
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
File: ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft (raw, json)
Hash identifier: vGwxl3a0hAB9O7Krp1PnZ/nDc1TUNf7CKkOiQF7/Peg=
Subject key identifier: 58:4C:F6:65:3C:08:A7:F9:65:72:FE:A8:27:2B:56:88:97:96:13:8F
Authority key identifier: 96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99
Certificate issuer: /CN=A91DF9CA/serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
Manifest number: 04
Signing time: Mon 21 Sep 2026 09:16:05 +0000
Manifest this update: Mon 21 Sep 2026 09:16:05 +0000
Manifest next update: Mon 28 Sep 2026 09:16:05 +0000
Files and hashes: 1: ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl (hash: bAyBW2E974tarEZSgEUbgYTHXfb1sNl6+cRne5XRvOI=)
2: C6EF2736B23C11F196D963B56111F970.roa (hash: 7Vzu1+cRluQVIi2fLurDSzXT17iGox+kdq/tblSQ6nk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl
rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF9CA, serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
Validity
Not Before: Sep 21 09:16:05 2026 GMT
Not After : Sep 28 09:16:05 2026 GMT
Subject: CN=6ab0f5d5-6b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:5c:06:16:35:41:ff:5f:f1:ba:ae:85:63:
8b:d3:49:f8:b6:cc:20:34:06:d8:ed:4d:60:d4:90:
02:00:21:59:63:37:22:da:c1:99:d6:31:da:50:94:
e7:86:c4:56:56:d2:e7:79:49:9b:70:c6:15:62:ae:
0f:63:57:7f:9a:22:c3:29:66:81:de:31:9d:f3:02:
16:82:02:d0:05:21:3c:4e:17:89:b2:de:f5:e7:a2:
ee:1c:c2:0b:6d:b1:cc:c9:a5:f9:fe:26:12:ad:16:
98:cf:c7:59:7e:d0:41:91:a7:92:3e:a5:dd:84:d7:
36:cf:7e:23:7e:02:fd:19:55:9d:52:18:be:de:49:
d0:74:2f:7c:56:eb:7a:98:ae:c9:c4:19:85:d1:d2:
9e:b5:4f:c8:d7:fb:46:33:b0:72:23:65:dd:db:55:
04:ca:54:17:41:8b:a5:4c:d0:26:b0:c1:f5:3d:f7:
7b:0c:61:4f:cd:7b:75:1c:45:d9:bb:9f:4d:11:20:
3e:d3:1d:d1:4b:37:bc:ec:8e:5d:cd:87:d6:20:8b:
54:6e:17:35:79:cc:dd:ad:17:f1:49:38:df:d3:7d:
4a:e4:0f:51:b5:88:2e:61:14:86:ce:59:4b:14:c4:
12:73:72:5e:72:f2:17:ce:2c:6b:e4:a3:ff:70:34:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:F6:65:3C:08:A7:F9:65:72:FE:A8:27:2B:56:88:97:96:13:8F
X509v3 Authority Key Identifier:
keyid:96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d0:30:40:4c:70:06:65:fc:40:2b:3c:23:27:9d:a0:f7:8c:
74:b4:c9:6d:ca:49:06:63:7c:5f:dd:c7:9e:f5:49:1f:93:cf:
21:af:39:7a:29:32:a2:20:d7:87:15:5e:bc:98:07:13:b2:c3:
e7:99:10:d9:91:e3:50:cb:ee:c4:20:bb:83:3f:8b:f7:c9:f7:
05:03:0a:8d:e0:d0:18:4c:94:96:df:0c:ab:70:56:2a:ab:38:
68:20:fc:28:36:11:d7:0b:65:db:06:20:a8:79:6f:cd:fb:d1:
0b:0e:57:0f:cb:eb:e9:0f:56:74:3a:cb:ba:de:18:28:5c:24:
ff:4a:3c:72:2d:ff:d4:5c:4e:aa:49:2f:ce:9a:80:3c:b1:1c:
e8:8c:19:49:d0:21:c0:e0:a1:7a:bf:6e:23:35:55:8d:dd:76:
b7:1c:00:4e:9e:21:9f:01:81:64:a8:bf:78:f6:8e:19:cd:ab:
a4:78:60:0c:f2:d9:e8:03:66:36:42:a3:07:cf:73:59:14:8e:
0c:ee:b0:95:61:f7:b0:80:5d:1b:c3:18:03:7e:fb:0f:72:a2:
63:c8:27:3b:ec:c0:45:d0:57:55:f0:93:88:a7:27:43:ab:78:
2b:f6:74:0b:e7:09:fd:a2:58:4f:0f:79:ba:44:81:83:e1:16:
3d:9b:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:34 2026 by rpki-client