
$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
File: lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json)
Hash identifier: udMbmoTF41+MvObvjL6Q0LVIBTvCO/Yk1z/g2RA3cOQ=
Subject key identifier: D6:17:6F:34:11:A5:02:21:08:D5:15:52:27:A1:49:B3:EA:00:30:4C
Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Certificate serial: 0388
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
Manifest number: 037B
Signing time: Thu 23 Jul 2026 01:43:05 +0000
Manifest this update: Thu 23 Jul 2026 01:43:04 +0000
Manifest next update: Thu 30 Jul 2026 01:43:04 +0000
Files and hashes: 1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: b21NkTbqt5yHvg/XzNAT6wx4/Ftzu1yX1vlGmDHv4U8=)
2: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: EaaSXzGz05+ts4EkpTMhP55oUChU6Bk9DAG9srhRaSc=)
3: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: 8dpXRXimhjXqFq8UENKdvQMz2YmohstnkMIHLOtJCy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Validity
Not Before: Jul 23 01:43:04 2026 GMT
Not After : Jul 30 01:43:04 2026 GMT
Subject: CN=6a6171a8-eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:89:43:09:93:74:6c:49:34:3b:67:0c:cb:
d8:c1:4d:1e:8e:0a:69:8f:cf:1a:52:f1:cf:ae:45:
f6:1a:98:12:07:62:7a:0f:07:3a:15:07:89:93:e8:
53:6f:36:55:60:70:41:49:1a:fa:e0:79:50:44:6c:
97:47:43:0f:5a:e3:91:4e:a7:46:09:89:bd:21:8a:
3a:af:08:0d:f0:5a:e0:1b:31:db:57:2a:d5:89:a1:
bb:2b:2c:4b:85:1b:ad:5c:ba:88:cc:f6:54:6a:12:
83:5b:43:bd:64:c8:4c:5c:df:1f:11:ac:99:24:be:
53:11:dc:1d:24:ad:4d:e5:e1:02:59:f6:e6:bd:f8:
de:12:fc:d9:f2:9d:1d:ba:02:2c:95:8a:97:e5:1c:
a7:65:9f:47:cf:1c:42:78:1c:cb:84:6f:d0:5a:66:
b4:3b:ea:9c:62:90:e4:7d:67:ba:ff:e6:e1:06:52:
e1:e0:5d:17:fc:5e:59:8c:3f:8f:b2:b4:5a:4b:7f:
c4:39:69:ac:24:51:74:88:d4:4b:79:d9:09:06:41:
d3:5d:16:41:66:b0:1b:73:a9:de:70:35:f5:49:ef:
36:de:0d:c3:f9:ff:da:17:20:00:d2:da:71:ef:80:
39:ac:fd:53:76:39:1b:4e:17:11:ca:c3:5f:60:b7:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:17:6F:34:11:A5:02:21:08:D5:15:52:27:A1:49:B3:EA:00:30:4C
X509v3 Authority Key Identifier:
keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:6a:04:7b:6d:b1:68:f8:87:61:e2:69:e3:c1:5d:62:f2:d5:
90:8b:c9:ba:f3:80:d4:53:6c:db:3a:0f:2e:10:1b:c1:2c:c4:
46:a2:af:13:9f:2f:04:7b:9e:64:14:f3:e5:7e:03:18:94:a7:
4d:c9:a7:60:99:f3:89:5f:90:f5:77:de:4a:8c:64:32:57:c2:
dc:2e:32:cf:6d:e4:8e:25:52:86:5e:23:92:99:56:58:75:58:
32:c1:9b:54:b4:ee:dd:74:53:f2:4c:1f:02:1c:56:61:62:d0:
ad:5b:f3:29:0f:3f:1c:98:99:2c:f4:e5:b5:4b:da:e4:60:e9:
23:ca:33:00:23:92:34:22:ca:40:fc:05:ee:08:6b:09:2e:f4:
68:6f:eb:42:27:98:51:0c:8d:00:e9:d3:36:4d:20:b2:77:39:
01:6c:49:65:6a:64:e9:ee:99:b3:1c:26:9a:5c:c0:ce:8b:01:
da:ea:47:42:a9:de:33:0e:64:e4:b0:2e:bf:e4:96:ac:4e:f5:
e4:d2:5c:f0:f3:91:d1:65:1b:f6:05:9b:59:9b:ac:7c:5b:3a:
73:b3:80:13:40:4c:aa:36:0c:9f:f4:6e:e6:80:eb:a8:85:89:
81:c6:50:9a:9f:1c:55:61:95:2b:31:fd:7e:e0:8e:f9:ef:a9:
24:9f:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:20:43 2026 by rpki-client