
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
File: lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft (raw, json)
Hash identifier: enRigPHN3As4gRjBjO0PbPNgpw07ajObLKAS6clfJ7c=
Subject key identifier: 4B:91:3B:12:64:3A:DA:5B:C5:4D:00:3B:98:DC:F2:C0:88:EA:40:37
Authority key identifier: 94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4
Certificate issuer: /CN=A91A26B4/serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
Manifest number: 21
Signing time: Thu 23 Jul 2026 10:57:38 +0000
Manifest this update: Thu 23 Jul 2026 10:57:37 +0000
Manifest next update: Thu 30 Jul 2026 10:57:37 +0000
Files and hashes: 1: lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl (hash: wju+XRhUOdhO8ofW+5f7CD8Mx4vK1EmDEpzVAY9GzRk=)
2: 8DB4437A5B0C11F1A290872FAE833773.roa (hash: 2h3y8zlQJ+5L/RD1VFOM8gQPQw1g78QSU956pQJuSJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl
rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A26B4, serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
Validity
Not Before: Jul 23 10:57:37 2026 GMT
Not After : Jul 30 10:57:37 2026 GMT
Subject: CN=6a61f3a2-9640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:c8:e4:3f:ab:47:d8:34:3d:07:30:fa:12:
27:d6:a7:9c:5e:01:95:92:66:93:2a:50:23:b2:6b:
1d:f7:53:0c:4d:1e:f1:1a:7b:6b:60:6e:c0:dc:44:
6e:49:bf:46:33:c3:08:fd:26:48:84:c5:32:2c:67:
aa:dc:e6:25:80:4d:6b:3d:db:e7:f8:fe:85:88:69:
16:0e:cf:89:2e:2d:30:61:3e:00:06:fe:4d:08:4f:
75:4a:4c:6d:49:2f:23:3e:11:87:31:ff:a1:3d:8b:
76:34:21:ca:13:35:7f:ea:fa:1a:e1:6f:b4:18:e7:
3c:e3:96:dc:59:84:62:e9:e6:68:1d:75:e6:a8:a1:
6e:c5:fb:04:69:67:fb:1e:00:cb:1c:70:a8:6e:de:
ab:7d:af:50:24:c1:c0:94:ae:a8:8d:69:55:14:fc:
16:d0:02:d2:d1:0c:ec:a2:cb:ca:fb:8a:c1:4a:cf:
e7:be:17:d3:00:da:82:36:a1:21:75:0b:57:05:29:
1f:7f:e7:2b:73:01:6c:2f:89:9f:90:e8:b9:ea:a4:
18:fc:f2:7e:2a:02:9e:64:cc:f5:ca:ac:fa:9c:31:
96:d6:46:d4:9c:2a:6c:b1:eb:e2:6e:a1:bb:47:6c:
43:8e:90:d9:f3:7e:b3:91:6d:2a:8b:ed:c3:e0:90:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:3B:12:64:3A:DA:5B:C5:4D:00:3B:98:DC:F2:C0:88:EA:40:37
X509v3 Authority Key Identifier:
keyid:94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ec:ac:55:6d:ee:b1:a4:76:b3:65:36:c0:cd:13:71:9c:74:
d6:a2:77:73:fd:c6:d9:6e:02:5c:3c:24:cc:dd:b5:69:26:be:
07:0a:87:48:07:a9:de:b6:6c:5f:0f:66:ac:cd:ed:aa:21:47:
52:2f:f5:8e:6c:99:65:a6:14:46:11:46:0e:c3:e0:b7:f0:a8:
b3:16:37:b9:27:25:0b:ce:83:31:dd:85:25:a6:62:21:9e:23:
b4:6d:ad:bb:31:05:92:3b:f8:31:94:bf:fe:1b:a8:d6:e4:a3:
07:30:d5:5e:61:ba:c5:ef:e2:30:23:d9:e8:bf:ff:c4:e0:ae:
2b:ae:e5:27:03:d1:ed:b0:35:a6:0b:06:e4:76:b3:d3:fd:db:
3a:15:6b:78:a0:21:b4:db:10:dc:a1:4d:67:cd:ea:af:90:2d:
c7:64:f0:fe:17:b1:10:6d:74:61:9d:bb:c0:eb:7f:ac:c2:3a:
87:ba:2b:49:99:da:8b:88:b2:30:80:a4:8a:7f:6d:24:6f:c4:
b3:88:5a:f7:38:65:19:16:e8:08:b4:34:bb:64:24:58:29:a1:
10:be:5e:cc:6d:c9:f1:9a:d0:b0:2a:84:c5:1c:70:11:4c:08:
6c:a1:56:77:f8:ee:2b:08:85:43:14:82:94:d8:3e:ed:df:f7:
40:27:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:44:27 2026 by rpki-client