
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File: lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier: bvLwfm2fbmf/Nv7EJk7kzIPWtAcsaeS9xXgFrsvUQ/s=
Subject key identifier: FA:2F:A7:A6:A6:D7:01:24:A0:CA:9E:25:1B:AA:44:A2:7A:67:06:ED
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer: /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial: 02AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number: 045F
Signing time: Mon 27 Jul 2026 02:55:03 +0000
Manifest this update: Mon 27 Jul 2026 02:55:03 +0000
Manifest next update: Mon 03 Aug 2026 02:55:03 +0000
Files and hashes: 1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: q/hex14tQEv9wfEhdWirio+wvXI5BMGbizUZrP/zPts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Validity
Not Before: Jul 27 02:55:03 2026 GMT
Not After : Aug 3 02:55:03 2026 GMT
Subject: CN=6a66c887-c097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:ec:d7:72:18:70:ba:df:a1:83:8d:24:18:
21:c4:c0:4b:65:e9:48:22:b6:9e:79:e7:d9:0e:42:
24:1d:21:97:43:63:26:bc:67:6f:0a:bb:c3:a4:73:
d2:58:1a:c1:38:28:d9:9e:bf:c1:ed:a5:55:0b:c4:
fd:01:7b:8b:22:3d:bb:32:7d:9b:b7:ed:8c:e6:61:
6b:34:60:13:2e:b8:4d:0e:5f:41:20:ea:21:ad:e7:
03:41:93:3a:f2:c8:f2:e5:bb:f6:33:c8:b6:62:cf:
db:82:0b:8a:bf:45:91:88:37:e5:5c:74:e7:6e:75:
2b:75:7b:cb:1d:af:cf:87:fe:92:1e:80:cf:04:38:
d1:40:37:5d:71:f1:76:c4:f2:37:56:9a:38:67:ed:
aa:85:c3:33:a4:52:59:f8:59:14:0f:27:0c:43:ff:
04:7d:06:3b:44:63:12:40:63:7f:18:4b:7f:8c:9f:
85:36:ef:f6:85:32:f1:61:c5:49:45:3e:ef:d4:8a:
3c:10:66:cb:54:97:4d:d9:46:c1:97:4d:fb:fa:25:
04:50:58:62:f0:eb:34:d6:c9:b3:cf:15:6a:b3:e9:
68:23:be:1c:c9:4d:85:58:f0:40:98:d3:92:9e:b9:
2f:6c:33:45:b8:b8:b9:f3:3f:f7:00:48:b1:a0:c9:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2F:A7:A6:A6:D7:01:24:A0:CA:9E:25:1B:AA:44:A2:7A:67:06:ED
X509v3 Authority Key Identifier:
keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:63:5e:1c:4e:5d:eb:47:19:e1:e8:a3:e7:b6:92:3c:2e:7e:
78:71:62:2b:91:61:d6:fc:f6:d4:68:47:85:c4:14:21:8f:f0:
1c:9a:1c:77:2c:c4:ec:df:5b:57:6b:bc:5e:71:84:80:a9:e8:
20:a5:ac:91:4d:b4:ab:bc:9f:f9:60:12:ca:03:15:64:18:fa:
c6:f8:1f:2e:96:2b:29:32:b9:90:ed:2e:4c:28:54:a8:aa:6c:
58:b3:49:e2:66:ff:22:24:6e:c3:be:a7:03:a0:01:ba:7b:e5:
16:37:6f:a7:cf:06:bb:b2:13:3d:72:b9:dd:6a:8b:08:50:df:
a0:b3:0e:07:75:13:af:37:79:98:29:eb:eb:b4:c9:b8:57:8e:
a3:5c:3a:ec:08:0d:2c:d4:e4:07:05:ef:e1:dc:32:79:52:ee:
ad:d8:ac:3d:d8:41:6b:c7:46:0d:39:b6:0a:e6:28:18:55:a5:
75:34:01:96:d3:87:52:a5:ca:8e:fd:82:b5:9d:3f:c0:f5:c8:
6b:e2:62:f3:b0:5a:06:a0:07:0b:53:20:75:d4:9b:6d:45:5d:
18:57:d7:44:42:ad:b3:80:0e:ff:9a:9f:16:fa:7b:b1:ab:77:
31:fd:60:2c:56:a1:c1:1c:9e:fd:a7:c9:9b:d5:be:39:eb:17:
e0:59:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:10 2026 by rpki-client