
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json)
Hash identifier: VnW7K7RRga1zN9H3Hb/T8VCeUvPb3+6Op2cpGWzNCXc=
Subject key identifier: 7B:96:F2:9C:BD:89:B2:17:8D:4C:FF:C0:81:76:B9:DE:AF:29:34:4D
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial: 0640
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
Manifest number: 061C
Signing time: Wed 22 Jul 2026 23:37:04 +0000
Manifest this update: Wed 22 Jul 2026 23:37:04 +0000
Manifest next update: Wed 29 Jul 2026 23:37:04 +0000
Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: hP9PsxOw73+KZjNLcTb4ZeT3j6VsZ8Z5NehbkLs0GBw=)
2: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: +d1MUKmmVJG/vsTFf7Frn1NwsWtESd/BW6+x47gDzSQ=)
3: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: iuk/ykP+WarrOSzWEJv6JFHYe5vwgB3sie5LRWLne0s=)
4: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: 3HHpLWwhlM54c0ygayHpZ//nfGJy4YzZlrDagN2/hEE=)
5: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: Ae3vnYMRPKUdXa+CO5NCrtQU86FdJMZKr59EI0hk4E8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1600 (0x640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Validity
Not Before: Jul 22 23:37:04 2026 GMT
Not After : Jul 29 23:37:04 2026 GMT
Subject: CN=6a615420-1f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:df:c5:c9:76:e3:26:db:38:24:6f:01:2d:
6d:32:b5:ac:66:e6:49:82:98:c3:0f:90:e5:0f:35:
f6:fc:4f:ba:49:39:9e:1c:81:ad:05:8d:16:f2:0e:
9b:cb:ab:b4:52:66:3b:ef:2c:85:9b:25:ef:d9:8b:
44:79:7c:d3:43:bb:49:d6:d5:3f:8f:91:ce:6d:c1:
c2:04:ec:17:0c:b9:c5:c7:34:d4:04:25:68:32:36:
e0:6c:99:4a:c4:7e:cf:c3:2a:1a:3a:17:c6:3c:83:
c7:38:0f:13:f1:db:c7:0f:60:c6:e9:ad:18:a2:c7:
0b:21:47:46:23:55:83:5c:56:ab:2d:ec:88:ce:1d:
e9:4a:00:db:2a:86:43:24:5d:e5:3e:22:65:3f:e7:
e9:bc:39:8f:44:4b:80:86:0d:43:5f:95:a2:46:b8:
ee:d3:5e:a5:88:d0:7a:a7:f4:06:e7:97:ce:1c:6e:
14:ed:dd:03:fe:7b:1d:cf:3a:56:fe:f2:32:7c:ff:
4c:0c:b5:f3:b1:f3:ee:0f:9b:07:0b:49:bc:9e:df:
43:c4:a4:5b:78:79:49:49:e8:9c:b5:e4:73:68:9a:
ad:8a:7d:61:70:9a:b0:8a:cc:75:82:3c:cb:46:63:
e0:e6:3c:05:ef:e1:38:1b:c9:ab:d6:9c:7a:30:54:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:F2:9C:BD:89:B2:17:8D:4C:FF:C0:81:76:B9:DE:AF:29:34:4D
X509v3 Authority Key Identifier:
keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:bb:17:68:8d:a7:88:54:4c:4f:81:ee:b9:0a:4f:67:c9:ab:
a1:eb:09:9f:af:f1:e5:2d:76:4e:e3:aa:fc:0a:dc:3d:ea:6c:
3f:3b:1c:1d:61:f6:60:e6:52:b4:c3:7f:5c:83:63:aa:5d:da:
d3:2b:10:20:41:b1:ee:c3:ee:0f:40:bc:23:f9:76:9e:6c:c0:
1b:ea:82:51:7e:2d:5e:79:71:81:ec:8a:87:35:06:e2:61:8d:
e6:c0:fa:e5:eb:e2:05:c5:59:61:c1:89:22:18:f1:50:2f:56:
24:1c:5a:b5:98:2b:50:d5:15:7a:1e:80:6e:78:bb:8b:99:1c:
cd:f0:18:4f:58:21:0a:55:79:c4:5d:2b:91:f6:e1:48:24:57:
46:c6:b4:d9:df:5f:8d:c6:5f:e8:56:ec:ab:7a:06:eb:b4:23:
97:03:ca:68:20:8f:d0:60:fd:d1:c0:79:be:fa:20:45:f0:16:
13:41:ea:aa:bd:56:c6:c6:23:4b:9b:c7:c4:2e:ff:da:52:82:
42:1c:9d:60:db:30:5e:c5:5d:9c:f0:39:4f:ce:28:46:f2:e1:
68:0a:92:36:94:da:1d:8a:23:78:ef:ad:41:88:39:b0:1f:f2:
75:55:f1:a3:82:70:97:d1:92:09:9d:a1:f9:fa:d5:29:9a:89:
3a:aa:a0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:20 2026 by rpki-client