
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File: liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier: PJjFLVd8dTYDMXSUC+tAPyQvWu86AJe3NGoDWyExfYA=
Subject key identifier: D9:8D:94:AB:D1:26:A3:8B:4F:2D:99:2A:4C:55:82:70:C8:8C:5B:1F
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number: 023F
Signing time: Mon 02 Mar 2026 00:41:23 +0000
Manifest this update: Mon 02 Mar 2026 00:41:21 +0000
Manifest next update: Mon 09 Mar 2026 00:41:21 +0000
Files and hashes: 1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: PwEMKSp+aoZSJkRxdPl933rTtL9nXhM/k1UHlLrrQbU=)
2: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: WmBY6H2Pxb5MPx5KAzZ8boIEzNFVP9GdLcZ09Lb1yaU=)
3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: NL0jQJ7rLtLZWjCp8BXBJTX2QdcLzvQo49oQ+wque98=)
4: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: NpxyDYgZgt6C5E4ll2xjCVcUh5jIelMwBSZZdnJdQJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Validity
Not Before: Mar 2 00:41:21 2026 GMT
Not After : Mar 9 00:41:21 2026 GMT
Subject: CN=69a4dcb2-e87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:da:41:15:c7:80:b1:51:0c:c1:91:4e:46:
9a:fb:4e:94:34:90:9b:29:ba:2a:12:80:78:60:e5:
62:02:c1:15:4f:69:ae:5f:92:35:9a:ec:a9:71:96:
84:2d:d5:cd:95:f5:ad:71:e1:86:8f:b4:96:3f:bd:
5f:f8:6c:2f:2b:17:19:6c:a6:04:53:d3:57:bb:ee:
f9:30:34:0f:5d:9e:63:7b:87:99:1f:32:35:28:ad:
7b:4a:9c:41:7e:31:df:d5:96:40:3b:2e:0c:24:0b:
fa:87:bd:fa:04:49:f8:e6:6c:f8:fb:26:8d:ae:fc:
ac:88:ca:3a:2e:5f:4b:81:97:50:07:81:6b:1d:26:
ec:5c:2d:66:ab:36:31:d9:44:04:92:16:b0:2c:d1:
69:f4:77:59:c3:1b:82:a7:18:bd:0c:f5:d8:03:2c:
9c:b9:9d:2f:49:18:c8:de:60:c1:57:e8:65:b0:09:
e3:92:d3:fa:7e:7c:3d:28:9e:3e:01:df:97:93:31:
8b:8f:25:1b:b4:0d:45:99:1f:23:3d:ff:6b:34:ae:
4c:b0:8e:7e:38:21:8d:46:f7:e4:71:8d:65:e1:1d:
de:2c:3e:91:62:76:f2:a2:7d:79:c6:9c:90:ae:4f:
3e:4d:25:1a:27:d5:8f:cf:c7:2d:dc:58:df:8f:e2:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:94:AB:D1:26:A3:8B:4F:2D:99:2A:4C:55:82:70:C8:8C:5B:1F
X509v3 Authority Key Identifier:
keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:df:a4:b7:01:90:38:a7:31:eb:0a:e4:df:a8:7b:c7:91:28:
d3:d6:cc:88:61:88:c3:97:8c:53:b0:83:f8:22:54:a8:02:71:
05:f9:fd:b3:41:a1:82:2a:3f:69:77:c4:cc:a9:27:0d:c5:49:
9d:29:01:86:b9:77:78:a6:a4:0b:9b:4e:17:c2:35:11:35:0e:
4e:82:58:b2:fd:36:5b:e2:f2:71:49:e5:dc:43:a2:da:65:4d:
d7:f0:65:92:0b:61:b4:a6:80:7a:65:29:2e:e8:6a:8c:eb:13:
6d:11:29:e3:79:c2:6f:d3:8c:15:64:5c:59:0b:74:7b:94:a3:
99:8a:5a:ea:a8:ce:bc:21:72:10:3c:c2:f3:27:d2:4b:6c:c5:
f2:51:18:30:42:37:19:37:21:1a:4d:d7:4f:d6:5b:89:0f:1f:
db:83:15:e6:e5:8b:df:21:90:0b:2b:21:1d:63:d2:f4:0a:94:
92:a9:21:a9:aa:77:ad:17:da:7b:f2:02:07:02:32:a9:e0:98:
2f:2a:2a:49:a1:65:62:06:36:3e:0e:99:ec:2c:67:b6:5d:79:
78:0a:8f:1d:96:f1:77:4b:27:56:8c:9a:8f:5e:08:ff:2d:1b:
d3:29:3b:47:bf:e2:67:c1:cc:db:96:0c:6a:a4:d6:f1:62:99:
ee:bc:59:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG
QkVGQTVDRDAwHhcNMjYwMzAyMDA0MTIxWhcNMjYwMzA5MDA0MTIxWjAYMRYwFAYD
VQQDEw02OWE0ZGNiMi1lODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdbaQRXHgLFRDMGRTkaa+06UNJCbKboqEoB4YOViAsEVT2muX5I1muypcZaE
LdXNlfWtceGGj7SWP71f+GwvKxcZbKYEU9NXu+75MDQPXZ5je4eZHzI1KK17SpxB
fjHf1ZZAOy4MJAv6h736BEn45mz4+yaNrvysiMo6Ll9LgZdQB4FrHSbsXC1mqzYx
2UQEkhawLNFp9HdZwxuCpxi9DPXYAyycuZ0vSRjI3mDBV+hlsAnjktP6fnw9KJ4+
Ad+XkzGLjyUbtA1FmR8jPf9rNK5MsI5+OCGNRvfkcY1l4R3eLD6RYnbyon15xpyQ
rk8+TSUaJ9WPz8ct3Fjfj+IaPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmNlKvR
JqOLTy2ZKkxVgnDIjFsfMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1
RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REEyMC9CNzNCRjM3Q0I1RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJz
NzlzVGgtTUw3RF83NzZYTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA9+ktwGQOKcx6wrk36h7x5Eo09bMiGGIw5eMU7CD+CJUqAJxBfn9s0Ghgio/
aXfEzKknDcVJnSkBhrl3eKakC5tOF8I1ETUOToJYsv02W+LycUnl3EOi2mVN1/Bl
kgthtKaAemUpLuhqjOsTbREp43nCb9OMFWRcWQt0e5SjmYpa6qjOvCFyEDzC8yfS
S2zF8lEYMEI3GTchGk3XT9ZbiQ8f24MV5uWL3yGQCyshHWPS9AqUkqkhqap3rRfa
e/ICBwIyqeCYLyoqSaFlYgY2Pg6Z7Cxntl15eAqPHZbxd0snVoyaj14I/y0b0yk7
R7/iZ8HM25YMaqTW8WKZ7rxZ3g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:02 2026 by rpki-client