
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json)
Hash identifier: IrwYiSJQ8tyGHA7G5XBwCw9vwYvTqFFQSDgOcUKy+4Y=
Subject key identifier: 85:A7:BA:8B:BE:A0:F2:02:1A:00:F7:39:C2:76:E8:BA:B6:11:70:5F
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial: 0317
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
Manifest number: 030B
Signing time: Thu 23 Jul 2026 02:07:22 +0000
Manifest this update: Thu 23 Jul 2026 02:07:22 +0000
Manifest next update: Thu 30 Jul 2026 02:07:22 +0000
Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: UfUezdGdTivIwDg9z7qhCtugP/3f/Jh67A+urlNQEho=)
2: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: fau8zrxoL5+rKWWTOegWV7fze5dW+nWi1/hJ5SSwjv0=)
3: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: aefMK2H8VuJURMPwEnmuT8GCvTBNLWTHQiekOGLIEHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Validity
Not Before: Jul 23 02:07:22 2026 GMT
Not After : Jul 30 02:07:22 2026 GMT
Subject: CN=6a61775a-fde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:7e:63:8e:b1:8e:13:e5:f2:f4:26:17:af:
e0:c0:76:53:9d:35:c6:77:dc:fc:78:6c:e4:ce:84:
8b:58:b9:bd:44:f1:f8:4c:d7:d3:7a:e5:9c:f5:86:
12:76:13:9d:9f:d2:71:94:1a:10:23:b9:af:1b:4c:
49:7f:31:55:a5:43:ca:90:cd:7e:79:b9:58:4b:f0:
24:c8:7e:bf:bb:59:96:0a:b7:d0:f6:95:a7:7a:68:
7e:87:d1:4d:a3:f9:b1:73:81:a5:49:14:db:38:27:
4b:6d:1f:c6:2e:37:71:88:b1:75:38:25:15:45:0a:
73:b4:dd:43:1e:a5:0d:28:e3:f9:7d:b9:a2:c8:1e:
10:b7:0f:61:e8:c9:eb:f6:fb:32:4f:c6:01:b3:b3:
20:ff:82:ba:70:e1:5c:1b:7d:1f:75:0d:b1:be:0b:
f6:0b:17:e4:d8:00:ce:d1:df:ff:47:b2:d9:bf:d0:
09:36:06:ff:1d:3c:a5:dc:60:0d:49:14:9e:0b:53:
af:e3:bc:c3:78:6d:ab:c1:07:3b:bf:2b:00:1b:a8:
a7:c8:ba:d4:60:31:d3:7b:52:d3:b5:5c:77:47:c2:
27:70:19:99:dc:d9:fd:1f:b0:de:52:9b:25:76:79:
57:56:c3:71:d2:0a:85:bf:ee:ec:4d:fa:1a:ca:da:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A7:BA:8B:BE:A0:F2:02:1A:00:F7:39:C2:76:E8:BA:B6:11:70:5F
X509v3 Authority Key Identifier:
keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4e:57:5c:c7:10:ab:68:dc:93:cd:fd:19:2f:d0:65:89:95:
31:99:51:72:00:6a:e7:dc:cd:39:aa:93:79:86:48:ac:52:bf:
82:30:bf:2a:b7:eb:30:dc:38:84:08:e1:52:87:44:de:97:ae:
9a:8c:e1:35:a8:ca:32:63:31:07:28:98:e1:d8:aa:f9:5a:ea:
9d:3d:4a:e3:9a:c8:be:d8:b9:c6:5d:46:bb:4d:63:c1:d3:32:
e3:ed:b7:86:bf:04:05:52:07:50:5b:02:af:be:5a:fa:93:68:
77:69:04:2c:58:28:22:84:3f:87:70:22:63:e9:38:60:22:79:
24:43:a7:3a:8a:0c:e5:a2:77:29:df:9e:f0:7f:8b:4a:71:ac:
e4:86:a6:1d:f3:c5:1a:63:98:0c:b8:e9:f3:ee:f2:b6:3e:d2:
75:e7:2d:eb:84:e2:15:be:cc:41:7d:c4:35:ff:5b:72:fe:e9:
10:69:34:42:29:ae:76:86:55:49:33:fa:9d:ff:b6:ad:d2:ab:
6e:fa:9e:c5:27:c2:ec:93:b7:cb:f3:b0:36:51:2f:a3:49:d8:
3e:3b:4e:7e:b3:d3:a9:2d:09:d2:68:b3:d3:d3:ff:c7:ee:6d:
14:02:48:2e:0c:c1:32:e0:f0:01:57:47:db:30:75:ed:f5:ae:
61:2f:30:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2
QThDMEE5NUEwHhcNMjYwNzIzMDIwNzIyWhcNMjYwNzMwMDIwNzIyWjAYMRYwFAYD
VQQDEw02YTYxNzc1YS1mZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyZ+Y46xjhPl8vQmF6/gwHZTnTXGd9z8eGzkzoSLWLm9RPH4TNfTeuWc9YYS
dhOdn9JxlBoQI7mvG0xJfzFVpUPKkM1+eblYS/AkyH6/u1mWCrfQ9pWnemh+h9FN
o/mxc4GlSRTbOCdLbR/GLjdxiLF1OCUVRQpztN1DHqUNKOP5fbmiyB4Qtw9h6Mnr
9vsyT8YBs7Mg/4K6cOFcG30fdQ2xvgv2Cxfk2ADO0d//R7LZv9AJNgb/HTyl3GAN
SRSeC1Ov47zDeG2rwQc7vysAG6inyLrUYDHTe1LTtVx3R8IncBmZ3Nn9H7DeUpsl
dnlXVsNx0gqFv+7sTfoaytrwkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWnuou+
oPICGgD3OcJ26Lq2EXBfMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4
NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw
Tm0xYW1WLXliMlpxakFxVm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjE5XXMcQq2jck839GS/QZYmVMZlRcgBq59zNOaqTeYZIrFK/gjC/KrfrMNw4
hAjhUodE3peumozhNajKMmMxByiY4diq+VrqnT1K45rIvti5xl1Gu01jwdMy4+23
hr8EBVIHUFsCr75a+pNod2kELFgoIoQ/h3AiY+k4YCJ5JEOnOooM5aJ3Kd+e8H+L
SnGs5IamHfPFGmOYDLjp8+7ytj7Sdect64TiFb7MQX3ENf9bcv7pEGk0QimudoZV
STP6nf+2rdKrbvqexSfC7JO3y/OwNlEvo0nYPjtOfrPTqS0J0miz09P/x+5tFAJI
LgzBMuDwAVdH2zB17fWuYS8w5w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:25:16 2026 by rpki-client