
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File: -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier: qKy9tGJFBSIw2OmEAT94XRo40/CcJ2bPHJcWf03zNZA=
Subject key identifier: 77:06:95:9D:C4:70:51:D2:A5:9D:58:18:D0:DE:FD:E1:C6:6B:93:A0
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number: 95
Signing time: Thu 23 Jul 2026 09:20:26 +0000
Manifest this update: Thu 23 Jul 2026 09:20:26 +0000
Manifest next update: Thu 30 Jul 2026 09:20:26 +0000
Files and hashes: 1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: Mhg3nUzM2aXKh77xLI2MVE1Y+r8pCx0gLc9W1Qd1fNU=)
2: 4AAED6B23C1211F19A15FB09B6833773.roa (hash: zaCJCnJ8P+IQJ9n9t86hTBhempUXa3QuJJB9ZKjuD4o=)
3: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Validity
Not Before: Jul 23 09:20:26 2026 GMT
Not After : Jul 30 09:20:26 2026 GMT
Subject: CN=6a61dcda-d39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:21:49:22:db:00:67:d8:c0:3c:d0:52:01:8b:
4b:e9:f7:dd:98:08:76:99:2e:67:bf:eb:ea:dc:88:
15:4b:10:49:c5:f4:92:d6:dc:e5:14:ee:da:57:97:
62:43:a0:b3:e9:5c:12:d7:8f:89:e8:94:c6:fb:cf:
af:35:21:26:32:f4:cd:62:01:af:ed:b8:55:d1:e3:
cb:76:82:47:b1:c0:37:27:9f:b3:ac:99:b1:df:b1:
d3:ac:4e:dd:44:de:03:a9:b5:9b:36:91:8c:ef:de:
64:7e:95:48:f0:e3:85:63:f4:a2:6b:93:5d:95:32:
d8:01:91:26:84:2f:15:40:0f:c5:db:79:c0:49:e4:
14:fc:9e:e3:de:b6:79:5a:31:06:8a:91:2e:a0:07:
fc:02:77:65:67:ca:44:a9:72:db:1b:40:3a:54:70:
8f:eb:79:19:bb:16:68:1f:7c:44:29:70:c1:39:ed:
83:e4:a0:1d:a7:22:93:5e:bf:89:a4:69:06:6a:61:
e5:dd:8a:3a:fb:12:82:2b:11:b4:94:4f:88:22:88:
6f:77:f5:ce:fb:af:5c:a4:09:6b:1c:71:38:7e:c3:
8e:4a:e9:95:f9:63:e0:97:0a:06:f4:07:84:87:67:
b2:df:e2:25:e4:97:2e:4e:be:fa:c2:7b:cf:39:07:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:06:95:9D:C4:70:51:D2:A5:9D:58:18:D0:DE:FD:E1:C6:6B:93:A0
X509v3 Authority Key Identifier:
keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:92:41:73:d1:f5:be:b1:d6:7c:af:fa:4d:1a:44:bb:2b:bf:
1c:0a:20:67:97:b6:6d:9f:01:e7:6f:89:6f:40:61:b9:b1:3e:
0d:76:d0:fe:7b:43:6d:be:1f:38:ae:7b:ff:e8:41:e8:e1:0c:
57:2e:23:b4:e5:3d:eb:23:17:ed:5a:fd:e2:ea:74:f1:58:0c:
b8:92:1a:7a:b3:80:eb:ee:3e:a2:91:97:64:63:8e:72:4a:ca:
48:4f:1d:84:22:50:fd:7b:bc:7a:70:85:9f:76:59:20:df:3a:
b4:fc:47:54:3e:8b:50:42:56:58:b0:99:05:4b:47:33:03:45:
90:e1:75:b4:a4:dc:98:dd:c4:b8:a2:22:48:a1:a1:7d:dc:54:
d9:39:3a:6f:34:40:5b:51:e5:56:f7:0e:06:46:b1:e5:e7:4f:
36:59:28:24:b5:24:2a:02:3d:54:ab:e8:36:75:d7:fe:79:50:
67:ef:ba:54:f6:ac:8c:c5:6b:28:c5:68:d1:fd:0f:af:28:76:
db:00:17:d2:fe:fa:35:24:da:d7:95:27:74:07:5f:86:87:d3:
38:27:af:47:cb:af:41:a6:52:c7:db:94:c7:78:88:21:b5:ae:
26:77:6d:cd:61:fa:dd:e0:15:16:5b:a6:82:28:f4:2a:e2:55:
51:0f:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:36 2026 by rpki-client