
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json)
Hash identifier: wCWArARBjZAlWqcY9gKSa736lh4fNAscLzD2eh3/2P0=
Subject key identifier: F6:F0:47:32:59:49:16:F1:FB:A3:A2:DA:18:60:DD:20:78:24:80:B0
Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Certificate serial: 075D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
Manifest number: 0753
Signing time: Sat 26 Sep 2026 21:53:32 +0000
Manifest this update: Sat 26 Sep 2026 21:53:31 +0000
Manifest next update: Sat 03 Oct 2026 21:53:31 +0000
Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: OqPmzL5ZGUtqfEv4egGlTSSIFEKkgbHNO2d+Ko1rkeQ=)
2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: X5seaG41aTTcYS0YJ5ID592qQAd6TABWJEt0PwhEjdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Validity
Not Before: Sep 26 21:53:31 2026 GMT
Not After : Oct 3 21:53:31 2026 GMT
Subject: CN=6ab83edc-552e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:fb:e0:02:1f:10:44:41:2c:2f:17:2b:9c:
12:80:1c:a6:87:e8:24:4c:9b:a1:69:cd:70:f9:bc:
bf:81:88:7f:b6:fd:29:c4:f3:85:ec:7c:79:45:37:
71:01:0d:8d:29:ca:f9:52:64:19:4d:fc:7d:b3:39:
61:6c:b0:dc:9c:19:b7:d6:88:7e:94:5f:e2:8b:ca:
e5:e7:7e:dc:8e:02:5d:65:f5:c4:4d:99:93:b7:a3:
ed:a8:b9:a3:60:d7:a4:a0:43:77:d9:f0:8a:46:c3:
42:3e:c0:78:71:73:52:5d:9a:0a:f7:73:72:9c:20:
62:df:58:e6:20:e0:d0:90:c7:95:64:07:27:a2:94:
ce:75:dd:02:78:c1:1d:e4:12:dc:68:68:8d:ab:29:
71:f1:89:ac:6a:ad:6a:ff:49:fd:36:a5:61:d9:a7:
42:e3:fc:f9:ff:27:ad:25:b8:8e:62:97:21:d9:42:
ec:7f:09:23:a0:85:88:1f:9a:f0:7d:63:d4:32:8b:
30:b3:8c:6c:97:b5:7a:d2:1b:b0:b1:b8:98:71:c0:
ff:ca:57:cb:03:0d:44:c4:33:fc:2c:e1:e4:91:7e:
36:86:40:e9:cb:33:7f:64:51:48:67:37:af:17:f2:
d9:b0:33:cc:f8:02:8e:18:0b:4b:bd:77:31:0d:db:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F0:47:32:59:49:16:F1:FB:A3:A2:DA:18:60:DD:20:78:24:80:B0
X509v3 Authority Key Identifier:
keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:2c:e8:40:b8:4a:23:e7:01:d3:e5:48:19:9c:05:90:76:
88:85:bd:89:3f:1c:da:b0:b9:81:38:99:59:81:b5:42:82:65:
21:29:f6:ad:e1:b2:85:72:7e:9b:e5:bd:5c:59:f2:44:dd:6c:
4d:40:4a:0f:67:a6:bd:13:c3:b6:4a:39:a1:fb:d9:12:fb:ba:
b6:a3:29:af:61:5f:48:6e:6a:67:45:09:83:24:5c:6a:85:83:
45:ce:6e:dd:18:ad:9a:7e:18:cf:e4:9a:b2:4c:81:07:2d:b3:
51:5f:b4:bf:6c:53:81:2f:38:78:d7:f1:04:7e:62:7d:f4:ef:
2c:20:71:48:12:a4:7d:f3:56:8f:5c:18:fd:2d:0d:fb:ba:97:
58:46:37:49:c7:1c:77:a0:80:28:8b:71:1d:4b:42:20:c6:34:
e9:3e:20:02:af:13:f4:47:42:77:11:6f:6f:d7:d5:de:b7:82:
fa:aa:42:0a:c0:00:c3:24:f5:48:2a:28:25:30:0b:48:52:cc:
96:53:08:7a:64:0c:77:f0:ea:22:68:3c:01:70:5e:cd:be:00:
c0:2d:46:48:5e:3b:fa:15:68:0c:1f:56:50:4b:39:d3:e7:f6:
fe:c7:50:4d:7c:e1:b0:25:a1:5d:15:06:12:fd:46:b7:76:db:
fa:7e:73:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:57:13 2026 by rpki-client