
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
File: L77sEYtTYT4VQvM__DYRjlYtRy4.mft (raw, json)
Hash identifier: CZrWUXRU7s8/ietVp1WDh7H7vLS8uQAclx8kYgnjd2o=
Subject key identifier: 21:6A:DE:77:6F:F1:69:32:C3:85:8B:11:61:07:78:CC:BC:9E:F8:3D
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Certificate issuer: /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
Manifest number: 4B
Signing time: Thu 11 Jun 2026 10:50:56 +0000
Manifest this update: Thu 11 Jun 2026 10:50:56 +0000
Manifest next update: Thu 18 Jun 2026 10:50:56 +0000
Files and hashes: 1: L77sEYtTYT4VQvM__DYRjlYtRy4.crl (hash: C4OG7vwdl7FS1UR3+y0mEa2wL2urlmrdkc5wUBB72EM=)
2: 63C8FE7A276D11F1856D09ECC3833773.roa (hash: R14w9cl533WbyeT8xCKzVPtv1wFWXETsfR643wwbAq4=)
3: C4618A34188D11F1A1D836EC3D3D8C67.roa (hash: zGs/9ZPuQmBMjGcesFDtJEy650HEEHK6+s759wT6WOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Validity
Not Before: Jun 11 10:50:56 2026 GMT
Not After : Jun 18 10:50:56 2026 GMT
Subject: CN=6a2a9310-bd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:b8:0b:af:c6:26:2b:da:65:f4:dd:61:e2:
fd:ad:38:22:a4:9c:eb:f5:ea:55:24:92:b0:1f:3f:
52:c8:a8:7f:7a:61:20:23:61:b3:f9:bf:b1:e8:66:
bf:1d:c8:48:05:57:4d:1c:1d:0b:f2:20:84:1b:5e:
88:b1:e9:41:83:1d:94:e8:15:e6:91:4e:a6:c1:e2:
5a:61:0b:0c:58:87:03:ce:c4:d4:f2:da:0b:a9:bf:
2f:bb:bd:ec:32:40:21:9a:b6:9b:3c:62:5b:3c:51:
65:1c:5e:1c:6c:71:c7:08:5a:1a:43:9d:82:67:a1:
68:94:03:6c:10:da:ab:15:5c:4e:50:a7:81:e1:1f:
14:f1:88:ac:4b:d0:9d:19:0c:d6:a9:d3:c2:9c:68:
65:18:41:30:8c:fb:47:1e:81:23:0b:ab:3c:dd:91:
60:3a:da:ab:fc:3e:3d:9d:5e:9e:57:bd:5d:bf:38:
73:64:2b:5f:a5:61:72:09:61:c8:7d:29:1d:a0:8b:
3e:04:8b:fd:11:08:37:38:b8:05:5d:4b:91:aa:cf:
b7:6a:0a:b4:8c:bc:3f:14:8e:44:4a:21:8d:12:fa:
b1:2c:d4:35:ad:46:36:9d:5d:de:b9:ce:b8:61:0b:
97:05:ed:4b:51:ff:97:9e:76:dd:b3:68:67:3f:e7:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6A:DE:77:6F:F1:69:32:C3:85:8B:11:61:07:78:CC:BC:9E:F8:3D
X509v3 Authority Key Identifier:
keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:a3:4c:b4:95:77:bc:6e:c5:0d:17:74:49:a0:02:42:f5:94:
11:a5:71:d8:e9:cb:3e:fa:36:15:a0:d3:f2:94:e5:44:b8:d9:
c5:c8:60:17:04:28:00:55:ef:01:6e:28:f8:03:25:5d:95:16:
4c:d6:4e:3b:24:1f:eb:51:3d:bb:f3:4e:a3:fa:ee:96:9a:df:
7a:26:33:11:f3:ce:57:d6:37:de:97:38:f3:38:44:13:b2:73:
ab:2b:67:f8:b1:5b:07:de:1f:db:db:55:b8:17:82:e4:0e:92:
fc:ca:6f:0c:46:31:07:a7:a2:67:92:5b:61:b7:86:a3:1a:98:
89:d6:b3:9e:6e:32:4f:34:24:00:b1:6b:bd:1f:f7:54:26:b9:
32:c1:75:32:72:b2:88:13:bc:2a:c7:a8:79:1b:8f:58:00:c7:
97:08:da:f6:e4:46:0f:c0:21:cb:6d:f4:1f:3b:05:c2:61:0d:
c4:da:8d:59:20:b1:d4:40:db:07:40:8d:b9:8a:5c:0a:69:c3:
39:13:08:9f:5b:b9:7b:85:98:a0:62:4f:4e:71:83:17:46:ac:
25:d6:ec:a5:06:48:7b:dd:3a:b7:dc:07:d0:6f:53:58:cf:89:
7c:dd:9a:9c:28:58:41:94:86:a3:7f:7b:7b:99:e4:ce:5b:09:
23:5f:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:51 2026 by rpki-client