
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File: lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier: grt2rEVS7LDkJL/ZywIkTRqUfwTKyF4f88k1G9Vu1eo=
Subject key identifier: 23:F6:10:53:3F:8A:09:4E:88:F5:B4:C1:BA:4F:74:1C:02:5A:1A:D5
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer: /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number: 04A3
Signing time: Fri 25 Sep 2026 01:21:28 +0000
Manifest this update: Fri 25 Sep 2026 01:21:27 +0000
Manifest next update: Fri 02 Oct 2026 01:21:27 +0000
Files and hashes: 1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: R1MDgagXf7ul31ImQIH79MOnGvOEm2pth2cXl1lsMSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Validity
Not Before: Sep 25 01:21:27 2026 GMT
Not After : Oct 2 01:21:27 2026 GMT
Subject: CN=6ab5cc98-69ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:e3:8b:66:cb:56:38:62:c7:85:2e:85:36:
18:e1:21:16:cb:b6:d5:cc:c9:ee:73:df:65:2c:ff:
69:c6:1c:50:97:80:94:4d:47:07:05:dd:f8:f7:3c:
56:3e:11:6b:ca:37:8e:f4:e7:2f:37:df:06:6a:ee:
14:15:d9:65:ce:37:70:94:43:92:04:5d:ee:b6:52:
76:2b:6b:b9:b1:8f:93:82:38:be:62:64:69:64:c4:
7f:4d:25:d0:88:82:31:84:0f:16:b3:96:95:73:65:
f0:34:fc:07:c1:a8:4e:6e:9b:01:8e:c5:5a:2c:15:
7c:7e:f6:45:06:57:0d:b0:25:29:9f:76:57:d2:4a:
c1:bc:d6:70:7a:fb:f4:24:52:2b:a1:91:ea:cf:0d:
0f:27:ff:e6:c6:f3:7f:b0:23:45:1a:6b:6c:d8:fc:
44:a2:51:f6:ee:95:8f:b8:23:f1:ab:1e:a2:8a:f3:
3f:48:ab:e1:37:45:ac:f3:ab:09:f8:30:5c:1e:89:
fc:7f:0f:8a:66:26:d7:a1:dd:96:ae:3c:27:06:b4:
60:5d:92:a7:ed:74:5e:51:25:92:5c:8e:2f:88:d1:
3d:9b:a1:2a:6b:a2:57:ea:b4:cd:ff:54:93:7c:7c:
71:c9:f7:72:dc:f9:e4:9b:84:ac:36:f0:4b:df:f2:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:10:53:3F:8A:09:4E:88:F5:B4:C1:BA:4F:74:1C:02:5A:1A:D5
X509v3 Authority Key Identifier:
keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:b7:8c:bd:24:94:a0:35:05:37:f6:03:fe:88:15:84:e4:1d:
11:2a:65:bc:a3:dd:6d:b3:27:b1:b6:02:b6:c5:9a:0d:59:4f:
e4:15:4a:a0:2e:ff:12:13:dd:ec:8a:8f:cf:ee:4f:ab:91:98:
3c:1f:23:f7:36:25:9a:67:be:a9:ff:3b:4c:d8:58:b8:5a:7d:
47:28:0a:f1:06:00:9a:2b:09:ab:5d:d6:eb:5c:0b:12:b0:a2:
88:4c:57:59:e8:08:7b:b5:14:f0:09:43:fb:bf:e4:49:41:44:
82:b5:d1:25:54:27:2d:c5:89:b5:5d:5a:f1:5e:0b:15:6a:bd:
35:df:fd:95:e5:a1:8e:2c:de:4d:a8:29:45:0d:5d:cb:00:c9:
8b:79:de:85:25:80:cc:e9:5c:4f:16:b8:73:4f:48:04:f7:22:
fc:f8:e1:76:2e:f0:56:18:06:81:bd:03:2c:a1:76:31:89:4e:
2b:96:c5:e3:1d:ab:d4:8f:1d:53:34:35:0f:7b:df:1b:df:2b:
bc:36:e6:82:b2:ac:b3:88:b9:33:36:d9:39:f1:50:04:00:b4:
6e:77:b9:53:76:54:4e:ce:7d:88:1b:1c:17:b1:a0:aa:77:ea:
95:5e:71:b1:c4:f5:3c:17:4c:cc:0b:e6:5b:96:34:53:d1:0f:
33:58:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:26:20 2026 by rpki-client