
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File: -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier: 7xsrPdbzMC4FiZgHMEpO470ArkyM01njWkARJfgO7D4=
Subject key identifier: 08:B1:98:96:CF:E9:4D:EC:81:B6:ED:2A:91:A3:91:37:13:02:9C:D1
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number: 57
Signing time: Wed 25 Mar 2026 07:22:32 +0000
Manifest this update: Wed 25 Mar 2026 07:22:31 +0000
Manifest next update: Wed 01 Apr 2026 07:22:31 +0000
Files and hashes: 1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: MB1/ng7x8xllnWJFUVlWjf0ViwxIBCZX42B/0HdIDqc=)
2: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
3: 603EEC5ED0F811F0A0F75447C4F9AE02.roa (hash: G4U39Fy1SJqtjI6+bD1SjtIDsoBsLGQG30f+ReQTcyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Validity
Not Before: Mar 25 07:22:31 2026 GMT
Not After : Apr 1 07:22:31 2026 GMT
Subject: CN=69c38d38-9cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:86:e6:63:b6:01:71:0b:52:da:5c:17:81:
c6:c9:e9:51:39:ed:73:66:4b:28:77:67:a5:50:a2:
cb:fc:27:7c:3c:a8:66:9b:99:57:0a:0f:43:51:06:
55:62:dc:98:61:d9:a8:36:a5:0b:da:14:e9:e9:e8:
56:b8:6f:36:b6:ba:74:12:70:a4:fa:cb:d9:83:ff:
81:b4:8e:a3:1b:2e:f0:a7:05:7e:ce:67:62:02:1b:
7f:c6:3e:0e:cc:13:0d:b0:22:9f:14:c6:16:fd:27:
ed:b2:a1:a3:ea:a3:f1:a2:39:2c:ff:2e:7a:3c:19:
3f:8a:db:ec:8d:9e:99:30:54:74:0f:fb:eb:da:64:
67:a4:11:e3:0a:a7:f6:33:aa:f8:41:be:6a:17:a3:
c1:f0:be:cc:da:b8:94:f3:02:18:02:31:88:37:86:
86:78:3d:b2:c6:45:fc:30:f7:60:52:80:ad:d2:13:
41:46:96:e1:00:c0:e6:28:ff:50:d5:45:7a:fc:42:
55:14:70:8a:77:19:85:80:f3:de:58:1b:91:95:a1:
6e:10:d8:8e:ac:87:76:38:11:e9:8a:99:f9:c3:e4:
4d:0b:ae:4f:10:34:d9:56:8a:69:c7:19:90:e6:55:
cf:15:52:5d:08:5b:12:89:aa:8c:3d:e1:d7:e8:01:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B1:98:96:CF:E9:4D:EC:81:B6:ED:2A:91:A3:91:37:13:02:9C:D1
X509v3 Authority Key Identifier:
keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9a:66:61:16:1e:b1:69:2f:44:99:f9:76:cc:80:b7:84:99:
26:93:9a:16:bc:68:f5:9a:96:1f:67:f0:f9:18:2b:ea:2e:9c:
c7:85:39:d9:47:af:4c:e2:eb:5d:28:cd:ae:31:39:43:d9:f3:
96:c7:9b:e9:b0:c5:29:ed:c4:9e:13:8b:2f:a9:47:75:a2:ef:
d7:f6:c6:43:36:63:6a:9f:ff:91:0a:cf:2e:06:13:67:c8:bc:
45:0f:6a:df:58:5c:fd:8d:a8:4d:61:fb:16:98:44:92:1e:a2:
3d:b5:0d:74:41:b8:1a:87:4d:11:fc:1d:c6:08:b0:d8:52:ad:
2d:d9:c8:98:1b:01:41:aa:20:5c:59:68:1b:3d:7e:d0:c6:e5:
62:af:01:40:0b:92:be:d1:4c:d6:aa:c5:4e:12:48:be:3c:fc:
92:62:71:ae:e2:35:e9:00:18:5f:31:ac:84:ac:6a:95:0b:b4:
53:8f:05:c5:94:43:9c:07:60:3b:98:ab:1c:4a:2c:11:eb:49:
4e:7b:ae:be:3b:7e:83:2e:9d:60:6c:ec:86:ba:70:f0:21:97:
04:4f:6d:e4:22:58:8b:2e:fa:f3:88:ca:fe:4b:cf:cf:7e:e2:
d7:a1:33:80:32:2c:8c:74:4c:a2:6b:80:44:aa:24:de:16:16:
13:46:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:29:08 2026 by rpki-client