
$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json)
Hash identifier: PwK6kkbU/q+OhB8HIt3zmVEhXR6s72euYQJCeUhsskc=
Subject key identifier: D7:2F:04:15:3D:47:03:2A:2A:7F:40:03:0C:D1:18:DE:A0:E2:9B:E8
Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD
Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
Certificate serial: 0D9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
Manifest number: 0D8A
Signing time: Wed 22 Jul 2026 18:09:26 +0000
Manifest this update: Wed 22 Jul 2026 18:09:25 +0000
Manifest next update: Wed 29 Jul 2026 18:09:25 +0000
Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: LzBfq8K2alPjln4lzvj10aVnqQFPKEb8zbaJ2OOVPC0=)
2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs=)
3: 97834674B8C511F0A874F663C4F9AE02.roa (hash: T0DkMUWPaFavft4EZhON5ruNNGkmSNgQyM4NlT6hGWM=)
4: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: LvQrYr/7IXXFeyO0C263bGkuxb9ShOgruDtXGRpyuAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl
rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3487 (0xd9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
Validity
Not Before: Jul 22 18:09:25 2026 GMT
Not After : Jul 29 18:09:25 2026 GMT
Subject: CN=6a610756-db83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cd:6f:19:0e:f0:a0:6d:ee:ee:e6:3b:a6:fc:
a6:91:b0:f3:cd:ff:40:b7:3f:3d:92:ad:03:f4:7e:
5a:d3:0f:69:a2:aa:10:e8:2d:77:4e:4f:54:d9:f2:
0f:f6:42:be:8f:f7:d3:be:5c:e1:28:7f:6b:12:a5:
7b:7f:e4:03:14:94:3e:b2:e9:5c:97:e5:81:99:3d:
fa:9f:48:79:ca:cf:19:50:f5:48:5f:e8:2f:de:b7:
ec:52:a3:90:44:71:9d:df:42:b9:d9:50:58:03:fd:
ad:45:15:24:8f:b6:2a:e5:55:52:c1:c1:40:09:68:
3d:95:1d:23:6e:38:44:c5:89:0b:2a:31:39:cd:da:
9f:b2:9a:1c:fe:8d:1e:a5:77:db:be:e9:c3:56:ab:
b1:9b:60:10:cb:50:64:f4:df:55:6e:fd:62:ff:14:
48:0e:b5:a9:bc:d5:94:62:4e:3d:c6:4b:83:9b:04:
12:5c:18:95:26:95:64:22:74:e4:d4:99:a9:3a:f8:
90:78:46:b5:ce:d7:df:6f:f4:fc:d8:47:fe:ed:b3:
a3:3e:a7:a4:8a:2a:50:b8:82:ee:f1:7a:ea:68:51:
fa:bf:27:b0:cc:30:fe:ef:9c:70:df:52:ef:e5:47:
f1:1a:92:00:f9:b4:9b:b4:c5:12:f3:86:7e:31:bd:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2F:04:15:3D:47:03:2A:2A:7F:40:03:0C:D1:18:DE:A0:E2:9B:E8
X509v3 Authority Key Identifier:
keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:67:0a:bc:5f:9a:b0:86:06:58:57:a8:d2:95:e2:d2:aa:6c:
f6:93:1e:c1:95:4b:e1:2e:8f:79:73:7d:fc:83:fb:73:b3:3c:
23:5a:3e:89:3c:25:61:90:59:4e:fd:8d:a8:df:6e:55:38:25:
7d:f7:e6:7c:d9:2f:3f:c2:71:3f:88:5c:08:60:af:da:af:6a:
95:27:fe:df:53:68:51:44:e7:3b:f8:82:0a:8b:92:48:a3:9c:
55:0d:e6:cd:20:aa:11:93:48:0c:75:00:ed:99:8b:49:65:e0:
33:74:a6:fa:e6:92:22:27:28:c8:ec:fb:2a:4d:66:1e:ba:68:
4f:07:f9:dc:5d:44:09:12:80:c4:39:ab:bd:8c:ab:f4:d3:6e:
11:3e:06:94:e5:1f:55:a9:d7:e0:94:f1:42:2d:73:db:ca:1f:
5e:98:60:2e:e6:b1:fd:65:91:2c:d5:8d:68:f5:d8:fe:72:4d:
6b:6f:c1:40:4a:31:b3:6a:5d:0f:f4:b0:ef:96:19:6e:af:bb:
8a:83:17:b4:f5:db:f2:11:ba:26:f4:10:b0:bf:dd:3c:21:0f:
8e:8b:36:29:a4:6f:a4:b9:87:89:93:89:94:42:57:71:a6:56:
85:cb:50:51:7a:e2:22:5b:0b:66:95:69:a8:24:c1:5d:1e:55:
e6:dd:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:03 2026 by rpki-client