
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier: 0CxDEyoD9RKRjWeZeLsFViUHIQPBEuFoLFQ3kwLOay0=
Subject key identifier: C6:57:B7:9D:BB:02:40:95:CA:6B:ED:35:AF:DF:B2:BB:27:73:51:EC
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number: 014D
Signing time: Mon 27 Jul 2026 07:13:13 +0000
Manifest this update: Mon 27 Jul 2026 07:13:12 +0000
Manifest next update: Mon 03 Aug 2026 07:13:12 +0000
Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: 5awARVfEbobltO4sI/3LwmbN3ft8JWlWhPeTn7bZYvo=)
2: 496B943085B811F1904E05A160A30FBC.roa (hash: kzKLI8ZxIk66mC3lTcah6XxCKgGcbN+/Y9xbXXYxul4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Validity
Not Before: Jul 27 07:13:12 2026 GMT
Not After : Aug 3 07:13:12 2026 GMT
Subject: CN=6a670508-c66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:55:02:77:f6:d6:73:d9:b5:30:5b:48:94:
d8:3d:fc:66:5f:80:6f:7a:e8:4f:24:3a:9f:10:13:
7b:2a:28:0c:b3:c6:32:bd:a8:12:3a:cb:a3:6e:7e:
ef:fa:14:ff:0e:53:d8:58:65:0a:2c:00:6d:1f:d6:
c1:ad:cf:91:05:39:ab:3e:16:f6:ef:77:fa:51:91:
cc:77:e1:dd:f3:a4:59:7d:77:a7:3c:b3:81:e5:ee:
0c:ab:43:f7:42:c7:d8:20:88:43:3e:ac:dc:d1:74:
4d:72:a3:0c:0f:47:bb:37:74:46:cc:6b:2c:00:7d:
9e:65:3c:18:46:7a:f8:91:22:71:f3:d0:d3:02:b2:
ea:31:17:8b:8e:11:e8:f3:a1:cc:70:d1:e9:a7:c5:
25:17:29:ad:75:81:35:8d:51:9f:c4:fc:38:74:5c:
17:f6:71:b4:25:1b:06:5b:0b:16:e6:a6:d4:31:8c:
2f:22:13:58:f6:5a:80:16:95:5f:8e:07:88:83:5e:
23:84:a2:2d:5c:c8:90:f8:39:8f:5d:b6:77:1a:48:
62:0f:af:67:cf:7b:8a:66:a8:57:ef:e3:77:15:04:
f4:8c:f8:29:d2:c5:18:a4:3e:c0:d9:a3:41:80:52:
07:a2:9d:69:8a:f5:61:ff:2e:21:f9:c1:1e:40:f2:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:57:B7:9D:BB:02:40:95:CA:6B:ED:35:AF:DF:B2:BB:27:73:51:EC
X509v3 Authority Key Identifier:
keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:50:a7:81:a0:2a:3d:3a:d0:85:99:cd:56:f0:19:2f:96:6b:
f7:bb:2a:5a:af:c5:f5:27:05:77:f3:3c:5e:15:e4:a0:93:b2:
9c:dd:c0:63:5f:c6:df:1a:e0:77:28:ec:c4:5c:9a:e5:e9:61:
1a:01:2d:60:f8:eb:24:d5:dc:dc:47:cd:36:94:92:7b:65:6c:
26:f7:85:b9:3c:27:72:f6:05:4b:df:7e:86:f9:26:26:d3:7a:
32:91:e0:3f:db:9e:6d:57:2b:aa:06:19:17:a9:e7:0d:40:86:
19:5b:cc:1b:5f:92:c9:34:34:95:67:58:66:7c:ad:8c:5e:0a:
fc:a5:f6:4b:34:46:29:b4:df:e9:f1:1c:5c:3f:d9:74:ef:35:
9d:99:0d:6e:9d:6d:ee:e1:03:45:7b:e7:50:1e:cf:1c:ad:88:
93:02:2d:37:cf:b4:78:3b:ec:be:3b:0e:e9:65:0b:c5:09:00:
12:bc:6d:2c:93:67:44:f7:94:39:ff:45:3c:5c:0b:f9:fd:14:
77:19:04:ad:4f:c8:da:aa:75:d3:89:01:ad:3d:86:02:01:dd:
ec:fc:6f:5b:ba:fe:85:cf:92:bc:b6:fd:d7:6c:bb:88:cf:46:
e9:ff:c0:c2:14:2f:14:58:8b:40:63:6b:a2:10:6f:58:69:9f:
59:3b:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:42 2026 by rpki-client