
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: I6DKjpazaFYW1odxyxjJhcHKZk0BLs8oL4aUau8BqGw=
Subject key identifier: 6E:F4:77:C0:AE:32:76:F4:A4:2D:08:3A:A3:FA:DE:5E:92:30:5C:89
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 08B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 08AC
Signing time: Wed 22 Jul 2026 20:59:41 +0000
Manifest this update: Wed 22 Jul 2026 20:59:40 +0000
Manifest next update: Wed 29 Jul 2026 20:59:40 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: CGjw64mcj3psKCPjoXCPmQh+kYUNw4PtGiTcLYBxhl8=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: 3luUYeTT67yCKVIevcEjzS34/Ev6QIZEGseKDtPOfG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Jul 22 20:59:40 2026 GMT
Not After : Jul 29 20:59:40 2026 GMT
Subject: CN=6a612f3d-6383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:b4:de:90:8b:8b:8c:cc:ed:dd:a0:d3:7d:
ac:b2:df:a4:9c:27:56:04:27:a5:f5:da:58:e0:6e:
73:f1:d0:ff:fe:16:a4:0f:25:e6:37:07:c5:8a:04:
4e:a3:c2:a6:70:b3:b8:6c:84:dd:40:ea:24:a4:28:
de:3a:de:be:41:ad:e5:a7:c2:a6:fa:2d:7a:25:53:
2f:77:02:69:cf:d3:0b:47:13:97:c1:9f:6e:3a:36:
71:86:97:e6:73:6f:55:b7:1c:69:80:81:8c:b1:8b:
64:e6:e5:0c:f3:e8:37:5b:3b:fc:e6:b3:09:f8:0d:
ec:29:4d:6a:aa:13:65:93:4b:37:58:14:2b:90:04:
bb:33:7b:d2:1d:c9:ea:39:8b:82:6c:3d:9b:2f:eb:
46:89:c2:d6:79:dc:0e:cc:45:c7:09:6b:cd:f7:11:
55:f1:41:bb:07:0e:01:03:cb:62:15:03:94:ca:87:
35:9b:6a:48:a4:30:d0:1c:40:0b:24:fb:b8:fb:5d:
3a:20:20:d3:3d:ed:60:95:78:1e:f7:3a:24:8f:58:
83:d6:0e:f2:c6:e5:84:26:9d:9d:7b:ce:1e:1d:87:
cf:bf:99:84:09:e6:28:0c:d7:10:c8:88:18:ab:94:
73:cf:45:7d:bd:1f:1a:fd:65:79:70:91:f6:38:50:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F4:77:C0:AE:32:76:F4:A4:2D:08:3A:A3:FA:DE:5E:92:30:5C:89
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:6b:47:85:99:42:d7:50:7e:8c:4c:78:00:5d:4e:01:18:d0:
9a:44:0c:61:53:3f:b2:0e:49:1f:6c:aa:6f:3c:3f:4a:c5:45:
4e:fc:e1:c1:de:36:92:59:0a:aa:61:33:9d:97:49:89:44:66:
45:35:c3:09:4f:3a:a5:75:1f:ac:e8:3f:c8:27:b4:73:65:bc:
99:55:4b:f5:cb:06:ac:97:1d:37:af:40:6b:da:a9:1b:6b:3c:
a8:b2:bf:4d:19:58:21:1e:2b:7c:ac:e7:cb:c7:f4:bc:76:41:
a7:d1:47:a1:07:a1:bc:bc:c4:aa:43:a1:5d:a2:96:98:58:cf:
c7:c6:1c:11:1e:08:ef:56:9a:21:51:e5:56:7d:c5:3b:bc:e1:
08:39:fd:15:40:e1:de:53:4f:a9:ea:81:a2:d8:2d:69:6c:a3:
55:83:4f:fe:f5:91:f1:3a:c1:8c:df:c3:e6:73:19:39:e8:15:
3c:4a:45:bc:b9:64:e2:5e:9d:70:60:45:08:7e:bc:0e:05:39:
4a:33:96:38:36:46:48:c0:83:09:56:b2:fb:93:f0:30:36:9c:
a5:0f:8b:6c:75:34:ae:fe:d6:da:ea:16:d6:99:76:c5:98:f2:
b2:c5:db:eb:ae:f6:17:37:8d:0f:bf:16:3c:2a:23:9d:23:a3:
36:eb:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:23 2026 by rpki-client