6a1gF0Jecd+ywsenB5t8qJlzKnNfWVqBlGigBp0hakXpNy0pdI1UcZOg9In
ERfq/uaQwKlgs6Yiap+QYz4CsdXEYoPcLpPDFkmnSTz9d4AXuOo8hS5kWdx4CHkr
GjJCc0R565Cu5JbstsqtBJ2qt2A0QZqQXT7DoYWuHFWeb41jTBs8AybKNTtc3WKP
/Uztdhv02o0gnowN/W1gRjUfWsavFrJgQ2yNn72uVLaU/YEjrGCKr4oiNkwI5YvB
a4qHnfek7PbFFTe3ELv5mo5kOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1wryeo
+sY9ohNe5m2CEsknr34pMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC
RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3
czluNm9yNlhRb2daaVJrNlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD75AEBRFkG4P95I95m3Ck6tgJ0o7hGhwcIcW/RzsuPKR69qHSKZ3/Q+aBAzT
Nx0HYyW8Ej81SKiljEMJM2uoKAasMqw212Rrl6PZdF5MlRJ5Nc1OiQ0d8K3eiiwo
5PetRezyuOsPlXsAoQo74coEkzYJiLPnYTnfOeAn7LTmXNiw7A+sUZtg0gYJMi92
pn12e+W8zEfzodxGb4SO+lUf3UzGA92zpK4BDaLJF5hvhGKHcdRkYqSrvlxWE4io
6kT76KKY8YwcSkjZ0xipPovP/isBRUylaOWReOyuB4Ie7cFBkogAZa+6TrYM2ESq
TAseoOPib5locS00WVM5O/zisA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:49 2026 by rpki-client