
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier: uA0kHjOh1ZrfPFtYcfW/H2LWoes592V4QuTi1yf29qg=
Subject key identifier: 17:0F:2D:75:33:38:24:A5:B8:6F:78:01:77:CE:87:BE:13:82:0E:77
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial: 0A6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number: 0A58
Signing time: Tue 12 May 2026 19:45:26 +0000
Manifest this update: Tue 12 May 2026 19:45:25 +0000
Manifest next update: Tue 19 May 2026 19:45:25 +0000
Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: RAt2G2IK+7Bt5nCiv5rRhhLjVf/MX1y34cm/yP6FvMg=)
2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2668 (0xa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Validity
Not Before: May 12 19:45:25 2026 GMT
Not After : May 19 19:45:25 2026 GMT
Subject: CN=6a038356-94dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:9b:65:e0:46:d6:8c:24:96:27:10:bf:6a:
59:3f:d8:a3:eb:8d:ce:2d:5a:93:a9:77:db:c1:21:
85:ac:7d:22:b4:cf:23:34:e3:cd:d8:5e:7f:85:4f:
7b:3e:75:f2:16:1a:3d:68:f4:d5:ae:ab:d6:73:fd:
92:a6:bd:7b:ba:1f:d1:e2:a3:47:fc:69:0d:a8:74:
48:67:8d:c0:7c:27:39:41:b8:08:31:a7:a1:05:d7:
9a:a6:08:a6:a4:00:59:34:95:c5:2b:6e:13:32:b2:
ad:93:34:e1:a9:8b:82:a2:10:43:53:e5:92:4c:fd:
bc:d8:3d:16:bc:94:4c:3c:37:89:53:4d:4e:d2:fa:
8b:81:0b:c1:7d:41:04:b2:8c:26:1b:4d:77:12:ad:
91:aa:66:8a:fe:fb:57:4d:73:4d:67:6a:45:e7:88:
a7:2c:2c:92:8f:2f:a5:14:3c:28:ce:47:2b:b4:01:
d0:ca:76:07:a2:ef:17:67:6e:71:b7:c5:c4:ff:92:
c0:e3:1f:2f:9c:7b:a7:f2:a3:5e:5c:63:e4:c5:d5:
5d:42:59:9f:fe:68:5a:32:24:5d:e3:0a:16:d5:17:
14:bd:65:8f:a2:a0:ea:4e:00:aa:92:83:16:9d:02:
29:25:d0:31:59:f2:d7:af:42:4f:fb:0c:1a:72:a4:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0F:2D:75:33:38:24:A5:B8:6F:78:01:77:CE:87:BE:13:82:0E:77
X509v3 Authority Key Identifier:
keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:2d:1e:c6:7e:19:8a:7d:e5:b4:46:c8:a8:6e:aa:1c:7f:17:
77:d7:ae:31:24:54:76:0f:b0:eb:07:c2:94:8b:9e:2a:ac:00:
fb:53:98:54:35:3d:a3:79:93:f5:10:6a:f4:7b:a2:c5:57:ff:
5f:62:58:e2:3e:8a:f2:54:c1:80:ab:d2:fe:24:e5:9d:d5:d0:
f2:d0:e7:ef:f1:2a:72:24:c2:e8:1b:d8:c2:5c:66:7b:69:a3:
02:c3:b1:a4:8b:81:28:21:99:81:e1:07:a2:21:7d:11:62:9a:
6a:cd:17:a9:5a:53:58:15:96:15:79:b6:f2:c5:43:d0:09:70:
c2:dd:16:09:a8:62:6a:0d:d1:75:ce:f3:03:dc:d0:70:32:c1:
52:98:ce:9c:74:b2:c4:02:f9:6a:9f:7d:1a:ed:3b:55:19:5b:
27:64:0b:28:c7:3a:66:0f:df:97:5b:17:c0:c2:12:22:fb:c9:
ec:45:6e:3b:55:d0:62:d8:b5:df:b9:54:c5:39:d1:d9:13:12:
94:20:51:51:7d:10:3b:e6:f5:47:ef:fd:49:2d:b1:99:d9:8b:
ef:91:fe:d6:7c:62:d7:c8:4a:8c:38:c6:2e:f5:2f:93:de:ee:
55:3a:2c:0f:86:ab:84:3e:7d:14:f4:42:72:d5:b2:73:94:83:
ed:49:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:59 2026 by rpki-client