
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier: ChSa1XH1I7wFJPWK/g40AGpC+tiXjDerOFRfrhAzX2A=
Subject key identifier: 86:B2:38:B5:0C:F8:32:AD:84:61:80:CF:A1:E4:3C:B8:70:A1:BC:8C
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number: 010B
Signing time: Sat 19 Sep 2026 06:11:27 +0000
Manifest this update: Sat 19 Sep 2026 06:11:26 +0000
Manifest next update: Sat 26 Sep 2026 06:11:26 +0000
Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: 6Mv0Q1PGtr5B4mNesihXx7nDLVonLRznFiwLLUQ7U1o=)
2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: uwAj/+Du5C1qEvZtOUqf44R0VMo9+4/mthpipOHyiGw=)
3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: 5NNtAQyFropb/Z6y0svtRqsWdy6ThB8osPzJl9uYO4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Validity
Not Before: Sep 19 06:11:26 2026 GMT
Not After : Sep 26 06:11:26 2026 GMT
Subject: CN=6aae278e-129b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:58:f2:af:0f:86:a2:7b:4f:4e:cb:1e:94:
b7:4c:f6:06:bf:5c:27:d5:0d:f6:dc:ab:d8:7d:94:
9c:8a:d0:b1:c4:bc:bd:2d:a4:18:08:84:0e:ae:a2:
bb:c3:83:d8:89:6e:10:f8:68:06:32:b2:a4:ad:92:
5f:01:f2:39:3d:7f:1c:d9:b9:09:af:08:82:4a:a7:
d9:77:ab:13:28:49:87:82:2b:46:f4:21:88:81:55:
38:6a:81:38:c8:6b:f1:ea:62:b0:bd:ac:be:62:9f:
20:75:81:09:9c:d3:f4:b3:07:18:3b:cf:37:5f:f0:
52:1b:37:06:7e:7e:73:44:3b:0b:35:84:68:a5:4c:
cb:bd:99:9e:5d:65:77:db:cb:73:51:b1:d5:ca:9b:
20:12:f6:90:bb:1e:6f:3b:fe:e3:57:33:74:ea:5f:
dc:33:5e:ac:f4:a5:36:57:70:58:1d:c4:bd:ca:e6:
c0:b0:90:a6:51:53:8e:e1:7a:a6:71:95:70:09:e4:
fc:df:ab:48:34:2b:76:c9:81:f1:88:6f:00:90:08:
55:46:8c:82:50:5a:be:84:31:18:49:c4:08:ab:d7:
22:65:e3:ea:86:fc:24:a7:18:dd:f2:38:90:8a:89:
75:cf:9f:66:e8:90:a8:94:98:eb:ed:d0:c5:d6:71:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B2:38:B5:0C:F8:32:AD:84:61:80:CF:A1:E4:3C:B8:70:A1:BC:8C
X509v3 Authority Key Identifier:
keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:ab:6b:b0:a1:65:0c:eb:c0:13:08:05:bc:3a:cc:a2:c9:f3:
17:9b:bd:8d:4e:3d:19:9d:02:a4:c8:9a:fa:a9:27:17:ab:d3:
5b:8b:85:9d:99:89:fa:d9:f1:ca:5d:69:5d:eb:ce:3d:15:19:
a1:f1:2c:1a:c2:86:bb:40:41:3b:a3:e3:17:47:9b:07:ad:1b:
a9:7e:3d:6d:17:02:de:fb:91:f4:77:a6:6b:c4:ad:48:d7:8c:
d0:20:5f:3d:68:69:2b:74:0c:03:08:50:94:6e:cd:bf:80:25:
13:44:e2:b0:90:53:f2:90:74:fb:a0:10:60:f5:95:cb:8a:13:
84:02:59:d8:5b:2c:fe:bc:2d:5e:4d:f9:3b:f2:87:8c:67:ce:
65:da:af:94:cf:b3:49:51:be:83:b4:04:99:41:ac:29:58:7e:
c8:5d:f1:e6:9a:c2:1d:f1:35:27:49:2e:4b:64:a2:d3:70:d7:
6c:99:9b:09:14:1d:04:92:72:1d:3f:5b:0a:bd:e4:2c:12:a6:
80:5b:32:8e:a9:6d:0a:18:8b:86:90:ce:ab:4e:17:7a:94:2c:
dc:82:d6:94:55:ee:6c:49:30:e4:5e:0e:e4:ea:f6:03:50:cf:
8d:c7:1a:82:af:bd:57:87:c7:dd:36:79:fc:98:16:47:84:ae:
9b:b5:4d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:28:19 2026 by rpki-client