
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json)
Hash identifier: CkjfcC7Jg1EOiXU7IzOr2L5wvAXLYZfQkuY3etZHnlQ=
Subject key identifier: DF:AA:C2:D9:3A:4A:B5:E1:2B:44:0B:40:D3:BA:1C:DC:E3:12:29:8B
Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
Manifest number: 01EF
Signing time: Mon 21 Sep 2026 03:22:36 +0000
Manifest this update: Mon 21 Sep 2026 03:22:36 +0000
Manifest next update: Mon 28 Sep 2026 03:22:36 +0000
Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: X9BdhOhkKRn7gtrsYajEhndWfj8uTB0HSk3WfqLDCu8=)
2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: ZHeLDVTIHFJ7UjPrvmwH6xelh/2KaloiHRyyvC19Dlw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Validity
Not Before: Sep 21 03:22:36 2026 GMT
Not After : Sep 28 03:22:36 2026 GMT
Subject: CN=6ab0a2fc-7fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:cf:59:7b:e2:ae:ed:e8:d5:20:cf:f3:e5:
91:77:1c:a2:f6:e4:28:51:16:cb:d0:40:ce:f7:f7:
39:15:56:5a:ab:dd:e0:b8:22:e3:70:ff:4f:f5:ed:
10:a7:92:b4:46:c2:ec:ef:a5:17:71:03:cb:14:f1:
b2:27:6d:e3:6d:57:66:fa:e9:7a:61:68:02:ff:73:
e7:c9:7e:b1:42:6c:78:7f:ce:91:5c:b5:58:11:46:
11:53:1a:f4:19:6d:e5:32:cb:21:71:48:a9:1a:21:
16:e8:08:a7:fc:96:fb:76:5f:a3:5f:bb:f6:44:18:
10:15:fb:24:81:26:c2:37:13:82:70:99:a8:c9:6d:
2b:6b:d7:0e:d7:ff:7e:b6:37:9a:a4:52:9d:b3:b7:
ef:25:bf:97:4c:71:b1:29:f6:7e:75:0c:69:4f:1a:
97:c5:4b:94:a6:88:ba:8d:ee:ef:fe:6e:d1:8d:86:
bd:fe:f1:b3:5e:64:b5:7a:8f:b4:a0:1a:bc:ee:b1:
2a:bf:dc:8f:0c:3e:cb:fb:1c:d4:56:77:6e:e3:9c:
8d:24:58:2e:13:b1:e1:2f:52:87:68:ce:73:d7:13:
8a:4c:8d:49:78:96:47:9e:7d:90:f3:02:f0:1d:97:
c2:cc:27:25:c2:33:d4:f8:d7:ab:34:24:fc:47:a6:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AA:C2:D9:3A:4A:B5:E1:2B:44:0B:40:D3:BA:1C:DC:E3:12:29:8B
X509v3 Authority Key Identifier:
keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0e:d9:ff:eb:4b:46:ef:85:9e:72:e3:4a:a8:4b:e3:6d:0c:
50:ad:c5:d1:ed:e4:9a:01:2c:70:f7:76:0e:a6:c3:3d:08:3f:
68:5d:7f:f5:38:ca:33:5f:01:9e:33:d8:cc:21:d2:6c:6d:c3:
40:1c:7c:e3:1e:d3:90:42:86:e3:5b:e1:55:76:88:f0:3e:bf:
72:09:f7:f0:67:97:85:a8:fd:66:b2:14:9a:b6:a0:d1:63:26:
60:3d:c2:1f:7f:13:37:3e:67:20:9c:ee:b6:f5:d4:48:2d:e8:
b6:4a:d2:29:36:15:cf:af:98:98:8e:eb:33:b1:16:39:bb:08:
3a:86:b7:83:fe:14:68:54:9e:90:6d:54:12:f7:de:bb:49:25:
06:ac:3a:44:61:eb:1e:de:c1:28:9a:41:94:2c:9f:bb:63:82:
41:33:ea:8c:56:17:0f:f4:20:78:62:02:0f:bd:81:4f:e7:98:
31:9d:d5:c6:3b:3c:31:b1:f4:48:64:74:22:0a:d6:97:a2:2b:
c5:8e:70:3a:14:a2:6b:4e:78:c8:f1:8e:bb:a0:c6:4d:71:2a:
8b:af:51:0e:e4:2f:ef:5c:2e:db:7f:6e:08:6b:3c:86:6c:00:
fe:35:89:58:73:95:44:76:19:58:f9:7d:57:c1:b7:39:dd:1f:
43:bc:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:03:01 2026 by rpki-client