
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
File: lpDF1gn85ELDW5kW1WP58Ye2itQ.mft (raw, json)
Hash identifier: P/VXAszuHJ8312NatARGKU8X7D3zx1SauW4xSnolPWk=
Subject key identifier: 22:50:49:95:D1:B8:02:08:ED:FF:3B:EC:8B:FC:8B:35:39:35:4E:57
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Certificate issuer: /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial: 0F17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
Manifest number: 0F0D
Signing time: Wed 22 Jul 2026 17:47:12 +0000
Manifest this update: Wed 22 Jul 2026 17:47:11 +0000
Manifest next update: Wed 29 Jul 2026 17:47:11 +0000
Files and hashes: 1: lpDF1gn85ELDW5kW1WP58Ye2itQ.crl (hash: xhhjFxuy8U0caYSqrIXHN8enODy2wIbQEI1US2gxdf0=)
2: 6C153768CE5511EB9DD80C30C4F9AE02.roa (hash: 8GXHkMu5QhzxhDcgK/hTob055OzXskK4SzGbgPUovhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3863 (0xf17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Validity
Not Before: Jul 22 17:47:11 2026 GMT
Not After : Jul 29 17:47:11 2026 GMT
Subject: CN=6a610220-52d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:f6:b8:83:44:33:a0:84:1d:23:f1:45:bb:
bf:d9:9e:ad:96:15:2e:9d:b5:24:2c:8a:0d:7c:9e:
56:b2:55:17:e2:e7:d3:a5:cd:66:de:6b:e2:2a:d9:
77:98:43:e5:5a:19:48:18:5e:d1:7f:f5:14:67:80:
f8:e5:3a:be:9b:a3:3b:ac:3c:db:56:c7:f8:c2:d9:
ab:67:bd:1b:f3:e9:c0:3e:fa:d0:ee:30:b3:1f:ae:
97:eb:39:a6:84:31:6f:97:10:4a:18:8b:69:d5:71:
12:29:66:9e:ff:f0:37:06:61:9d:13:75:d3:08:46:
45:3f:df:d8:82:db:25:a1:a3:f8:4f:2b:75:44:f3:
89:e0:63:d2:08:ee:89:b1:60:f7:3c:6e:08:ea:9c:
d5:f2:08:3b:4d:4c:c7:fb:11:b9:c4:e1:5f:26:87:
f7:da:68:cd:21:a2:14:dd:d9:7b:56:c2:45:be:a0:
d7:d4:31:ce:f3:1b:02:58:46:8d:7a:b7:54:04:95:
6d:36:6c:fe:52:f9:6d:05:61:da:21:57:6e:07:55:
6f:9d:95:ab:ea:b1:25:66:2d:cd:fb:48:fd:1c:f6:
44:0b:a3:61:c5:bc:c2:e1:f0:41:74:59:d4:cc:a3:
e3:21:5b:5d:0d:47:56:0f:d9:1a:e8:25:e4:dc:ca:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:50:49:95:D1:B8:02:08:ED:FF:3B:EC:8B:FC:8B:35:39:35:4E:57
X509v3 Authority Key Identifier:
keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:04:f0:c4:2b:6d:89:eb:3e:75:d0:71:f7:6f:26:52:34:be:
16:fa:1b:c1:98:63:8e:4e:8f:04:a5:e4:8c:fc:53:ea:2d:3e:
79:a7:f0:12:b4:28:7e:b2:91:03:92:7e:d9:cc:ff:1a:53:d1:
38:7c:6d:97:f2:52:18:db:83:a4:5b:01:d6:27:f4:9d:c0:8a:
3c:71:4c:c2:0e:f3:e7:d4:a0:90:d7:66:28:d5:55:de:f8:60:
31:8b:e7:5e:56:56:bf:98:07:9e:a6:3d:49:65:4c:aa:19:e3:
05:41:1c:de:3b:73:6d:5d:78:34:10:76:4e:8f:b7:ea:ad:cb:
9a:d4:6d:56:db:13:62:09:6e:c3:54:29:27:c2:8f:dc:f3:b9:
7c:26:7a:0a:fa:b1:0f:d0:c9:87:ef:81:ba:1f:a9:71:fd:b8:
99:5d:5b:18:39:ef:71:4f:b0:e7:60:16:a2:fc:2d:af:33:be:
32:c5:47:93:c4:07:b0:49:95:ba:32:b1:bc:ea:ed:36:18:e1:
cc:6c:b6:01:15:e9:ea:78:bb:71:5b:34:be:b9:b7:35:cf:9d:
82:21:95:2b:47:36:67:f3:f8:02:ac:64:e8:82:b5:aa:72:f1:
37:fb:46:e8:84:c3:22:43:d9:70:66:f3:f7:bb:1e:9b:7e:cd:
78:e0:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:03 2026 by rpki-client