
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier: K+0YXnTrJktJGv5upJ01hpeMtC4t1prT33zHT24TJ6c=
Subject key identifier: 51:E0:1A:3D:93:09:12:7E:85:C7:57:C8:9B:F8:A7:10:C6:80:59:EE
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number: 0127
Signing time: Thu 23 Jul 2026 07:20:52 +0000
Manifest this update: Thu 23 Jul 2026 07:20:51 +0000
Manifest next update: Thu 30 Jul 2026 07:20:51 +0000
Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: pzXSXr7wSgTkghRItnkY5n4jw1cO7w8s1n+m42HVAtk=)
2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: SlpOf782RmBcU6vc9OruiEeR0DjviJjgOX1TVRThoh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Validity
Not Before: Jul 23 07:20:51 2026 GMT
Not After : Jul 30 07:20:51 2026 GMT
Subject: CN=6a61c0d4-b530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:f5:2e:fc:66:bd:e3:89:54:ef:fc:cc:5b:
d6:85:ee:1f:c7:f9:0a:9d:6c:f7:c8:19:36:54:9e:
d5:a7:a6:57:9f:20:d9:10:ff:4a:20:c5:94:06:33:
9d:33:40:4d:d5:cb:48:2e:a3:10:35:88:0d:6e:8f:
03:77:aa:ed:03:d1:d3:57:dc:bb:11:01:b1:90:df:
2b:72:36:25:9d:8b:3f:35:0b:fd:c2:ec:8b:7e:18:
15:f3:d0:e7:a6:34:9c:a1:a0:1e:12:7a:89:d3:99:
e2:4a:9d:ea:fe:05:ac:32:ad:a4:ff:a2:64:09:d3:
fa:10:de:09:20:d5:87:29:76:31:a5:84:90:f9:31:
75:a0:a4:58:11:13:94:ef:22:91:55:17:46:f8:a7:
88:15:3d:10:94:00:f3:57:95:99:03:ec:f0:10:01:
4f:51:53:45:45:49:e2:5f:87:a4:af:10:6a:7f:1f:
70:24:93:f4:93:3f:b8:f6:16:82:06:6e:15:5e:43:
0d:57:d3:af:f6:32:5a:a2:8b:03:98:0a:08:e5:37:
b3:0a:18:a4:a3:bf:c3:9a:f3:63:96:1c:c6:30:50:
29:20:e9:b4:6c:6a:17:c8:ea:6d:28:63:07:be:cd:
e8:8b:d5:d4:64:66:91:8b:12:52:be:ed:62:ef:b7:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:1A:3D:93:09:12:7E:85:C7:57:C8:9B:F8:A7:10:C6:80:59:EE
X509v3 Authority Key Identifier:
keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:05:9f:fd:08:8e:65:23:43:a2:ac:86:08:87:39:40:91:d1:
3d:13:2b:0c:3e:53:78:df:80:c8:85:10:f3:29:ad:cd:c3:b9:
c4:fd:66:91:3a:1d:f8:ac:31:9f:60:c6:b3:df:e1:bf:12:81:
16:fe:2b:02:6b:00:23:a6:b7:1a:a4:bc:65:1e:16:d9:69:df:
cd:ab:e7:83:56:e9:70:49:aa:4a:7e:eb:96:43:3d:25:49:e6:
45:a4:47:38:35:85:ab:8b:19:1f:a3:4c:2b:b1:3e:4b:cc:76:
d5:23:17:d8:8e:6a:5e:1e:d7:7f:d1:4d:c7:93:b0:f9:af:94:
fb:5a:5c:dd:fa:54:02:ba:3e:e0:19:18:e2:93:5a:3d:79:be:
5c:9e:bb:2e:61:6b:78:e8:07:b0:ca:1c:ec:a8:67:39:dd:88:
65:5d:6a:8f:df:34:a7:82:2b:ed:2e:d5:02:16:51:7a:20:61:
57:29:28:aa:06:ac:e3:15:1d:ef:6d:e8:3e:af:0b:93:3f:6d:
bc:3b:5d:d8:8a:3b:ba:d9:2d:6b:22:6f:89:ef:c2:d9:49:93:
ad:91:49:b8:ab:9f:e4:d9:dc:7b:50:05:4f:44:22:bc:cc:5b:
f0:0d:bb:12:f4:1d:fc:8a:87:56:51:76:bf:52:cd:a4:44:cd:
86:80:42:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB
OTNCNUExRDMwHhcNMjYwNzIzMDcyMDUxWhcNMjYwNzMwMDcyMDUxWjAYMRYwFAYD
VQQDEw02YTYxYzBkNC1iNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqc/1LvxmveOJVO/8zFvWhe4fx/kKnWz3yBk2VJ7Vp6ZXnyDZEP9KIMWUBjOd
M0BN1ctILqMQNYgNbo8Dd6rtA9HTV9y7EQGxkN8rcjYlnYs/NQv9wuyLfhgV89Dn
pjScoaAeEnqJ05niSp3q/gWsMq2k/6JkCdP6EN4JINWHKXYxpYSQ+TF1oKRYEROU
7yKRVRdG+KeIFT0QlADzV5WZA+zwEAFPUVNFRUniX4ekrxBqfx9wJJP0kz+49haC
Bm4VXkMNV9Ov9jJaoosDmAoI5TezChiko7/DmvNjlhzGMFApIOm0bGoXyOptKGMH
vs3oi9XUZGaRixJSvu1i77dTvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHgGj2T
CRJ+hcdXyJv4pxDGgFnuMB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy
MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjIwNy9BQ0IwNjg1RUMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2
Z1hqLW44WS1PQUdwTzFvZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHwWf/QiOZSNDoqyGCIc5QJHRPRMrDD5TeN+AyIUQ8ymtzcO5xP1mkTod+Kwx
n2DGs9/hvxKBFv4rAmsAI6a3GqS8ZR4W2Wnfzavng1bpcEmqSn7rlkM9JUnmRaRH
ODWFq4sZH6NMK7E+S8x21SMX2I5qXh7Xf9FNx5Ow+a+U+1pc3fpUAro+4BkY4pNa
PXm+XJ67LmFreOgHsMoc7KhnOd2IZV1qj980p4Ir7S7VAhZReiBhVykoqgas4xUd
723oPq8Lkz9tvDtd2Io7utktayJvie/C2UmTrZFJuKuf5Nnce1AFT0QivMxb8A27
EvQd/IqHVlF2v1LNpETNhoBCbA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:42 2026 by rpki-client