
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File: -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier: R23/dzSPw1K6s12mhxKQHt0/sROwDrJyr7DnVhLx3Y0=
Subject key identifier: 58:77:CE:DE:D0:70:F1:60:68:7E:D7:00:6A:10:2D:1A:EE:A6:7F:F8
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number: B5
Signing time: Wed 23 Sep 2026 06:49:35 +0000
Manifest this update: Wed 23 Sep 2026 06:49:34 +0000
Manifest next update: Wed 30 Sep 2026 06:49:34 +0000
Files and hashes: 1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: UipJ2zdQuLWl1dOrSfd2jVqZsQrM0n8iecnlysd1PUs=)
2: 4AAED6B23C1211F19A15FB09B6833773.roa (hash: zaCJCnJ8P+IQJ9n9t86hTBhempUXa3QuJJB9ZKjuD4o=)
3: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Validity
Not Before: Sep 23 06:49:34 2026 GMT
Not After : Sep 30 06:49:34 2026 GMT
Subject: CN=6ab3767f-6273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:77:24:f9:b4:49:2b:2b:9d:26:53:d9:e6:
28:45:1e:57:35:ef:d1:0d:fb:fc:e8:0b:8a:f8:96:
c5:ea:e4:5d:44:c4:9e:b9:73:17:d9:12:1c:a2:fd:
8a:04:73:94:06:d4:a3:6e:a7:21:fa:4c:28:32:38:
16:aa:21:b4:92:6d:d5:e9:41:2c:9e:7a:dc:15:24:
62:c2:45:cb:3c:35:b5:6e:41:07:d0:33:75:37:6c:
3f:04:4f:e1:db:fc:e0:45:8c:db:27:12:93:83:81:
6f:df:a3:bc:b4:e0:f6:8c:2b:ab:a2:01:ef:70:16:
cf:e5:70:56:74:d3:37:89:f4:0d:63:76:85:d5:dc:
44:be:54:a5:6b:6e:0a:76:da:9e:2f:79:28:ea:cb:
71:6d:83:03:83:7b:e9:0f:19:34:10:00:9c:19:9d:
7f:00:5d:36:d6:b3:e5:6c:75:e0:1c:e9:85:33:94:
54:6b:07:19:54:9f:07:e3:1a:27:30:c2:d9:21:f9:
4d:6d:9e:f2:92:7e:2a:f6:da:43:98:ff:cc:b5:25:
05:b6:72:22:0f:28:61:a8:b1:41:97:62:47:0b:65:
bb:cf:e0:8a:3c:3c:c1:53:fc:07:16:50:45:3d:be:
f6:77:5a:02:0e:89:21:e3:ea:aa:da:f3:16:6e:bf:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:77:CE:DE:D0:70:F1:60:68:7E:D7:00:6A:10:2D:1A:EE:A6:7F:F8
X509v3 Authority Key Identifier:
keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7f:b6:84:13:6d:6e:ed:ed:76:c7:8f:d8:d9:ba:df:02:6f:
6c:6c:c4:15:f7:e9:84:6f:88:a2:ec:2c:ee:f8:cd:70:8e:aa:
16:69:5a:b4:82:da:58:fd:f0:1f:36:60:7b:64:60:f3:e3:34:
68:8e:6b:7f:5e:e4:af:58:89:20:65:24:71:8c:1b:9f:bc:18:
b2:5c:18:6d:33:e1:c2:cf:c5:46:57:00:96:34:f9:1f:dd:91:
ae:00:ef:d7:b0:88:ac:ba:35:a6:88:72:85:85:dc:0a:6d:10:
93:24:31:1d:00:3f:58:28:23:88:66:e3:cc:14:83:25:c8:7c:
62:77:7d:f7:7a:96:01:b2:34:29:90:c1:38:13:c9:20:93:f3:
a6:ed:59:c2:ea:f8:62:17:58:43:6e:8c:01:8e:4a:32:72:06:
15:1b:23:92:ac:e3:f1:28:21:4d:a2:70:5b:ce:e0:91:29:bf:
80:d0:a1:4c:18:d8:4c:14:fa:9b:c2:0a:d7:72:48:23:2f:8e:
98:5b:52:ac:c2:a7:f0:73:34:96:60:09:56:7a:2e:7d:84:25:
4c:4d:e1:f5:5b:66:9e:e0:32:c7:6f:26:3b:cc:bc:6c:99:71:
9c:1f:21:a6:7a:2d:4b:4d:40:20:c5:d7:0b:4c:b4:cb:c8:9e:
0d:a9:a1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:14:19 2026 by rpki-client