
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
File: laNNlXWF4FXwNo5HTaPR-bvPqN8.mft (raw, json)
Hash identifier: nTDVi2fO3BsinxB3xHOtzTQeYQGX8GBcE4BLAiuZXOY=
Subject key identifier: 93:9A:B3:2F:25:5E:0E:D0:9F:76:0C:DC:64:A5:49:B0:14:FF:20:7F
Authority key identifier: 95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
Certificate issuer: /CN=A91D2B56/serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
Manifest number: 52
Signing time: Fri 25 Sep 2026 08:22:53 +0000
Manifest this update: Fri 25 Sep 2026 08:22:52 +0000
Manifest next update: Fri 02 Oct 2026 08:22:52 +0000
Files and hashes: 1: laNNlXWF4FXwNo5HTaPR-bvPqN8.crl (hash: Zpe/qyoSc9cO4NkPbImvY5daI7fQTMLgvNUOyor04qQ=)
2: 04EDE6343E2B11F1B4A6C6E4B6833773.roa (hash: LMy6VYgTcsTBcx2OItSEyTKYKnkkDiO7uEs+0s8aooQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B56, serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Validity
Not Before: Sep 25 08:22:52 2026 GMT
Not After : Oct 2 08:22:52 2026 GMT
Subject: CN=6ab62f5d-c9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:15:0a:2c:f5:12:c2:28:81:fa:94:c6:64:54:
b8:a3:d0:53:1f:20:13:83:ba:51:3e:3a:75:12:75:
16:01:66:7a:ea:51:4f:2c:62:98:f7:b5:cc:57:25:
da:72:f0:62:c4:ae:4e:7e:ec:b5:eb:de:0e:28:cf:
53:31:7e:d4:6b:2d:06:20:c2:2d:46:55:c7:c2:5a:
1d:01:1f:c7:96:24:dc:8a:59:12:e7:a1:5d:53:a3:
1c:9d:75:85:49:63:7a:57:0d:4a:b8:0d:42:e8:b1:
75:ff:73:1d:37:58:56:21:13:c2:1d:5e:a5:6a:e5:
b3:bf:b6:f1:40:7b:09:c1:05:87:f3:60:c1:26:b4:
cd:ae:62:2c:92:cc:5f:f7:d8:0e:c3:09:c4:54:98:
42:0b:89:c6:86:b5:01:e3:62:24:68:47:b8:e9:1c:
47:d4:0c:54:88:93:fb:df:e4:d3:1f:31:08:4e:92:
d9:ef:8d:f2:e2:d5:2d:74:77:04:64:6b:16:54:f9:
64:71:ce:b2:3d:ea:93:ce:82:be:b3:51:5d:23:b9:
35:be:84:c6:65:3f:13:a9:8a:3a:a0:2e:a3:59:73:
01:2d:e1:fc:d4:c3:36:6a:ef:61:81:0d:a6:eb:2d:
8c:91:9a:ce:76:7a:5e:f2:df:05:42:e7:e7:d7:a9:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9A:B3:2F:25:5E:0E:D0:9F:76:0C:DC:64:A5:49:B0:14:FF:20:7F
X509v3 Authority Key Identifier:
keyid:95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:5b:1c:58:76:f9:23:66:c4:fb:f1:ca:08:f4:70:e5:d8:78:
2f:9a:4e:2e:b8:f1:be:18:2c:38:11:c6:7d:e7:16:ac:bc:15:
d8:33:4b:47:5b:64:d9:1f:f9:e0:72:0e:cf:32:4b:03:91:63:
22:f0:12:74:b2:17:6d:f1:48:09:3a:80:87:31:c6:fe:84:2e:
83:44:26:73:b8:a5:2a:52:e2:ed:56:c9:d3:b4:31:c7:0d:12:
16:01:32:7c:e6:d7:1b:a9:dc:93:7a:d4:4a:34:27:79:af:dd:
d2:84:c3:bc:69:0b:5a:ae:25:4c:0f:98:b9:3c:b9:0e:25:75:
28:b5:3b:d0:5f:90:27:e4:8b:55:c7:34:21:7b:f1:6f:ba:76:
cd:3b:52:98:cc:5d:53:fc:c6:f7:2d:6e:7b:11:12:c5:aa:b3:
f7:cc:91:b8:e5:f4:08:73:a0:01:c0:1a:42:1e:8c:39:16:d2:
50:1f:78:6f:3e:59:9b:89:e9:27:46:42:05:ec:9f:19:e5:3c:
e9:32:5f:fb:38:92:c7:a3:84:e8:c8:25:5e:ac:fa:86:87:c6:
ff:4e:8a:34:52:d4:2c:d5:6a:e6:6d:c3:e7:ff:8b:32:c4:77:
fc:36:9c:0e:4f:dc:cd:86:bf:1b:65:c7:31:cc:95:63:26:13:
01:ea:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:13:46 2026 by rpki-client