
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier: OXFOd6QgTHWKIjuoZjZuMmm/owkMze96Qlr9y8cvsFo=
Subject key identifier: 83:8D:61:1E:58:1E:FA:EB:17:C2:84:5D:CA:EF:B6:52:01:8F:3E:DE
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number: EF
Signing time: Mon 27 Jul 2026 08:31:09 +0000
Manifest this update: Mon 27 Jul 2026 08:31:09 +0000
Manifest next update: Mon 03 Aug 2026 08:31:09 +0000
Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: VnyXuQm4Pd+lMRa3KwvJF6FTNP6ZvW8zYO6L0YABqiY=)
2: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: 5NNtAQyFropb/Z6y0svtRqsWdy6ThB8osPzJl9uYO4k=)
3: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: uwAj/+Du5C1qEvZtOUqf44R0VMo9+4/mthpipOHyiGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Validity
Not Before: Jul 27 08:31:09 2026 GMT
Not After : Aug 3 08:31:09 2026 GMT
Subject: CN=6a67174d-3a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:a6:de:6e:09:24:35:67:e8:55:e1:82:29:
e8:33:ca:e4:71:eb:21:e4:5f:79:96:ce:94:22:79:
e8:49:65:98:f6:32:d4:db:05:df:67:82:c4:36:3e:
b5:cc:09:a3:12:d8:6f:0a:2b:26:9b:64:5f:04:f6:
42:77:4c:bc:81:cd:75:f8:f4:71:f3:08:2d:da:9a:
0e:eb:af:f9:92:0c:fc:40:3a:07:1a:5a:66:4e:08:
40:44:f2:be:c2:dd:96:89:72:79:3e:97:f1:c7:38:
83:f7:93:af:91:17:d3:8a:02:88:78:2a:57:8c:61:
e4:bc:71:bc:37:3b:fd:72:c5:4a:3b:5f:ee:ed:b7:
2e:d8:51:6e:b2:da:6a:ed:88:b4:21:4a:65:40:37:
1e:43:53:f5:17:3f:3e:fb:1e:32:93:74:bc:f7:e9:
6d:c6:1f:30:05:e8:51:4b:4f:c1:ed:2e:5a:86:98:
18:04:4b:75:6d:38:44:5b:98:d6:b8:ad:f6:19:ce:
50:d4:f6:e3:19:84:bb:e4:28:8b:42:9f:cf:db:7a:
fe:7f:2d:d9:6d:d3:24:36:a4:87:a3:0f:a8:07:e6:
62:41:5b:39:7d:90:5d:f4:d6:a5:98:40:b9:e3:8f:
4e:ae:7f:c1:85:29:52:2b:50:f8:f3:c4:7e:1e:de:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:61:1E:58:1E:FA:EB:17:C2:84:5D:CA:EF:B6:52:01:8F:3E:DE
X509v3 Authority Key Identifier:
keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:42:86:83:ed:b5:ab:a9:cf:d8:e4:ab:f1:da:70:69:f6:70:
d6:2f:30:de:45:2e:7d:0c:93:1e:a0:78:b0:d4:c5:00:b6:26:
82:89:13:8b:ba:2e:53:17:4d:5f:34:ff:c8:d2:e1:86:f4:0b:
93:dd:c0:31:04:e4:e4:0d:24:25:0c:95:50:e0:ab:15:11:a2:
8e:23:2c:1c:02:b2:0e:4a:78:38:f1:9e:66:e5:cb:77:c9:82:
95:ed:bb:39:ef:03:5b:1c:76:a6:87:0a:dd:8d:7f:50:dc:f5:
fc:5f:12:af:6b:9e:8d:3d:65:75:9f:82:49:a3:a8:5a:90:8c:
07:44:db:50:eb:b7:c3:8e:b1:04:96:98:99:40:0c:04:85:92:
eb:57:ec:f9:66:0e:79:4f:2b:40:6e:e1:a4:9a:14:da:d4:bd:
84:e7:70:e5:61:bc:f9:7c:d8:3f:80:27:a7:9e:44:d9:a3:78:
3a:9d:d6:98:6a:52:47:6e:fe:92:93:55:7c:6e:24:02:18:23:
f0:cd:a6:46:94:fe:1e:d1:6d:37:70:97:bf:dc:33:a5:09:83:
1a:bd:26:68:48:29:2c:0c:9c:48:6b:5a:49:6b:f5:04:55:12:
18:ee:56:56:b0:4e:87:54:0e:3b:36:72:59:72:36:4f:af:87:
22:21:82:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:40 2026 by rpki-client