
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json)
Hash identifier: aTUl2WxcHX38zYswvLLrKtq8BIU6iD/YNOiGBiQIOkQ=
Subject key identifier: 9C:09:5A:2F:54:4A:14:55:47:09:89:8E:B8:34:6D:B7:FB:7B:ED:B2
Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Certificate serial: 0C5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
Manifest number: 0C3D
Signing time: Wed 22 Jul 2026 19:04:19 +0000
Manifest this update: Wed 22 Jul 2026 19:04:18 +0000
Manifest next update: Wed 29 Jul 2026 19:04:18 +0000
Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: YivL9BKshA7Md86ZixFLVY3shd5YfpAFl8yCAza6LTE=)
2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: QfT2Eaqv5QPDrORQi1WneHGHYWsLdTVYS3iMbBaZBv4=)
3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: 1aYucsJJizOrJGwERLeDG0d5XIi/bHOIooEKsMrUEo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3162 (0xc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Validity
Not Before: Jul 22 19:04:18 2026 GMT
Not After : Jul 29 19:04:18 2026 GMT
Subject: CN=6a611433-b2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:7b:6d:ab:32:d3:c7:0f:7e:73:f8:5b:fa:
6d:f6:cd:78:de:13:19:2a:5e:18:1e:f1:f9:73:7b:
cf:b6:cd:3b:8e:23:70:21:7c:92:2b:47:cb:e9:81:
6c:b5:e2:36:00:c6:30:7d:d1:de:ee:6d:f7:cb:77:
27:11:43:b8:b7:88:b5:6c:80:47:7c:66:19:43:98:
9f:c1:43:b0:1c:c7:ea:aa:ea:47:00:6a:5d:44:8b:
63:d2:c6:6e:72:cb:70:5c:a0:e4:7d:70:ea:94:5d:
1d:0b:2a:d7:27:f5:7a:0c:0f:65:d3:91:0d:3b:9d:
e4:21:41:60:d6:37:c8:18:71:f0:a4:0d:44:cf:81:
8c:4d:13:b1:be:0b:63:ea:02:fe:da:98:70:93:6c:
ae:06:0f:90:45:97:bc:06:4c:7a:90:8a:39:2a:0e:
32:e3:00:22:10:5c:8f:14:bb:7b:88:92:30:37:02:
78:03:fc:72:03:55:90:9b:2a:21:d4:f1:4c:7c:02:
fb:79:0c:3b:7d:e5:ec:db:71:79:59:bd:0c:e6:be:
87:84:1a:ed:5e:1e:e7:63:93:54:98:8b:98:03:0c:
8f:dd:30:99:19:78:bb:fc:89:72:ee:54:a3:c6:46:
1a:ff:df:f8:95:7b:7b:77:ee:92:42:03:04:ec:81:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:5A:2F:54:4A:14:55:47:09:89:8E:B8:34:6D:B7:FB:7B:ED:B2
X509v3 Authority Key Identifier:
keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:df:58:51:aa:e7:73:3f:f7:1b:17:4b:2c:cc:f2:66:af:a7:
67:39:46:53:a0:13:89:93:65:7e:99:ec:a1:8e:b9:37:71:84:
ed:02:26:50:35:df:67:bf:63:01:a0:ce:ba:e9:0f:c0:a7:34:
fd:21:eb:d3:74:2e:9a:41:97:43:e9:47:28:dc:1d:78:3a:a4:
47:cb:40:85:ed:a4:60:63:4c:d5:66:90:c5:1b:22:56:87:90:
a6:2b:c8:25:bb:c7:5d:e5:2e:12:01:2c:14:51:d1:73:5e:52:
74:51:d3:bc:a0:5b:6a:6d:6e:de:ac:e9:eb:07:28:9c:bc:06:
05:53:54:94:c9:4f:03:85:23:2e:a0:bf:d3:a9:34:ae:b9:74:
bf:0b:f8:a3:a8:19:9c:52:24:32:27:4b:78:cc:0e:85:92:1f:
3f:47:65:5d:56:27:37:89:6a:a6:93:19:3d:c6:92:c9:ee:79:
29:d0:5b:a6:95:0b:db:8e:6e:2d:38:6d:fb:f2:37:50:54:61:
ff:04:a3:11:e9:d6:97:d7:fc:9a:0f:d0:b5:06:18:10:f3:9b:
9e:be:0d:6f:66:9e:93:48:1c:e9:8a:7e:a1:0a:ed:43:ec:78:
41:2a:bf:36:ad:e0:b9:c8:77:7d:4a:7e:31:f5:08:b1:81:ff:
a3:5a:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:32 2026 by rpki-client