
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
File: lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft (raw, json)
Hash identifier: 0A8WydHq5A1887yBqTugE3A8ELbG1AvwQFDWhVCsw1Y=
Subject key identifier: 19:B8:03:AF:68:F9:22:C2:56:9F:7E:92:8D:8B:AD:F6:03:A2:28:8D
Authority key identifier: 95:65:01:9A:A6:51:69:5E:04:F8:61:BA:1D:3D:6E:FF:3E:BA:4D:BB
Certificate issuer: /CN=A91187F1/serialNumber=9565019AA651695E04F861BA1D3D6EFF3EBA4DBB
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
Manifest number: 19
Signing time: Mon 21 Sep 2026 08:58:09 +0000
Manifest this update: Mon 21 Sep 2026 08:58:08 +0000
Manifest next update: Mon 28 Sep 2026 08:58:08 +0000
Files and hashes: 1: lWUBmqZRaV4E-GG6HT1u_z66Tbs.crl (hash: E56WnIGSbtXZxBEeUecrK9OdPl+uC1xks5cb5NQCTRM=)
2: BE2B8A2E949E11F1B3CB7B066C11F970.roa (hash: UCN2Zm5VCKtgcnFKRnHOKmxNgbpNt9SjwIItt5plX9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.crl
rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187F1, serialNumber=9565019AA651695E04F861BA1D3D6EFF3EBA4DBB
Validity
Not Before: Sep 21 08:58:08 2026 GMT
Not After : Sep 28 08:58:08 2026 GMT
Subject: CN=6ab0f1a1-c1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:15:ae:50:2f:b3:65:69:35:37:30:36:ee:
69:7a:55:29:23:13:4c:7f:43:ba:b5:e2:86:73:2d:
e5:2c:55:c9:8b:eb:f6:eb:6b:7c:2b:f6:d5:46:3b:
77:26:d4:17:38:ab:a8:ed:69:48:50:f4:57:26:ac:
91:e2:4b:38:7e:23:00:b9:08:ed:73:cf:5c:e3:3a:
64:33:0f:e0:52:65:ce:db:9b:05:a0:dd:9b:14:49:
4d:26:fb:37:d1:2d:95:1f:27:cf:3b:3e:57:7d:22:
c5:07:31:86:19:64:b8:70:fb:74:64:40:38:15:b5:
0b:37:9b:ef:49:26:4b:c5:41:28:67:b4:03:bc:ce:
a1:ed:9a:e2:59:18:ef:cb:b6:90:b1:35:c8:2e:60:
8e:de:0b:90:5c:24:9e:72:f5:51:08:c5:96:f6:1a:
f7:3d:f2:3c:f2:c6:9f:af:bc:55:8d:2c:e5:de:8a:
48:3a:e9:e0:4f:b1:95:0d:ba:75:ac:02:f3:eb:fd:
8d:a8:7a:15:e7:28:86:63:23:34:aa:54:72:7c:ff:
21:25:64:69:92:65:f4:47:1a:e8:2c:23:f9:01:3d:
d0:9b:bb:31:f6:7e:2c:99:4f:81:a3:04:38:50:97:
da:55:74:ab:f2:a5:46:39:d6:e1:a5:d8:f7:a2:62:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:03:AF:68:F9:22:C2:56:9F:7E:92:8D:8B:AD:F6:03:A2:28:8D
X509v3 Authority Key Identifier:
keyid:95:65:01:9A:A6:51:69:5E:04:F8:61:BA:1D:3D:6E:FF:3E:BA:4D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:eb:69:5f:3c:84:9b:a8:2f:25:5f:d9:1b:7b:1b:e2:df:
aa:86:75:f0:0d:fb:37:5c:28:69:1c:b1:df:b7:46:b5:de:3b:
36:73:12:e9:2c:82:8a:e9:86:af:8e:94:b1:28:b9:1c:ec:b0:
29:f1:71:e3:3f:82:79:9f:20:63:5c:7d:41:01:06:89:c3:05:
a9:9a:2a:3b:06:28:b6:93:d4:87:13:df:06:7f:e3:af:de:3f:
f4:30:e5:77:d3:93:5c:ff:dc:df:60:74:b0:c7:75:c9:f5:25:
b4:4a:6e:16:48:88:b0:1e:7b:fd:ed:72:80:2a:c3:45:db:ac:
bb:44:07:69:5f:96:8b:e1:d6:15:33:1f:4a:5c:ec:53:a4:3c:
3c:61:e3:60:7f:d0:f5:ce:51:f3:fc:f7:4f:2d:fb:db:d9:e0:
e4:3b:e6:50:0f:a4:93:f0:50:86:d8:42:ba:97:59:1c:ed:f5:
51:66:a9:a3:0c:fc:d4:91:40:07:7f:fc:d7:7e:b6:8d:ef:01:
01:af:a4:e4:99:d7:1b:12:0f:59:d0:68:68:f0:c9:af:bd:7e:
48:b7:f1:c0:22:a1:2b:b6:15:39:92:a7:a0:b7:35:c5:e8:f2:
a9:89:ac:b8:8b:20:9d:d5:9d:db:4e:af:53:dc:65:7e:87:86:
fd:a9:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:32 2026 by rpki-client