
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json)
Hash identifier: TVw/lWlSq0sYZoeFt3D1wZd78YD4rh8/NgyiFcqOpYs=
Subject key identifier: 66:8B:9C:72:A9:4C:05:37:2F:34:20:9B:40:4F:7B:CC:D7:A3:5A:E1
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial: 0334
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
Manifest number: 032E
Signing time: Mon 27 Jul 2026 02:14:17 +0000
Manifest this update: Mon 27 Jul 2026 02:14:16 +0000
Manifest next update: Mon 03 Aug 2026 02:14:16 +0000
Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: 0bUkQiQied6n2oCOLdz6FE1z7S6qjq0d8VFC6ZUZ6I8=)
2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: 9iIS+oJqtvIaxuE21AB7CyjRvSUfkuTKrVFukQPlVNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Validity
Not Before: Jul 27 02:14:16 2026 GMT
Not After : Aug 3 02:14:16 2026 GMT
Subject: CN=6a66bef9-4c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:0d:7f:61:e3:8e:00:d2:e9:8b:13:07:a8:
dc:34:ee:9f:58:56:3c:8f:11:89:ec:5e:ae:21:18:
cb:25:e5:5c:14:74:f9:4e:b1:b4:8b:31:8b:48:47:
68:ae:83:64:3b:cb:2c:81:b6:e5:50:21:3e:9c:ed:
34:7e:7e:d9:b1:58:16:4d:1e:77:37:55:99:8a:fc:
d0:62:2d:e4:cb:3e:eb:bf:a6:b9:16:a2:6d:5d:71:
f9:97:3d:55:c3:62:a8:95:6c:51:41:4f:73:2c:86:
d0:2b:64:7e:61:97:c9:48:aa:d6:71:15:08:4c:94:
74:71:90:ec:e9:08:0d:11:3e:c1:be:74:f9:13:f8:
42:1f:40:7e:f4:76:20:b2:3e:32:09:ee:aa:d2:dd:
a8:f7:e3:a7:44:f3:5b:c5:f7:16:fa:51:24:f2:24:
48:0a:7e:0c:75:53:42:28:18:8f:8f:c7:5f:a7:f7:
88:65:fb:d1:1b:fb:d5:56:a3:e9:aa:08:da:6b:4e:
33:c1:55:95:4c:e1:36:53:46:80:23:a7:72:63:30:
45:9c:a1:30:1f:6d:e9:40:6b:0d:72:0a:7c:55:73:
38:b4:3c:f3:cf:3a:3b:fd:88:05:ac:42:ff:1f:30:
8d:8d:cd:c9:4e:67:29:cf:30:1d:b9:2c:a4:7d:66:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8B:9C:72:A9:4C:05:37:2F:34:20:9B:40:4F:7B:CC:D7:A3:5A:E1
X509v3 Authority Key Identifier:
keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:2b:41:0f:83:e4:f4:bb:4a:f3:56:b7:ce:c6:60:d9:0f:ea:
63:75:c5:26:ab:d1:d9:52:9c:e2:dc:17:b0:24:34:6e:0b:dc:
f1:0c:15:2b:db:60:15:e1:72:d4:64:70:09:62:c8:30:b2:fa:
bd:f0:76:29:fd:8e:dc:5a:fc:e1:47:b0:cd:ed:c2:5d:a3:76:
fd:e7:59:77:e4:74:60:6e:8d:0a:b9:48:04:ce:7e:cd:c2:5a:
3c:b8:38:2c:35:47:55:61:ea:8d:4d:a0:5e:d0:49:3e:ef:8a:
70:1f:ef:5e:b7:41:92:a9:de:07:d3:71:1e:ca:f3:c2:88:b3:
17:1a:0f:55:29:1d:39:7c:a4:4a:d1:7f:fb:79:7c:cf:63:80:
d3:5d:77:fc:39:d5:a4:e5:38:da:fd:d1:21:ad:b3:78:ca:e4:
8f:c1:0d:63:6c:34:87:8f:12:67:cb:81:77:8b:25:53:2c:2f:
27:ac:46:f3:bd:a6:a7:42:29:1f:8f:d1:d5:54:e6:b6:dd:20:
26:ea:74:c6:d4:86:fb:2c:f2:00:48:f8:f4:3b:0f:53:c5:a3:
13:a1:6d:9a:fc:9a:c1:7c:14:c4:ce:7a:ef:df:67:dd:05:33:
d8:d6:1f:cf:7b:de:1e:b6:bc:e5:7e:34:9a:bd:e4:b1:fd:33:
67:42:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:51 2026 by rpki-client