
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier: Ghl/MnKccqP4hLXmv5q1yi2vGNtPgiWNk3aC6yC/Nak=
Subject key identifier: B8:0E:E4:83:FB:9B:52:DE:6E:4F:E4:C5:57:64:2B:B1:BB:35:FE:17
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number: 51
Signing time: Sat 13 Jun 2026 08:19:32 +0000
Manifest this update: Sat 13 Jun 2026 08:19:31 +0000
Manifest next update: Sat 20 Jun 2026 08:19:31 +0000
Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: IjDms0ZAALhiew++n+9PklwvC48FaypODQC5+24Ox1I=)
2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Validity
Not Before: Jun 13 08:19:31 2026 GMT
Not After : Jun 20 08:19:31 2026 GMT
Subject: CN=6a2d1294-70e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:e6:01:3d:5a:ec:ab:dc:2e:ee:45:de:87:
55:ff:64:de:66:4b:be:b4:8d:84:84:fb:79:39:e7:
04:bc:1f:93:c0:d8:ac:b5:53:28:46:ab:6d:4d:2c:
6e:87:cb:b8:b1:a0:b0:67:ea:69:6a:05:77:4d:2d:
14:77:e5:35:8e:7b:35:b2:b3:d2:02:72:e2:56:cc:
58:d4:a5:6a:0d:6a:12:fe:00:53:47:4d:92:6a:2d:
81:82:ba:5a:43:95:62:0c:82:a3:97:31:a3:21:46:
7d:f3:71:07:51:c0:a0:86:a3:f5:89:3b:80:29:a3:
b7:22:d8:01:1d:09:e3:d3:06:3b:1b:66:e5:cf:e0:
c9:6f:90:c4:79:23:bd:7e:e4:05:14:86:ff:be:93:
52:12:53:35:38:0f:44:b6:0c:7b:0c:8e:0a:9a:9b:
02:1a:53:d1:e4:26:7a:a7:7f:e5:d8:e9:0f:b1:8f:
e8:42:60:b9:b3:fa:ee:76:30:8a:95:2c:4c:89:fc:
f7:67:bd:ab:ce:e4:ba:a6:8f:9f:97:98:29:cc:a4:
02:f8:96:c4:34:b0:4b:8c:e2:dd:6e:9f:c8:d6:06:
1e:5b:d2:38:02:d4:db:fa:e0:20:8c:bc:b1:c2:1c:
bf:eb:02:26:c5:4d:3f:6b:1f:9c:5d:98:b1:5a:b7:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:E4:83:FB:9B:52:DE:6E:4F:E4:C5:57:64:2B:B1:BB:35:FE:17
X509v3 Authority Key Identifier:
keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:73:17:92:17:e3:c4:55:b2:8d:6e:f5:8c:a8:ed:34:8b:2f:
5a:e6:48:81:5b:fe:cc:08:2b:a7:d7:37:ca:f2:d6:31:f7:54:
f1:8d:44:62:24:d9:ba:23:b4:70:f1:1e:a9:1d:b6:01:58:27:
62:2e:ba:00:24:c6:39:45:81:a7:9d:d1:f7:c4:f5:e8:ab:fa:
d2:f0:97:64:b5:b3:9a:bf:77:b1:ec:f7:ac:27:98:ad:d4:92:
c6:27:c6:a7:e2:f2:69:99:19:34:6b:e0:fd:17:64:54:da:cf:
5d:24:72:75:7d:8b:ec:26:ee:16:79:11:8d:3b:b5:37:62:e5:
d7:60:8d:11:65:a3:c6:6f:bf:d8:d5:c9:d5:1b:21:20:ba:1c:
13:0c:08:4d:8e:b1:52:15:e7:cb:fc:bc:be:76:f6:8e:98:f4:
23:08:a6:8e:71:e1:5a:3d:62:05:66:38:35:24:c8:f8:ea:10:
60:45:81:6a:b5:dd:04:cc:65:58:8f:3e:e6:70:fb:ca:7c:92:
97:7e:be:c4:f3:74:d3:91:62:e0:9f:c1:c1:f7:6b:33:6d:15:
4f:a0:85:d2:5a:4b:d2:28:5f:a4:2d:80:d2:8c:77:a0:16:13:
7c:45:f5:f1:32:e4:64:a8:4c:f9:15:bb:f4:4c:28:32:9c:0d:
79:9d:28:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:13 2026 by rpki-client