
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
File: L6lxpjvCY6602uvyDC_HEYPKZI8.mft (raw, json)
Hash identifier: icPL5SiImiYCINrHRNtYM6/K+X26ZFzZ4JyiQHR//ks=
Subject key identifier: 94:4B:64:6A:51:AD:38:C0:4A:37:D8:83:79:E9:D1:A7:B6:2E:65:3D
Authority key identifier: 2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F
Certificate issuer: /CN=A91F5DFB/serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
Manifest number: 60
Signing time: Mon 27 Jul 2026 10:24:51 +0000
Manifest this update: Mon 27 Jul 2026 10:24:51 +0000
Manifest next update: Mon 03 Aug 2026 10:24:51 +0000
Files and hashes: 1: L6lxpjvCY6602uvyDC_HEYPKZI8.crl (hash: NClvCiKnPZxlCM0dfNA238tOsEZohMkz/V3PitTksEc=)
2: 3C5B5EF4FDC011F0B8AD40E9676F56BC.roa (hash: z+YkDVCxHIqN3QUlYGYvRtLpkeGO91vbNLFc9h3UONw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl
rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5DFB, serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
Validity
Not Before: Jul 27 10:24:51 2026 GMT
Not After : Aug 3 10:24:51 2026 GMT
Subject: CN=6a6731f3-a7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:9f:4d:25:a9:52:cd:36:08:99:23:86:94:
7b:73:86:c2:05:bb:f8:4a:a9:c6:14:33:c2:d4:1e:
f8:99:d3:0a:15:af:08:9e:ba:c4:32:5e:1e:20:4e:
7d:57:f4:42:e9:57:c3:88:a5:8a:92:8f:a6:89:53:
cd:5d:3c:27:c2:87:9d:90:ae:07:b3:e5:13:01:fe:
53:3e:ea:4b:5e:fe:a7:54:8b:7e:7d:a2:f4:e4:d4:
76:d7:c4:8b:16:5f:b0:d2:02:97:2c:b1:d6:d9:80:
f4:c5:82:97:23:7b:a9:e0:03:47:5b:d4:a2:e7:f9:
da:a7:94:4b:5b:93:33:46:17:2c:96:ec:ba:9b:b0:
92:c0:ac:35:47:56:02:34:1e:c9:6b:8e:77:97:10:
b7:48:5b:b6:b2:c6:73:83:9a:b9:06:15:7d:67:bc:
3e:58:4e:11:4f:22:f9:d0:1d:64:79:18:cf:27:75:
62:ea:0f:01:03:0d:3f:22:54:63:25:99:8c:15:2a:
84:d6:74:06:be:c7:73:85:89:12:11:4f:d9:ee:d2:
7d:cf:5d:57:67:45:de:65:c1:70:83:83:0b:44:f6:
d3:12:44:b1:1c:dc:c0:31:38:34:49:50:e2:67:8c:
79:b9:0e:59:61:32:a3:4f:92:5b:35:a5:bb:a5:a9:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:64:6A:51:AD:38:C0:4A:37:D8:83:79:E9:D1:A7:B6:2E:65:3D
X509v3 Authority Key Identifier:
keyid:2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:da:47:a7:4b:54:bd:31:22:18:c2:5c:d1:d0:37:cd:c9:06:
3c:ad:74:13:b1:60:43:c9:6b:33:08:83:b0:03:a8:9a:a8:8a:
11:b3:52:71:d7:bf:fc:d0:07:8a:a8:9c:a2:1e:1e:70:c7:78:
52:6e:4b:f5:ef:6b:07:ce:cc:b0:48:92:2c:88:3d:47:6d:51:
f7:f4:ae:46:63:7d:98:c6:3e:f3:8f:f7:39:6c:71:06:e2:fe:
d2:e6:94:9f:b9:85:d5:26:35:9f:05:b5:14:0a:e7:4e:38:b1:
25:60:71:ee:49:e8:58:31:43:de:90:da:b0:78:a5:d2:4f:34:
70:59:1b:5a:88:91:40:05:89:69:72:5b:c4:bd:67:94:ef:33:
d6:49:84:60:7f:42:4a:e7:8a:50:4f:14:24:89:41:f8:e4:91:
84:31:9f:1d:d6:e2:0d:cd:71:4c:95:08:14:5a:7d:7a:dc:5a:
55:c7:ca:1a:3c:77:62:bf:23:5d:58:f9:b2:69:2e:68:5a:eb:
60:a7:a7:12:16:70:59:38:1a:da:76:d0:0c:7b:79:e3:19:f8:
13:c6:83:bc:7b:ac:d0:a5:fe:9e:11:97:4e:12:3a:5e:89:31:
2a:6c:68:b2:a9:0b:e5:e0:14:6c:c7:a3:d6:6c:f8:9c:f1:85:
58:bf:5e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:51 2026 by rpki-client