
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File: -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier: PbW7RNZsk0mXRUijEqL/oRsejvbwnDWMxdbk6yFZLzQ=
Subject key identifier: 33:DA:F3:6F:12:AF:2C:FB:F8:B9:69:E8:BB:48:86:4C:89:8D:FB:79
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number: 71
Signing time: Mon 11 May 2026 08:02:07 +0000
Manifest this update: Mon 11 May 2026 08:02:07 +0000
Manifest next update: Mon 18 May 2026 08:02:07 +0000
Files and hashes: 1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: ju5ANuCB0SCHz6qdBkvURWLUiccNKVMc2ba9lbFdI6A=)
2: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
3: 4AAED6B23C1211F19A15FB09B6833773.roa (hash: zaCJCnJ8P+IQJ9n9t86hTBhempUXa3QuJJB9ZKjuD4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Validity
Not Before: May 11 08:02:07 2026 GMT
Not After : May 18 08:02:07 2026 GMT
Subject: CN=6a018cff-fba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:d3:a0:92:59:e6:ce:39:84:0e:90:e6:f0:
4f:28:24:24:bb:4f:a3:82:6e:1f:9a:32:f4:cf:cf:
a2:45:07:7f:14:7a:6a:95:77:56:24:3a:de:23:af:
54:00:7c:a3:c4:99:f3:50:47:9f:61:02:83:5d:b9:
36:eb:90:47:ec:25:a9:ee:eb:48:d0:c1:db:bb:31:
1b:06:f6:0f:db:79:1b:08:d6:c2:3a:c3:cc:69:73:
15:83:ae:2b:bd:4e:1d:79:2b:82:ac:0c:1b:17:85:
61:bf:a5:fe:9f:69:47:e4:9b:91:7b:16:39:2a:38:
a2:55:ec:03:23:5c:ad:c7:9d:7a:a9:33:cf:fb:82:
71:fa:22:ec:98:d0:7c:42:cf:e5:f7:5a:9a:41:ab:
2c:dd:04:f8:fe:18:78:4b:9a:81:b2:5b:a8:1e:ce:
2b:aa:42:c8:6f:14:96:6c:db:13:a5:08:f1:58:d6:
4d:e1:30:6e:2a:14:da:96:48:43:a3:a6:c5:5d:d9:
05:f3:d6:9d:0e:40:98:9d:52:f7:56:8b:ea:69:44:
30:b0:21:ef:be:43:96:fd:66:ad:ba:b2:93:42:0a:
23:94:86:61:52:7b:0b:b5:39:99:b0:84:fb:4c:bf:
30:93:ac:b8:93:05:e9:9b:90:b8:ce:36:b9:d6:55:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:F3:6F:12:AF:2C:FB:F8:B9:69:E8:BB:48:86:4C:89:8D:FB:79
X509v3 Authority Key Identifier:
keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:33:ac:6b:2c:5d:e7:92:1f:97:40:b9:d4:18:1f:52:90:98:
0e:fe:61:a1:bd:56:2e:28:9b:9c:13:f3:7c:77:1b:52:13:e7:
3c:9f:be:71:14:ce:c4:00:5f:0c:f0:5d:0e:2a:5a:2e:68:fd:
20:7c:cb:08:c9:4e:f6:47:73:77:90:d9:02:3c:3e:dc:67:52:
89:8a:bf:66:e1:23:31:c9:9a:2c:7d:e6:2a:9e:a8:ec:32:f0:
03:8a:77:35:aa:11:8a:d7:2c:97:19:a0:3f:34:99:c6:47:74:
29:36:9b:60:6b:54:7f:ff:35:a7:d4:a2:5b:56:55:08:cb:cf:
e3:92:a6:24:9b:fa:a9:aa:b0:e7:3f:7a:c8:88:09:2f:ae:1a:
ae:b7:54:98:07:25:88:d2:19:f5:2b:a5:ed:69:41:ec:6b:e8:
49:ea:ff:7f:bd:f0:55:4f:bf:74:fb:4e:7d:34:30:9c:ca:d5:
a4:aa:a0:28:7d:60:49:a7:9c:5e:b0:fd:a6:6d:76:69:93:63:
ee:5c:c0:a1:0b:62:1d:db:65:fe:b0:93:c2:88:a6:59:13:4a:
e1:2b:33:f5:bc:fc:d0:ac:46:c0:49:84:4e:a8:27:60:dd:b3:
82:3c:85:ce:44:b5:17:2e:75:fb:2a:4b:dd:b4:59:da:51:33:
72:88:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:26 2026 by rpki-client