
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft
File: lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft (raw, json)
Hash identifier: zozOcGJX+teZJmeDRaGqqF3FjLwHKXkWyA9VILpxiik=
Subject key identifier: 37:CE:B5:05:91:99:C2:08:CF:70:43:F2:9B:1F:0B:F4:F0:12:52:A8
Authority key identifier: 94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D
Certificate issuer: /CN=A91E41C9/serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D
Certificate serial: 0963
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft
Manifest number: 09EC
Signing time: Wed 22 Jul 2026 20:35:14 +0000
Manifest this update: Wed 22 Jul 2026 20:35:13 +0000
Manifest next update: Wed 29 Jul 2026 20:35:13 +0000
Files and hashes: 1: lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl (hash: UAPNf61MTVqFkcWhJnrPwlKNTZfDWxWvKD3fZWuaob0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl
rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E41C9, serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D
Validity
Not Before: Jul 22 20:35:13 2026 GMT
Not After : Jul 29 20:35:13 2026 GMT
Subject: CN=6a612982-9136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:a1:e8:98:5d:4b:6f:54:f2:a8:d7:81:2c:
b2:3b:e5:06:77:40:57:e3:dd:bf:c6:44:ca:73:e9:
73:5c:56:b4:91:f0:09:d5:44:62:fe:bc:60:3b:c9:
0f:54:c6:5b:cc:de:c2:2b:e9:5e:79:77:15:8d:b0:
d0:25:0f:9f:18:ee:84:73:0d:eb:c3:bb:d1:ca:6a:
e3:a3:f2:0d:4b:5c:b1:0d:78:62:65:e8:71:45:4a:
01:6c:ec:5e:4a:5c:b2:18:c4:87:eb:35:36:ee:1c:
9f:a3:a8:32:95:4d:a2:2d:6d:51:3d:41:56:46:01:
7b:8e:f1:d6:cb:2d:29:3a:3b:b2:cd:af:b4:91:7a:
95:e1:04:18:dd:a0:61:9b:50:89:c7:6b:85:be:a8:
3b:85:8b:fc:61:c0:8d:ce:a1:b7:c9:c9:da:3e:41:
46:47:a1:77:91:6f:95:a7:25:fe:c5:cf:05:fa:46:
b0:09:86:70:ec:ac:93:29:00:83:84:82:95:a9:12:
f4:13:85:a1:2d:3a:f6:2a:e4:ce:10:37:45:8b:f3:
d4:18:2a:7f:93:79:2e:a9:fe:6e:7a:0c:67:0a:8f:
b7:4d:99:b6:27:82:84:44:a7:6a:5e:1f:92:2f:40:
9e:2e:2e:b3:17:1f:19:89:83:4d:7c:60:b4:a0:7f:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CE:B5:05:91:99:C2:08:CF:70:43:F2:9B:1F:0B:F4:F0:12:52:A8
X509v3 Authority Key Identifier:
keyid:94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ba:24:c4:e3:e4:19:04:d6:f7:35:88:57:c5:15:93:da:37:
e4:9f:e5:85:51:03:8d:7e:44:cc:38:69:f5:fb:3a:a4:24:a5:
75:f3:1b:29:a8:8c:4d:e8:89:20:0d:00:bd:a9:93:cd:60:66:
8b:fb:cd:d7:0d:95:19:03:5f:37:35:74:85:ac:42:ae:9c:5a:
1f:b8:68:57:d2:29:c3:2c:8e:f8:2a:6a:44:57:6d:e5:fa:b5:
d0:ef:50:95:d9:b0:8e:b1:09:a3:5f:d1:37:2c:71:fa:8d:69:
58:7d:b4:e6:a6:f7:91:97:33:55:2d:40:8c:60:b8:1f:3c:c4:
18:92:45:8f:03:be:19:14:73:ed:b1:5f:f6:5c:30:e6:6f:ad:
b0:10:aa:34:33:0c:26:39:92:84:82:6b:c5:6e:4f:2f:c3:16:
d3:48:96:e4:c5:63:b1:1d:6f:5a:0f:7f:67:48:80:98:af:b4:
3b:85:82:ea:41:0d:c2:6c:d7:ed:0e:e9:21:3a:ea:5c:79:0e:
34:e8:78:d4:62:2e:36:e6:00:92:57:57:01:38:88:42:49:4b:
f5:e8:10:fb:f7:59:67:33:ea:35:f9:3d:90:8c:66:f9:10:31:
eb:2a:ae:c2:21:99:14:a6:86:bd:c5:6f:ee:66:1e:30:7c:8c:
e6:74:45:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQxQzkxMTAvBgNVBAUTKDk0NzBFNzYxMDgwNjNFNEY3QzY0QUQ0M0QwNzZCQzEx
QUUxRkRCNUQwHhcNMjYwNzIyMjAzNTEzWhcNMjYwNzI5MjAzNTEzWjAYMRYwFAYD
VQQDEw02YTYxMjk4Mi05MTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyUuh6JhdS29U8qjXgSyyO+UGd0BX492/xkTKc+lzXFa0kfAJ1URi/rxgO8kP
VMZbzN7CK+leeXcVjbDQJQ+fGO6Ecw3rw7vRymrjo/INS1yxDXhiZehxRUoBbOxe
SlyyGMSH6zU27hyfo6gylU2iLW1RPUFWRgF7jvHWyy0pOjuyza+0kXqV4QQY3aBh
m1CJx2uFvqg7hYv8YcCNzqG3ycnaPkFGR6F3kW+VpyX+xc8F+kawCYZw7KyTKQCD
hIKVqRL0E4WhLTr2KuTOEDdFi/PUGCp/k3kuqf5uegxnCo+3TZm2J4KERKdqXh+S
L0CeLi6zFx8ZiYNNfGC0oH8mqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfOtQWR
mcIIz3BD8psfC/TwElKoMB8GA1UdIwQYMBaAFJRw52EIBj5PfGStQ9B2vBGuH9td
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDFDOS80OUJEOURBNkMw
RjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1BrOThaSzFEMEhhOEVhNGYy
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xIRG5ZUWdHUGs5OFpLMUQwSGE4RWE0ZjIxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDFDOS80OUJEOURBNkMwRjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1Br
OThaSzFEMEhhOEVhNGYyMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnbokxOPkGQTW9zWIV8UVk9o35J/lhVEDjX5EzDhp9fs6pCSldfMbKaiMTeiJ
IA0AvamTzWBmi/vN1w2VGQNfNzV0haxCrpxaH7hoV9IpwyyO+CpqRFdt5fq10O9Q
ldmwjrEJo1/RNyxx+o1pWH205qb3kZczVS1AjGC4HzzEGJJFjwO+GRRz7bFf9lww
5m+tsBCqNDMMJjmShIJrxW5PL8MW00iW5MVjsR1vWg9/Z0iAmK+0O4WC6kENwmzX
7Q7pITrqXHkONOh41GIuNuYAkldXATiIQklL9egQ+/dZZzPqNfk9kIxm+RAx6yqu
wiGZFKaGvcVv7mYeMHyM5nRF4Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:04 2026 by rpki-client