
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File: liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier: M3TuGVSXL7sO743pQqNjS8UDBTkgQcvG4+8+YZ0IVkc=
Subject key identifier: 96:F4:EB:30:9A:C9:37:F5:D2:3C:24:E9:D5:FC:22:91:C5:EF:0D:B1
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial: 02A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number: 028B
Signing time: Mon 27 Jul 2026 03:14:56 +0000
Manifest this update: Mon 27 Jul 2026 03:14:55 +0000
Manifest next update: Mon 03 Aug 2026 03:14:55 +0000
Files and hashes: 1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: xBCJP0C163JGkaTz+3aCep+3OXkxxl6umgwAeBMOjcc=)
2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: olArFcM1PUtHpMUsUbFSqGqQtjy1wHpvrbRn0NFqaZs=)
3: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: XCU9CEh5JfWyfgXD9tBMgbhcrtxpGC1QtyGffV0ujNk=)
4: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: nLmRRkvPmyWIllTJe9Zouh2k0tm12CDZu9M1JMdFVeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Validity
Not Before: Jul 27 03:14:55 2026 GMT
Not After : Aug 3 03:14:55 2026 GMT
Subject: CN=6a66cd2f-87e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:9e:5e:8d:37:ec:49:69:e0:8e:f8:f7:5c:
b5:ab:01:d4:b8:4c:fe:fc:92:d9:60:4c:0a:56:5b:
35:bb:8e:30:ab:83:77:36:6e:1e:0b:00:a4:13:04:
6c:3f:df:7c:53:97:bd:6d:f9:77:81:81:b7:db:57:
05:66:3d:a0:27:7d:42:9d:af:36:72:76:7f:79:bc:
24:da:53:90:8e:13:f3:8c:e3:52:e6:cd:e8:ca:a4:
fd:5d:bb:e5:e5:d2:6f:cd:f6:17:ae:cd:70:d0:de:
8e:37:1c:e3:bf:dc:01:84:d9:02:77:81:60:9f:3d:
50:fc:0a:5d:99:95:8d:0f:15:fa:9f:da:58:9f:c4:
57:2d:a6:b8:8a:23:68:23:b7:45:d5:67:09:72:d0:
5f:c5:03:39:a5:e4:85:8c:cd:bd:cd:5e:f9:18:6c:
1b:49:f5:5d:ed:79:e1:ab:89:99:c8:65:ea:21:f0:
e3:18:82:83:7d:bd:42:2d:4f:ec:d0:f4:85:51:fd:
e6:82:b8:7d:31:12:93:19:ae:b6:60:e8:a9:46:ca:
91:7b:23:15:aa:87:a7:9e:81:e2:10:a1:98:b5:e2:
96:f2:97:04:eb:d7:9b:61:12:5c:53:bd:3e:94:90:
95:8f:de:6f:03:34:9b:81:29:f8:9e:fe:90:58:9c:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F4:EB:30:9A:C9:37:F5:D2:3C:24:E9:D5:FC:22:91:C5:EF:0D:B1
X509v3 Authority Key Identifier:
keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:16:17:b4:5c:ae:9c:f6:31:4e:9c:01:ad:85:e1:42:12:fc:
9d:1d:9a:52:fa:7f:7b:d0:04:a1:8f:9e:45:46:56:f6:6e:17:
27:0a:4a:b8:e9:89:93:20:16:c7:fd:72:0a:fd:a7:40:f7:e5:
68:f2:ff:6e:0e:94:b9:19:0f:96:04:50:9e:e5:90:30:03:2d:
fa:cb:f1:d5:c7:20:7b:65:b3:f4:c9:8a:3a:f8:57:49:b4:4c:
8d:21:48:29:6c:8c:a4:0c:cc:95:cb:1b:72:18:03:89:2f:5a:
05:57:91:9e:c0:08:bb:77:a2:2e:02:18:9b:80:d3:ae:3c:cc:
d2:71:c7:57:ef:fe:18:dc:6e:ef:32:56:e3:3e:b7:92:f8:0e:
3f:dc:09:f4:6e:68:22:94:6d:f6:e6:71:d1:e8:39:f8:93:ad:
f3:a0:ed:c9:e1:0e:93:29:87:3f:2d:23:10:23:38:13:db:bb:
dd:6b:b1:f9:ce:62:bb:25:0d:8b:0d:de:06:8c:99:92:23:5c:
ef:75:71:cd:cb:3f:49:18:fc:81:ef:56:5a:37:34:46:93:f8:
10:ae:8b:38:35:7d:c2:2c:06:bb:56:07:bf:0c:48:c5:3a:ef:
44:9a:fc:81:9e:13:88:78:f1:6e:40:e4:3c:48:da:f1:94:1e:
f4:2f:04:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG
QkVGQTVDRDAwHhcNMjYwNzI3MDMxNDU1WhcNMjYwODAzMDMxNDU1WjAYMRYwFAYD
VQQDEw02YTY2Y2QyZi04N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4meXo037Elp4I7491y1qwHUuEz+/JLZYEwKVls1u44wq4N3Nm4eCwCkEwRs
P998U5e9bfl3gYG321cFZj2gJ31Cna82cnZ/ebwk2lOQjhPzjONS5s3oyqT9Xbvl
5dJvzfYXrs1w0N6ONxzjv9wBhNkCd4Fgnz1Q/ApdmZWNDxX6n9pYn8RXLaa4iiNo
I7dF1WcJctBfxQM5peSFjM29zV75GGwbSfVd7Xnhq4mZyGXqIfDjGIKDfb1CLU/s
0PSFUf3mgrh9MRKTGa62YOipRsqReyMVqoennoHiEKGYteKW8pcE69ebYRJcU70+
lJCVj95vAzSbgSn4nv6QWJy/8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJb06zCa
yTf10jwk6dX8IpHF7w2xMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1
RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REEyMC9CNzNCRjM3Q0I1RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJz
NzlzVGgtTUw3RF83NzZYTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaRYXtFyunPYxTpwBrYXhQhL8nR2aUvp/e9AEoY+eRUZW9m4XJwpKuOmJkyAW
x/1yCv2nQPflaPL/bg6UuRkPlgRQnuWQMAMt+svx1ccge2Wz9MmKOvhXSbRMjSFI
KWyMpAzMlcsbchgDiS9aBVeRnsAIu3eiLgIYm4DTrjzM0nHHV+/+GNxu7zJW4z63
kvgOP9wJ9G5oIpRt9uZx0eg5+JOt86DtyeEOkymHPy0jECM4E9u73Wux+c5iuyUN
iw3eBoyZkiNc73Vxzcs/SRj8ge9WWjc0RpP4EK6LODV9wiwGu1YHvwxIxTrvRJr8
gZ4TiHjxbkDkPEja8ZQe9C8EsA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:55 2026 by rpki-client