
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json)
Hash identifier: Yfdbq1qGbpZYE/Bb+UYAMp0P8KHNE7IgSQxqNu1dZkw=
Subject key identifier: 4C:25:4D:79:52:D5:14:46:1E:FF:C5:42:07:44:2A:E5:92:94:0C:D3
Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3
Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
Certificate serial: 10F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
Manifest number: 18BE
Signing time: Thu 24 Sep 2026 17:15:43 +0000
Manifest this update: Thu 24 Sep 2026 17:15:43 +0000
Manifest next update: Thu 01 Oct 2026 17:15:43 +0000
Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: X9/lh5PqCCn+7Jt8uk6xWf2EGv9IN4mi8AQx7ehLV9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl
rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4342 (0x10f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
Validity
Not Before: Sep 24 17:15:43 2026 GMT
Not After : Oct 1 17:15:43 2026 GMT
Subject: CN=6ab55abf-a848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:74:6f:95:4c:55:0a:b0:1c:ee:92:dd:fb:
75:08:f5:25:a6:75:35:a1:02:8e:32:b3:90:5a:b2:
3e:38:09:72:ad:43:44:67:f0:9d:cc:2f:cd:d8:fa:
6e:6d:e9:25:e9:0f:a2:c2:29:13:91:37:d0:c9:1b:
a3:81:a9:1b:0d:fc:9d:8e:e2:74:fe:52:af:de:86:
89:06:04:d2:57:4a:ab:c3:e9:32:95:24:d3:2b:79:
f8:87:e0:6d:40:53:81:f7:4c:42:c6:1b:87:3f:c2:
e8:9e:93:01:9a:a3:59:a5:85:5d:b1:f8:dc:f3:04:
12:40:c7:25:b8:16:de:df:5d:fd:a3:03:d5:d0:c4:
ed:cf:20:50:60:24:6e:54:6f:2a:f3:48:1f:e8:e9:
b5:c0:2f:26:17:68:06:ef:03:fe:a4:00:e1:fa:a7:
9b:4a:44:72:84:7a:93:2c:c5:30:55:3f:d5:5a:f1:
f4:98:43:84:7c:79:e0:6e:cb:25:be:3f:64:26:7f:
02:09:af:81:f5:4c:ac:95:54:b5:2f:33:5b:21:9f:
83:09:be:b3:3e:1c:e0:ba:4b:05:d1:b2:66:6d:3b:
88:fe:49:b5:32:f7:08:ed:fa:a6:46:26:4d:b8:c7:
45:94:23:e1:51:0c:13:1e:da:75:bf:35:8d:21:6c:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:4D:79:52:D5:14:46:1E:FF:C5:42:07:44:2A:E5:92:94:0C:D3
X509v3 Authority Key Identifier:
keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:4e:49:f1:71:4c:08:8e:f2:b6:00:23:50:d3:8b:9b:a1:af:
1b:dd:89:a8:06:8d:95:25:b8:c7:9f:9e:7c:07:b4:e8:0e:c8:
06:56:a5:82:66:b0:9d:b1:fd:9a:9a:cf:12:6d:ac:26:4d:48:
c6:c1:8a:17:68:5b:94:d8:67:aa:18:11:3f:7b:20:c3:32:b3:
c8:ec:b0:c2:10:b6:32:aa:f7:ab:ba:8c:78:d3:49:90:d0:fd:
05:c3:a0:e4:3f:14:a4:90:90:e2:87:f5:a4:eb:15:3c:be:0d:
0b:8f:bd:a7:4f:67:43:29:bb:55:0e:46:b1:17:a8:8c:8d:89:
c2:77:f7:df:1f:d1:1a:f8:2e:c6:3a:fd:0c:9b:a5:09:c2:19:
d6:43:bb:15:c8:bb:61:54:8d:e1:54:08:01:ce:d9:ee:5b:fa:
67:39:de:64:7a:94:f8:a0:2f:21:dd:0e:45:eb:9b:b8:09:80:
4e:71:0f:5d:8e:b2:31:fc:89:ca:d3:52:a5:bc:47:4e:28:5e:
bb:07:d8:d7:36:12:86:f8:e0:a0:66:f0:93:53:75:7d:3c:b7:
56:98:30:c7:6e:9b:3a:1c:e1:e4:30:b3:a0:11:b9:a5:2b:d1:
09:01:27:3e:c9:74:f0:bd:41:c7:bc:c6:5d:0e:13:76:ee:d3:
63:83:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:05:28 2026 by rpki-client