
$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json)
Hash identifier: x44Sa8PrUDGrK+weHKUnFtWrktHoNGjF4glIqgXiunM=
Subject key identifier: AA:4F:B7:7D:24:14:71:8F:D6:84:8D:B4:7D:E5:74:A7:CF:0A:AB:E4
Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17
Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17
Certificate serial: 0249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
Manifest number: 0249
Signing time: Thu 23 Jul 2026 03:33:52 +0000
Manifest this update: Thu 23 Jul 2026 03:33:51 +0000
Manifest next update: Thu 30 Jul 2026 03:33:51 +0000
Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: X7SBMP90Ub2TVAOTiJQAJ3sAO0zt3UJPasWlYcZdAwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl
rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17
Validity
Not Before: Jul 23 03:33:51 2026 GMT
Not After : Jul 30 03:33:51 2026 GMT
Subject: CN=6a618ba0-2bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:35:df:3d:67:2c:6a:16:fe:b4:57:9a:8d:
8a:6c:14:fb:cc:ff:25:17:b6:0c:f5:00:c1:58:a4:
5f:d3:e1:20:97:35:ad:b5:cc:c2:5b:95:f1:34:64:
b4:a4:21:97:05:d3:09:2d:58:38:ee:4d:8a:c8:02:
cd:d3:f4:28:06:1a:53:f2:1d:50:85:5a:88:14:72:
29:bf:79:9c:49:5b:5e:c2:71:c1:8c:d4:76:61:76:
f6:10:9a:fe:76:43:89:ac:68:12:2d:6e:ab:3e:cc:
d8:c6:20:50:ba:a1:5c:e0:f9:fe:cc:a3:74:ec:47:
e7:fb:17:8a:6d:f2:44:71:a0:e3:04:f9:f5:ce:6b:
7d:a1:9b:4b:ca:02:2c:ae:47:3f:53:59:bb:9c:5b:
39:ca:b3:56:55:06:d3:29:4a:7c:2a:bc:7e:89:02:
af:de:8e:f4:de:7a:b0:3d:2e:2b:c0:4f:ca:75:d8:
5e:6c:5f:cf:a5:e6:f2:1b:45:f6:1f:af:96:20:ee:
3a:d8:58:99:ff:7b:a3:5c:e0:14:da:e0:42:93:bd:
40:c1:4d:70:78:db:17:47:29:52:3c:4f:49:9b:b4:
03:3d:fa:41:ab:89:bf:ed:c7:06:a4:c5:6a:0f:88:
c1:3c:3a:d2:5e:b7:79:65:9f:9a:b3:87:24:10:41:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:B7:7D:24:14:71:8F:D6:84:8D:B4:7D:E5:74:A7:CF:0A:AB:E4
X509v3 Authority Key Identifier:
keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c2:6a:6d:48:00:2e:7e:a6:d6:76:cd:7f:cc:db:34:22:02:
f4:84:21:53:16:1a:50:4d:c3:fa:d6:4c:27:48:60:6e:fa:94:
39:01:45:72:e2:76:22:c8:fb:69:85:d6:21:b3:f5:79:b8:f8:
91:e4:d9:c0:42:20:c2:87:5b:e8:9c:a7:75:a4:b2:1b:49:ef:
48:0c:68:95:93:ea:d4:fc:d6:4a:3a:6c:a9:8e:b2:67:d1:c7:
72:aa:b1:c3:7b:02:44:86:f3:8d:e1:48:20:58:9a:3c:ce:65:
55:51:05:df:a1:71:e0:d2:d1:78:13:0b:43:0d:44:af:99:c8:
66:c8:40:6d:93:d0:6c:2b:20:8a:02:c9:a8:3e:fd:f0:fe:f0:
58:e8:82:c9:b6:1b:f8:d0:9d:64:c0:5c:5f:20:1b:9c:c2:45:
ce:d6:db:fd:16:90:c2:a8:89:6e:11:c2:2c:af:ff:15:a0:49:
31:c5:5c:66:bc:90:8b:92:f4:a3:ef:2e:e5:7e:d2:56:6b:39:
71:fe:7c:24:54:da:e9:f7:90:dd:cd:da:cd:d3:3c:a6:34:59:
87:9a:58:3e:69:2e:c2:da:45:c3:5c:93:be:2c:97:c7:54:5c:
e6:e2:01:bc:ef:33:8e:99:4e:14:d5:37:7e:31:39:1a:d8:5e:
f1:2a:08:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:26 2026 by rpki-client