
$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: L9monQbAvFikMqVVlzoVdthFWilhrhom02aw0ZhDd7k=
Subject key identifier: B0:79:A6:4E:14:BB:2A:A9:59:D9:C3:0D:16:AC:C3:C6:F4:45:29:41
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4BD9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 4BAD
Signing time: Sun 20 Sep 2026 14:50:27 +0000
Manifest this update: Sun 20 Sep 2026 14:50:26 +0000
Manifest next update: Sun 27 Sep 2026 14:50:26 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: l0132+39jhXMnxv63YF/L7d5eIWEUYBfmy6Qe5sGqtA=)
2: oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer (hash: i0mvCv9BCkAZJXiyet6dSMMrqd+2TZuhoLyOP3Lqqlw=)
3: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (hash: ql//mmH3uX+M56UIRUJu1/aVCCndpyidtKkg2qBTf5Y=)
4: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: iV05xmMyePyIT86cKY8Y2kLrNQLqTwwd1A2Z00Rys/o=)
5: BvSy24SzhwK186kqeJJV2c_vPus.cer (hash: Qkd/KB4DV6H2ngRdLzN56fQNoJ9u96Tz//Ib8JxfNvk=)
6: ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer (hash: lLAv50rlFVQlzNgK2yqlYBfpR8GoyvEqug7FREo1+Cc=)
7: u_Gz58XB6yDJVjW4jkE07DamSWA.cer (hash: /cWiSXJLUhiEHMWpJvg6jcSRoa6h2/LjcNVn8dchMGQ=)
8: V3LjuCeMtseqvXrPnvViq1k8LoI.cer (hash: uTIB3+FuzPn41PDJrwadajxN3utd2Fi1QwKcnYkDfkM=)
9: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (hash: sYKa+Y5lE+05j9p6XCNihD6VxqVWOC0uNPeofzjcijQ=)
10: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=)
11: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: CSwwxhI62sXBUpjPgEmnyLlhThNiAd6aymOtHWTko68=)
12: _KtbpyYSYFeOSNmqwBIRqzpaIwk.cer (hash: htbBSMVTb1ucorXZ0udEzZrVuTkh1MbpLmulXXbWomU=)
13: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (hash: Bd/goy5yGEAJSuUTpPjEEoTLLlOno7n/yKKnsLU9Ymo=)
14: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: 8uhICv4Ua/GVjkWHxtdsoYmoqAISKKqyPkmvC9EVBnw=)
15: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: SeARXxioSSxZdrtzPF+zK2A5bqe0H2TKbzU72Ej7NZI=)
16: zURUsk4_99x1y76Rm92nnEe5Xqc.cer (hash: H5fg7c2O93XAHMjs397YJBjJaE7ncYjqoDI2vqqer3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19417 (0x4bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Sep 20 14:50:26 2026 GMT
Not After : Sep 27 14:50:26 2026 GMT
Subject: CN=6aaff2b3-b358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:c5:a8:a5:ed:8e:12:44:8d:fc:9d:8d:4b:
cb:ea:f2:5d:f1:af:b5:0f:6a:34:ee:e2:d0:cb:2c:
11:51:01:76:64:57:f4:6b:0e:9c:4b:96:1c:d2:52:
34:37:a2:33:61:df:56:27:12:04:24:f0:ae:a9:61:
7b:f8:37:2d:45:18:98:b3:01:eb:25:6f:67:7c:22:
4e:fe:3d:4f:01:e7:fd:8f:5e:6f:5e:51:b0:16:e3:
46:ec:dd:04:e1:5b:cb:f5:6f:82:ea:e3:06:2f:dc:
6b:bc:25:b9:79:3c:4c:5f:31:d4:b0:8d:2a:13:a6:
29:b1:bf:94:f2:93:12:07:2a:0e:f6:96:7c:a6:b2:
16:06:eb:c5:94:d0:ff:66:53:80:51:3a:d4:44:98:
44:19:56:70:e6:70:d9:0d:bf:b9:67:0b:e5:18:68:
cb:1b:3c:74:e6:26:88:29:f2:53:1f:7a:3b:b1:70:
17:5d:4b:db:2b:eb:74:f6:06:fa:7c:1b:5b:3c:b2:
c9:ba:46:3f:be:f0:f5:8a:a8:3d:74:2b:e3:20:e2:
73:59:22:58:00:35:f9:9f:a8:f7:db:44:88:f4:e3:
a5:bc:67:8c:b7:6c:89:25:b6:14:a5:e2:19:5b:6c:
3b:08:09:41:6f:68:d7:8e:0d:13:e5:1e:16:ba:a0:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:79:A6:4E:14:BB:2A:A9:59:D9:C3:0D:16:AC:C3:C6:F4:45:29:41
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:4e:2d:36:53:05:74:37:5b:d1:6b:64:14:bf:49:a9:cf:69:
1b:c4:06:de:76:78:53:5d:20:61:3a:67:45:71:c8:d2:0f:28:
f5:bc:ec:4f:81:c2:a0:b0:b0:6e:6d:53:1b:6e:ee:2f:6c:0a:
00:b0:aa:2d:5b:c7:70:fa:2a:cd:d0:fa:fe:18:7f:66:75:05:
9f:92:5d:a6:69:89:5f:5f:fc:47:29:4f:0f:16:a0:52:34:cf:
88:b6:23:3e:5d:87:8d:35:78:70:16:a4:28:11:ff:82:c2:91:
86:83:e4:aa:55:8b:fe:e7:26:ab:d0:0f:b0:6f:1c:31:db:cf:
ed:11:77:a8:db:66:18:9e:83:e2:7d:02:19:7c:17:63:f0:67:
cf:4f:76:fa:4d:81:49:a1:8f:09:6b:31:fa:bd:a0:c9:8b:80:
25:2e:1c:21:96:b9:e7:7b:7b:a6:41:83:8e:f9:c5:18:1c:db:
de:d9:88:8a:b4:cc:a4:dc:dc:0c:19:ed:4b:17:ba:4d:28:de:
42:ba:0a:63:06:92:43:87:b5:e8:3b:8d:09:8e:7b:9e:93:6a:
f2:14:ea:ab:9b:f5:c5:d2:17:15:9e:16:36:6a:1d:1c:7b:d5:
1e:12:fc:9a:1c:73:e1:29:15:96:e5:eb:ca:92:5f:2e:4c:e3:
ff:e2:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:34:29 2026 by rpki-client