
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json)
Hash identifier: 7mufX2DK0r64rQSeAVRj34t5pY38Wyqz7nP1/g8KWFU=
Subject key identifier: EB:C0:44:6D:D4:2B:A4:5F:D0:76:49:F7:8B:BF:C2:5F:73:C8:BF:4D
Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
Manifest number: 0106
Signing time: Wed 23 Sep 2026 05:53:06 +0000
Manifest this update: Wed 23 Sep 2026 05:53:06 +0000
Manifest next update: Wed 30 Sep 2026 05:53:06 +0000
Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: FwYoYbmIY7S8vlwPptFQqQd3VSWLRrL84O7vpXvDtfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Validity
Not Before: Sep 23 05:53:06 2026 GMT
Not After : Sep 30 05:53:06 2026 GMT
Subject: CN=6ab36942-c013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:03:a9:88:29:25:c4:81:6c:9d:b5:78:f0:
c8:9e:cb:22:35:bd:62:08:fd:c0:c8:89:52:39:88:
0a:a0:29:d4:08:ea:56:de:86:e0:81:bf:df:21:ad:
0b:83:18:70:46:c6:4f:9a:c0:ec:23:15:29:f6:7f:
a5:82:53:f1:4b:d8:8a:72:54:43:58:63:81:20:c0:
48:6f:f4:4d:d7:d8:05:82:2c:8f:bf:a9:25:08:cc:
9a:1f:14:f8:08:e1:71:73:2a:7c:17:e2:19:cf:2d:
01:58:2b:4f:e0:17:2d:ba:a4:ec:79:b9:34:e5:9d:
ea:c3:62:9c:61:b8:57:c4:23:a4:c5:88:11:94:cb:
b8:18:15:a7:0e:a7:fa:b5:30:ae:c9:f4:b4:ce:2d:
fa:39:10:e4:ec:0b:b8:8d:df:9a:b3:9c:ab:2e:f1:
67:d0:9f:b2:30:69:1a:93:10:ae:dc:a0:fe:cf:c3:
26:e9:f3:85:3c:34:ef:cd:5a:d2:28:15:f5:9c:78:
e0:9f:28:02:8b:87:ce:96:3f:ea:8b:a9:29:5d:76:
28:6e:0f:b7:4e:91:87:64:fe:cc:43:43:dd:cc:d6:
bf:08:d1:3b:b8:1d:68:ee:eb:1c:33:2c:83:75:b7:
0f:76:fe:6c:9e:f4:60:3e:be:93:28:6c:4b:45:8b:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:44:6D:D4:2B:A4:5F:D0:76:49:F7:8B:BF:C2:5F:73:C8:BF:4D
X509v3 Authority Key Identifier:
keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:5f:ca:26:28:d5:23:bd:a7:22:f1:11:f7:44:4f:7b:89:3c:
82:db:a4:8d:1b:b7:3e:18:c8:34:ee:93:fd:9c:70:ca:8b:ca:
7c:ae:73:b9:08:65:9a:95:15:15:5a:e7:58:a3:b3:67:fa:72:
7a:2e:95:21:0f:2f:c5:b3:b9:78:22:6a:9a:a3:23:9f:83:8f:
87:07:5d:10:a6:94:71:89:90:83:fd:03:68:03:15:fa:aa:e1:
d4:c7:60:ab:48:d2:e5:57:6b:ba:45:58:b6:18:b2:5b:ad:56:
a6:60:70:9a:07:f3:47:38:aa:93:0a:60:af:dd:f6:ed:08:55:
d4:1f:45:6f:59:0c:e0:e5:65:84:a6:22:64:39:a5:44:87:25:
c1:c1:9a:1c:e0:0a:80:f1:3f:71:e5:9b:e5:a6:01:a2:2d:ca:
31:e0:7e:e0:f3:71:26:92:da:80:e9:80:0c:18:2a:9c:3c:f6:
8c:69:91:32:c1:9d:7f:0f:d5:5b:e9:c3:20:97:0e:e6:a2:31:
f2:a8:59:bd:71:49:37:6a:20:b1:68:86:79:ac:c7:a7:5b:09:
92:9a:91:46:9a:c1:67:22:f2:e2:7c:a1:ef:d8:72:58:50:ad:
96:92:5e:38:c9:a7:65:d9:78:f3:da:49:1a:42:8b:fd:e0:c8:
88:fc:54:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU4QUExMTAvBgNVBAUTKDk2NzNCNUNDRjBBOEVBNUNFNDFBMkU0NzYzMTFGMzc1
Q0Q4M0MwRDIwHhcNMjYwOTIzMDU1MzA2WhcNMjYwOTMwMDU1MzA2WjAYMRYwFAYD
VQQDEw02YWIzNjk0Mi1jMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoncDqYgpJcSBbJ21ePDInssiNb1iCP3AyIlSOYgKoCnUCOpW3obggb/fIa0L
gxhwRsZPmsDsIxUp9n+lglPxS9iKclRDWGOBIMBIb/RN19gFgiyPv6klCMyaHxT4
COFxcyp8F+IZzy0BWCtP4BctuqTsebk05Z3qw2KcYbhXxCOkxYgRlMu4GBWnDqf6
tTCuyfS0zi36ORDk7Au4jd+as5yrLvFn0J+yMGkakxCu3KD+z8Mm6fOFPDTvzVrS
KBX1nHjgnygCi4fOlj/qi6kpXXYobg+3TpGHZP7MQ0PdzNa/CNE7uB1o7uscMyyD
dbcPdv5snvRgPr6TKGxLRYsP2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvARG3U
K6Rf0HZJ94u/wl9zyL9NMB8GA1UdIwQYMBaAFJZztczwqOpc5BouR2MR83XNg8DS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNThBQS9DMTkzOUNFNjI0
MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZsemtHaTVIWXhIemRjMkR3
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdOSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NThBQS9DMTkzOUNFNjI0MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZs
emtHaTVIWXhIemRjMkR3TkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAF/KJijVI72nIvER90RPe4k8gtukjRu3PhjINO6T/ZxwyovKfK5zuQhlmpUV
FVrnWKOzZ/pyei6VIQ8vxbO5eCJqmqMjn4OPhwddEKaUcYmQg/0DaAMV+qrh1Mdg
q0jS5VdrukVYthiyW61WpmBwmgfzRziqkwpgr9327QhV1B9Fb1kM4OVlhKYiZDml
RIclwcGaHOAKgPE/ceWb5aYBoi3KMeB+4PNxJpLagOmADBgqnDz2jGmRMsGdfw/V
W+nDIJcO5qIx8qhZvXFJN2ogsWiGeazHp1sJkpqRRprBZyLy4nyh79hyWFCtlpJe
OMmnZdl489pJGkKL/eDIiPxUuQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:31:45 2026 by rpki-client