
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json)
Hash identifier: YRQqklKehNbRc+gB+v58AEY6YRm3MbN/CU8e76qNVTY=
Subject key identifier: 56:81:B5:C0:1E:29:02:76:77:23:0E:ED:72:4B:DC:8B:A6:4C:24:92
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial: 06CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
Manifest number: 06AF
Signing time: Wed 22 Jul 2026 23:13:09 +0000
Manifest this update: Wed 22 Jul 2026 23:13:08 +0000
Manifest next update: Wed 29 Jul 2026 23:13:08 +0000
Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: xdOI8w9kHOFY897bRYFf8Bb2PzzuY5I15EgKVXfCRVQ=)
2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: iRFvE1rr26SrK4L0azwVGFZPRC7sliMA8aHjEhbdZr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Validity
Not Before: Jul 22 23:13:08 2026 GMT
Not After : Jul 29 23:13:08 2026 GMT
Subject: CN=6a614e84-0b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:3f:a6:8f:02:ae:23:4f:3a:48:5f:27:6c:
d8:7a:fc:37:64:90:23:a5:41:ac:f6:1f:53:32:4b:
5b:4a:51:8e:3b:f8:ce:2b:d9:6b:d9:0c:f3:1d:33:
b6:66:93:4d:00:f8:cd:ee:21:66:d3:3e:7a:e0:f5:
43:c4:b2:d6:97:ef:4b:1d:89:de:b9:aa:9c:6b:a7:
5c:4a:14:93:32:a1:5c:b0:c6:be:3e:2e:e4:44:1d:
fb:de:27:bf:20:02:b8:66:28:cf:86:73:fb:21:4c:
0b:ef:49:e6:d3:e0:db:af:08:74:da:86:2b:4d:b2:
cd:b7:65:d8:f5:f2:74:a7:b0:bf:b2:c9:bb:24:31:
5b:42:d6:d6:89:55:88:99:e9:0b:c6:9f:7b:3e:57:
6b:a5:c7:15:f1:87:11:d0:6c:7d:ad:35:32:a8:90:
3e:be:17:5f:e2:6b:a9:59:fc:8b:43:3b:7c:98:a3:
9b:56:49:ca:78:12:d9:aa:5a:00:b0:1a:e3:04:48:
68:ed:95:08:6e:90:c0:da:66:5f:83:b9:b7:6d:6a:
bc:f0:38:43:3e:84:80:23:be:96:ec:52:c3:27:c0:
b8:22:7e:9c:fd:fd:40:2f:86:ad:03:37:6d:04:fc:
e4:8c:6a:6e:80:61:b0:64:1c:79:89:c0:c8:ef:46:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:B5:C0:1E:29:02:76:77:23:0E:ED:72:4B:DC:8B:A6:4C:24:92
X509v3 Authority Key Identifier:
keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:5e:f3:59:f0:73:da:ab:90:d1:8c:f6:d8:0c:ed:b2:74:3c:
59:23:06:04:f1:fb:e3:82:43:c0:69:05:77:f9:76:1d:45:05:
79:0b:12:32:e2:6c:f6:15:71:79:3f:52:7f:11:60:c7:cf:64:
41:18:c5:3f:f3:10:4a:b1:33:cd:0b:dc:f7:60:0c:37:b2:cf:
56:57:ae:29:21:e4:2c:f3:85:0c:c4:d6:73:05:e1:33:2c:51:
43:8c:71:72:9d:a6:08:4a:7c:aa:63:e2:46:dd:e9:db:38:10:
a7:4e:81:08:8a:9e:3c:43:73:28:76:86:83:10:4c:6e:b3:c5:
43:1c:fe:aa:e6:b0:ce:8e:d2:c1:8c:85:2a:c3:89:8b:24:f4:
ad:73:ed:5c:66:55:7f:f8:15:f5:74:cc:04:65:cc:b2:ca:fa:
bc:5b:0a:d4:4e:e8:76:32:b1:3c:58:d1:73:8d:91:ce:fd:81:
b1:a2:a6:92:f6:93:bb:ca:ca:74:ca:4e:36:4e:e7:e8:bf:54:
f9:17:ed:da:7f:58:7c:41:e9:e9:65:ec:62:ae:45:78:1c:44:
5c:f4:52:8d:69:75:67:47:b3:de:37:57:10:93:d8:e4:0c:0a:
b1:a2:98:2f:93:24:09:48:3b:58:86:f2:19:6f:ce:5b:7f:ce:
70:22:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:04 2026 by rpki-client