
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier: fPwDDGQwQ18ArMcfy8rJZsYUr7McA+QhknOqzaMNw9s=
Subject key identifier: D4:00:14:31:0E:28:8A:9E:2F:F1:79:3B:AE:BA:CF:66:59:9F:54:F7
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number: 024B
Signing time: Mon 27 Jul 2026 03:58:17 +0000
Manifest this update: Mon 27 Jul 2026 03:58:16 +0000
Manifest next update: Mon 03 Aug 2026 03:58:16 +0000
Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: +Y1MMqzGHFehYE6c/488M9w8ML3E4u/E8Ab143YyjCc=)
2: 95FE27F02D1511F19EAB6E70B3833773.roa (hash: hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=)
3: 3304B5BA43B311F19399644A98833773.roa (hash: bzOsUU4L5zybRan2RbEqjLxhGbEC4X30U/TXsNv87pc=)
4: 6445C13C2D1511F18C0F846BB3833773.roa (hash: PLgXnUtV5/qDMTfK+s5CXVumrPmYkILffVNAYNUoLk4=)
5: AD4C18D62D1511F19E800787B3833773.roa (hash: gF6FfjxDgiZ5qTPAnk0dNcAHblND2UNyNpInYeZ2Rc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Validity
Not Before: Jul 27 03:58:16 2026 GMT
Not After : Aug 3 03:58:16 2026 GMT
Subject: CN=6a66d759-4fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:66:30:2c:fc:0e:86:a6:1a:f3:2a:9b:7e:
2b:74:54:ae:3f:f4:48:39:fb:31:a2:c8:d0:c2:36:
ad:f0:10:9e:7d:83:21:53:74:29:81:84:7b:fc:ff:
51:c6:b2:60:bc:7d:83:f2:21:66:f3:d6:fb:ab:50:
64:a0:c3:b0:80:9f:5c:03:a8:1e:8f:61:e3:77:08:
b7:f5:47:fb:0b:49:94:10:fa:ae:c9:dc:ad:92:a6:
90:b8:c1:b9:9a:12:d9:01:87:05:f4:de:df:8c:11:
36:1d:41:2d:2f:56:c1:48:95:b3:98:5e:c0:69:8a:
f8:4a:b1:49:0b:d0:22:c9:65:cf:d1:ae:3f:01:bc:
a7:6c:32:64:c6:40:0b:c9:7e:ee:0c:d7:ef:d4:2b:
38:b5:d5:3e:1a:0c:0c:40:f9:be:90:28:6b:75:38:
e8:ed:33:a1:fb:92:1a:12:65:1d:e0:8c:c1:0b:fe:
91:de:8f:f8:af:f0:88:8b:5e:3d:a2:29:33:a9:e3:
5a:89:5a:88:09:8b:4e:8c:70:af:24:df:72:d0:63:
6d:e4:7f:6d:92:02:98:3e:30:42:8a:f0:37:9e:e8:
2b:9d:cd:2f:aa:5c:87:2b:b9:b0:92:46:37:bd:39:
33:af:cf:a9:fe:4a:ab:e7:8a:2b:6e:4d:f4:aa:2f:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:14:31:0E:28:8A:9E:2F:F1:79:3B:AE:BA:CF:66:59:9F:54:F7
X509v3 Authority Key Identifier:
keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2b:10:ed:2f:41:fe:6a:bc:88:70:8f:95:13:a0:01:16:0e:
da:94:4b:8b:bb:b1:eb:16:97:7a:98:6f:1a:3f:3f:18:aa:8c:
ba:a3:5c:d8:7b:09:77:39:29:8a:be:93:aa:de:e2:b5:a1:fa:
ad:ee:fa:ef:3f:e5:2a:ca:70:3f:cb:3e:8f:38:54:15:73:55:
87:80:f8:85:5f:bf:4f:64:24:7e:c7:29:64:39:39:9f:52:8d:
b0:9d:88:c7:b4:cc:34:5b:75:b6:86:7d:89:79:a1:59:77:d8:
02:a8:45:a9:1e:a6:36:f5:8f:c9:35:4d:ae:a4:fc:f3:3a:46:
4e:ba:3d:37:26:c0:4b:df:aa:64:79:a3:3f:30:05:9f:bc:1c:
5a:d8:4d:3f:c9:bd:75:e0:c3:13:46:ec:24:73:39:a9:8e:4a:
bc:b1:3f:9d:31:21:99:49:ed:fa:d5:b4:f1:32:75:f5:b3:a2:
f2:f2:47:14:0f:da:ab:05:01:95:96:ec:bb:50:7a:a5:83:ca:
fd:ed:c8:4e:47:16:4c:bd:75:fc:95:ff:c3:9b:df:43:12:9c:
cc:59:bd:13:fe:b5:2d:2c:2c:51:3c:5e:97:1b:e4:22:af:0e:
de:ec:07:70:21:c9:b2:e8:fb:64:e8:51:a4:3b:b6:20:81:95:
f8:a2:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:30 2026 by rpki-client