
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json)
Hash identifier: V/Wi0IR3aLzQaDKXk0L/ALhHtTQ4qCBk8dxLJVHubcs=
Subject key identifier: D4:2E:CB:8E:2F:36:17:82:7B:C4:43:10:4E:59:C0:5B:D3:4C:CA:33
Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
Manifest number: 0238
Signing time: Mon 27 Jul 2026 04:06:02 +0000
Manifest this update: Mon 27 Jul 2026 04:06:02 +0000
Manifest next update: Mon 03 Aug 2026 04:06:02 +0000
Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: oQc4GqSeDlwmErTzIg2/7McKHygQ5ZfYPb/gPn/FmEM=)
2: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: R8Xz4AKde3EwsZ0bzyfq8h/88WRmzgM83oD7fGiwBo4=)
3: C4CA725C687011EFA523204EC4F9AE02.roa (hash: /6gHyezYVVDm5jshkHJrGHxxNK6YvRh1Udvso6+2LXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Validity
Not Before: Jul 27 04:06:02 2026 GMT
Not After : Aug 3 04:06:02 2026 GMT
Subject: CN=6a66d92a-1cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:97:79:a4:68:f4:11:2c:cb:14:b8:9f:45:
78:39:ee:d3:d5:c7:e9:20:b7:a6:19:65:f4:9c:91:
2f:93:3e:7e:73:9d:cd:c6:57:48:c5:b3:15:35:4e:
0e:59:e6:41:62:d0:bd:ad:65:27:86:2c:3f:95:3a:
c1:86:9c:85:2f:e7:75:58:79:9d:07:a3:95:42:63:
7e:24:65:a3:98:a6:98:5f:27:68:ec:70:98:ee:9c:
cc:e0:93:56:05:36:80:21:1b:53:b3:b7:79:89:c3:
d3:7d:42:36:ac:fb:13:0f:4d:ea:f5:fd:f8:94:13:
2d:7c:1b:e2:77:55:2d:9f:aa:89:c2:70:15:ad:7e:
eb:da:83:19:98:9a:49:a7:f0:58:48:87:95:ea:87:
ac:2c:42:55:4e:8c:e1:ee:5c:44:fa:cb:cb:d9:bb:
4e:76:5d:ae:f2:dd:47:c9:7c:12:d6:2d:cb:a0:3c:
9a:72:ee:6a:4e:fd:ae:05:b7:48:97:10:2f:30:26:
bd:c3:fe:2a:74:89:58:d4:f6:93:4d:05:aa:b8:cd:
bc:a0:5b:9b:70:85:cf:d6:a9:fa:fc:c3:a6:72:b0:
aa:36:c8:1f:99:78:bf:74:72:98:a6:09:62:49:1c:
9c:d8:e2:7a:be:07:06:b1:50:4a:87:25:07:71:21:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2E:CB:8E:2F:36:17:82:7B:C4:43:10:4E:59:C0:5B:D3:4C:CA:33
X509v3 Authority Key Identifier:
keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2c:46:cb:a6:7c:d9:61:cb:d8:f0:21:3c:03:2e:7c:80:5e:
65:cd:e4:f8:53:d0:18:01:58:be:59:85:14:1e:ec:68:2e:23:
66:01:f3:ab:79:ce:1c:b7:4f:33:ce:ff:38:ab:7f:40:aa:44:
37:86:98:95:2b:29:2d:8f:5e:63:22:b9:ab:90:00:57:e8:9a:
da:56:01:7b:6a:93:87:c8:f1:42:76:78:1a:22:95:ff:dc:9f:
78:06:b9:53:bb:e5:8c:b4:bf:64:55:55:31:12:f0:06:1e:7b:
0a:d0:9f:da:2c:4e:09:79:e5:d3:3c:f3:e0:26:49:6e:5b:c4:
53:6a:78:8e:ff:eb:06:80:b5:5d:40:43:55:85:9b:b0:a1:18:
a9:4d:6f:c8:6f:1e:d8:54:f0:31:5d:87:be:6b:ae:f1:4f:01:
c6:be:b2:d3:91:14:68:50:ed:57:82:a4:ab:44:c4:c1:67:ea:
e0:4e:a9:62:50:36:70:d6:ef:bc:db:c8:50:6a:ac:4b:52:da:
dd:e6:54:a9:6c:52:89:39:9f:63:05:dd:59:1e:c6:78:6a:4a:
61:7d:03:10:0e:8f:f6:4a:40:11:17:da:28:dc:02:95:6a:9e:
8c:96:1e:dc:06:6a:85:9b:07:fa:31:7d:f2:79:e0:9c:fd:d1:
1c:3e:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:12 2026 by rpki-client