
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json)
Hash identifier: L03O9ZrSr4pmgwzBpyiUpQYv4/tccm2uLGbMR8SYv8o=
Subject key identifier: F6:EE:91:B9:0E:B3:85:47:4D:75:71:E6:43:8B:F1:55:A6:4A:E6:CA
Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
Manifest number: 01AE
Signing time: Sun 27 Sep 2026 04:30:17 +0000
Manifest this update: Sun 27 Sep 2026 04:30:17 +0000
Manifest next update: Sun 04 Oct 2026 04:30:17 +0000
Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: lW19cWJwpxvOxGjrWRcWra7AcEQW4/sSTshOZdKyYiA=)
2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: lYBNMPIGwdmg3hahCp/0TuyobmaHK3vnQLBxguRZNCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Validity
Not Before: Sep 27 04:30:17 2026 GMT
Not After : Oct 4 04:30:17 2026 GMT
Subject: CN=6ab89bd9-e53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:89:df:ff:dc:49:b3:c6:53:2b:6d:70:e9:
fc:e0:b9:d4:cd:d2:db:21:71:6f:00:af:73:65:e4:
1b:e9:83:9a:ea:14:8c:0d:0f:73:7a:77:fb:ce:6c:
1e:b0:af:30:2c:d4:9f:f0:f7:07:a8:2d:80:32:b9:
97:d1:18:46:1a:6a:f3:aa:cc:82:9d:65:f3:af:17:
e1:4e:80:f5:f6:95:ad:63:26:51:a3:f6:d7:04:c6:
a6:60:f8:9d:6e:bb:70:d8:50:48:94:60:c3:06:02:
7e:a1:3f:03:9b:56:2f:09:c4:1b:ca:b6:a3:34:8a:
0d:66:6c:0b:89:25:74:7b:78:0d:c6:9a:b1:32:71:
a4:37:43:e3:c2:38:f8:60:72:b9:db:9f:30:8e:da:
11:ba:7e:86:b7:ca:7a:d9:0c:f9:a4:bd:ab:bc:e0:
32:d2:81:b6:2b:c8:24:b8:65:51:82:53:53:13:2e:
01:62:2c:f8:8a:9a:1c:76:6c:da:49:a2:12:bd:7b:
9c:78:d0:9a:82:c8:a5:f6:f5:79:a9:d2:26:78:8e:
65:86:68:c5:19:30:f6:c4:ee:56:11:a1:66:96:19:
fd:1f:e2:d0:10:15:32:69:ef:6f:ba:16:ca:71:bc:
f8:0a:fd:cc:2f:c9:0c:2e:9a:bd:d3:9c:58:2b:54:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:91:B9:0E:B3:85:47:4D:75:71:E6:43:8B:F1:55:A6:4A:E6:CA
X509v3 Authority Key Identifier:
keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d9:2b:08:e6:6d:e1:ed:37:68:7b:c7:ea:d6:4c:c5:20:a9:
6b:8a:62:fd:98:2e:25:47:e1:8f:59:a3:c5:6b:a9:b4:dc:97:
02:0e:71:e0:41:da:34:bd:7b:d4:fe:60:ca:2e:6e:8c:a7:40:
53:92:df:34:2c:21:dc:84:9f:9d:4e:4e:40:7c:5b:82:87:d3:
2e:ab:37:c1:47:11:7c:29:1a:3a:cb:90:fa:54:aa:95:12:99:
e7:63:72:e0:1c:50:18:92:ed:f1:ea:6b:4d:65:40:42:2b:19:
01:bb:b0:32:ce:4c:fa:ab:01:d6:62:1b:9b:e1:5a:00:3a:c4:
40:11:64:33:8c:df:42:5d:3a:ea:cc:b4:5e:ab:12:c1:bb:fc:
ea:83:fd:10:1b:38:fd:de:05:43:55:05:61:47:b7:76:3a:3e:
80:a3:ff:9f:4c:10:c7:bb:30:9e:58:aa:1e:ab:b0:5c:c4:4b:
4a:f2:90:53:92:d7:39:07:06:db:89:7c:d8:45:9e:86:ce:f4:
ea:cb:ca:2c:9a:b7:79:27:02:5f:ca:3a:8a:b8:64:b1:02:2b:
80:13:ae:84:e3:db:47:04:7c:18:1f:d3:80:c9:f1:9e:8a:3d:
53:93:58:5c:8f:e1:d1:34:77:ca:fe:4c:fa:a6:74:85:53:8e:
c1:79:a8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:53:37 2026 by rpki-client