
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: mQvX/W7CHQLkK2tmNLWh/UEnU8Z7Jl9JJ3NOE8m3ZqA=
Subject key identifier: 8D:3A:57:25:31:74:7F:12:35:56:37:9D:69:6E:B7:E2:9D:B6:0C:10
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4B1D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 4AFD
Signing time: Tue 28 Jul 2026 15:41:18 +0000
Manifest this update: Tue 28 Jul 2026 15:41:17 +0000
Manifest next update: Tue 04 Aug 2026 15:41:17 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: 6okhl8J1kzOB7MU4D+UcMpS0zQedsmO0yFFj94n1/J4=)
2: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: SeARXxioSSxZdrtzPF+zK2A5bqe0H2TKbzU72Ej7NZI=)
3: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=)
4: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
5: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (hash: Bd/goy5yGEAJSuUTpPjEEoTLLlOno7n/yKKnsLU9Ymo=)
6: BvSy24SzhwK186kqeJJV2c_vPus.cer (hash: Cy51FJsOgmK/E7wlpy0E5rXUKLSOTbCvLcmr1LlMA0c=)
7: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (hash: sYKa+Y5lE+05j9p6XCNihD6VxqVWOC0uNPeofzjcijQ=)
8: zURUsk4_99x1y76Rm92nnEe5Xqc.cer (hash: H5fg7c2O93XAHMjs397YJBjJaE7ncYjqoDI2vqqer3I=)
9: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: iV05xmMyePyIT86cKY8Y2kLrNQLqTwwd1A2Z00Rys/o=)
10: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (hash: kRE596OuuyWoxbv8T1vR2OaR4I4quaciUDwMti2Nlmk=)
11: _KtbpyYSYFeOSNmqwBIRqzpaIwk.cer (hash: VxzHTIWHWE5e1kkdmrFBypeeSBudraax6wjaIcwT32Y=)
12: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: 1+Rzv17HOJVmhyptKkOz5vmBbVoA02iCHrgaS/bnCHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19229 (0x4b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Jul 28 15:41:17 2026 GMT
Not After : Aug 4 15:41:17 2026 GMT
Subject: CN=6a68cd9d-e08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:f2:28:c5:62:9b:63:74:f7:48:f0:c1:63:
49:51:59:d7:2d:e7:58:28:a9:70:00:0b:cc:50:ca:
9b:16:b7:6e:c8:43:da:f5:c6:a2:db:b6:5b:f1:cd:
cf:f3:0e:ff:9d:68:b8:1e:19:37:34:1d:28:90:14:
0b:20:65:91:05:d4:12:9c:37:d6:74:f9:4d:ce:a4:
de:81:dd:c9:41:83:70:24:47:7b:a7:7f:02:79:70:
29:e4:00:00:32:b9:cf:bf:7f:de:7d:a4:8f:3f:b5:
0b:5f:e6:26:c5:c8:fb:dd:b0:eb:31:46:40:35:d4:
81:50:ea:8e:20:27:14:c0:83:5e:61:b0:cb:0a:d3:
f2:86:12:df:12:bd:3b:94:e9:50:25:50:52:99:fd:
43:e3:8b:40:fa:47:7b:cc:6e:c3:3c:ba:b6:28:2a:
fd:01:d0:ab:ac:52:43:89:71:02:5a:e4:93:75:e6:
a3:a6:3f:e2:5b:e5:dc:81:06:2e:cf:12:b8:46:2f:
41:e4:fe:de:74:24:15:a1:5e:97:64:da:db:6f:4c:
30:2a:8c:78:5e:6b:3f:eb:1e:a1:c2:bc:e5:e6:f0:
41:24:44:b0:f3:48:62:44:45:4e:a6:b9:c6:06:02:
ba:2f:09:5a:cb:cc:80:1a:ed:51:6f:54:e3:06:ad:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3A:57:25:31:74:7F:12:35:56:37:9D:69:6E:B7:E2:9D:B6:0C:10
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5e:94:b9:a9:ae:b7:8a:e2:eb:00:ff:fe:2a:49:df:75:41:
f8:2d:67:1f:6f:28:f7:1f:cb:c6:4d:f3:cf:92:3e:9c:89:45:
32:bf:c3:41:27:bf:57:61:cd:11:3a:76:9b:ef:38:a1:a0:9e:
f5:de:a6:ff:d7:c8:67:aa:54:07:2f:fb:b7:b5:5d:87:e3:fc:
38:d2:9c:13:aa:e9:91:71:6b:8e:0e:74:2a:f3:28:e0:f5:7a:
66:ef:44:ae:13:b7:15:77:1a:bf:55:d6:9a:d6:94:66:ae:ae:
c3:b5:9b:7f:5e:88:33:9a:2e:e7:5b:48:b0:86:53:6f:e5:dc:
f3:1e:ea:1b:08:45:b1:2f:9f:0f:c7:07:31:ca:6a:90:f7:50:
99:3b:71:4c:25:42:24:84:16:7e:21:43:28:3e:24:50:6a:f9:
ea:dd:d6:5e:dd:f9:33:39:7f:10:f2:8f:0c:44:18:fd:a9:66:
b9:e3:d8:03:9a:c9:e4:89:99:88:6e:a4:9f:64:57:7b:46:0e:
a5:23:57:62:c3:2e:bf:32:9a:6e:8d:d7:b6:b4:66:99:54:6c:
3b:4d:dc:8c:35:9a:32:32:28:47:2f:3f:07:1f:94:7c:91:15:
7a:45:50:ca:5e:79:d4:9c:7a:38:fc:58:6c:37:e6:3b:67:ee:
a3:d7:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:08 2026 by rpki-client