
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
File: lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json)
Hash identifier: +pG6noJlSNFz2wEN526m2KLwT7vL0DzdCZwHAZLX0Hs=
Subject key identifier: CE:A7:AF:61:A2:A6:B9:E0:8F:E7:D3:E9:63:E4:E4:25:87:7B:CE:EF
Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Certificate issuer: /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
Manifest number: 40
Signing time: Thu 23 Jul 2026 10:29:14 +0000
Manifest this update: Thu 23 Jul 2026 10:29:14 +0000
Manifest next update: Thu 30 Jul 2026 10:29:14 +0000
Files and hashes: 1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: SANPuzOvvaUi18jsDcorQbkjWsrSrV5d1U/x8/OudE8=)
2: 20763B5024C611F191287557A6833773.roa (hash: 0r6vS9qeg1815ILGWf03i2uDlWfL7ibwuznjphtmkNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Validity
Not Before: Jul 23 10:29:14 2026 GMT
Not After : Jul 30 10:29:14 2026 GMT
Subject: CN=6a61ecfa-08d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:b1:4a:1f:65:1c:2b:f5:0f:8e:7a:fe:de:
d0:c5:c9:c6:86:21:a1:bb:20:85:88:fe:fb:9e:82:
e2:79:c4:2b:fd:4d:71:23:e4:f3:09:32:fa:1f:3e:
32:c2:3a:7b:2e:96:82:73:57:3b:50:fa:08:d9:cc:
8b:aa:c8:5e:4d:bc:3b:b8:d4:ef:ac:18:26:11:a8:
08:21:d3:8c:0e:70:25:24:9c:88:3d:58:14:ba:ea:
b0:7f:63:ec:82:32:bb:d0:72:fd:58:09:19:83:ab:
d0:c3:54:2e:11:72:36:a8:b2:a4:e5:0b:e9:a2:b3:
dc:7f:e9:50:ec:28:e0:c2:b9:b6:fb:a1:f5:eb:6e:
f3:5e:db:91:fe:c5:ea:4e:2f:4e:50:13:d1:27:92:
d8:cf:33:20:69:cc:a6:28:45:37:fc:75:ad:f0:62:
99:ff:0a:10:b9:55:d1:ed:fd:5a:8a:c0:31:e4:c0:
89:4f:b0:c9:91:a6:16:d0:8b:2a:e9:71:c9:d1:94:
73:bd:0a:37:01:9a:16:e2:f4:fe:cc:d8:2a:50:bc:
51:61:28:e9:c0:2a:56:9f:af:2b:23:d9:4f:c5:03:
4c:99:10:9e:9e:93:ca:dc:ef:c0:29:5d:89:c3:06:
8c:b4:56:e2:dc:9d:b7:20:2c:09:e4:f4:a2:f5:fa:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:AF:61:A2:A6:B9:E0:8F:E7:D3:E9:63:E4:E4:25:87:7B:CE:EF
X509v3 Authority Key Identifier:
keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:16:00:8b:8b:70:55:50:bb:db:7f:aa:38:6a:a7:a7:7e:78:
fc:e9:30:8d:8b:c9:1b:a3:6c:db:18:26:01:a6:61:35:29:44:
1c:14:ac:0b:4c:37:e9:c4:a3:e1:b8:0e:61:e7:4e:55:92:80:
0a:bd:7f:f4:ff:8e:71:ab:4d:ff:d9:46:7c:b7:99:31:e0:c9:
78:5c:92:f5:5e:70:90:b3:07:a1:9e:34:ad:08:01:c7:3a:e5:
d4:04:ea:bd:5e:12:f9:74:5f:e0:ad:29:8d:c7:48:0d:a0:13:
f7:24:54:8a:9d:d4:c4:a6:36:94:c0:07:64:dc:07:fb:ef:d0:
ef:96:0f:6b:bf:d8:7b:36:44:7c:75:d3:80:22:e7:4c:9f:a8:
ab:a6:1f:30:dd:3e:6a:49:2d:d8:17:ea:f6:72:6e:38:30:68:
74:88:65:fb:17:bb:ee:a4:76:ba:6f:fc:14:09:69:29:13:3e:
7a:49:e4:4a:5e:66:c2:e3:8c:16:09:de:65:a2:d0:31:02:9a:
55:03:86:f1:86:cc:00:73:f1:b2:9c:1c:09:24:ab:49:c3:92:
64:d0:ea:51:80:e4:62:26:26:1d:69:cb:ca:55:1c:12:72:98:
03:1f:99:53:94:9a:80:63:60:22:de:1f:e3:01:c1:42:f7:82:
d9:71:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:51:42 2026 by rpki-client