
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft
File: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft (raw, json)
Hash identifier: C24wF0CcjoPnI4vu+GFgdnHWNf3SKtBvrCxzRyGJl70=
Subject key identifier: B8:06:EB:2A:34:75:F8:AE:B9:42:FF:B7:B0:19:36:AC:78:0A:78:D0
Authority key identifier: 95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C
Certificate issuer: /CN=A91E427F/serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft
Manifest number: 84
Signing time: Wed 23 Sep 2026 07:30:10 +0000
Manifest this update: Wed 23 Sep 2026 07:30:09 +0000
Manifest next update: Wed 30 Sep 2026 07:30:09 +0000
Files and hashes: 1: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl (hash: 4BY4pN3CxTe/8oqKt9RxW8YP3THOAV8HcJIKwb4CXII=)
2: 0452EB4853FC11F1A50C3A68CD833773.roa (hash: Dwbq6wOkLhWt6mifV43tjYsX+dptJ/PFCJBmbhW6+7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl
rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E427F, serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C
Validity
Not Before: Sep 23 07:30:09 2026 GMT
Not After : Sep 30 07:30:09 2026 GMT
Subject: CN=6ab38002-5b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:d3:7c:5e:a2:51:c3:8a:fc:85:b3:4e:a7:
0c:ea:6f:06:29:9c:3f:b2:9d:a0:b8:2d:da:9e:b0:
5e:7e:4e:19:19:02:72:62:f1:72:93:8f:f0:2c:7d:
33:9e:95:c2:04:ac:8c:2d:16:8a:0a:22:0d:73:8c:
6b:c7:b8:a4:af:91:39:2b:0b:4c:25:14:b1:63:36:
79:3d:55:54:ef:78:42:01:26:83:75:16:c8:3a:c4:
9d:78:19:f1:68:08:8a:ca:c0:cf:4a:b7:0f:98:34:
d3:81:18:18:8d:f1:b7:bf:6a:0a:12:c0:17:47:4f:
ae:f9:e7:20:5e:e9:18:28:5e:67:8c:91:64:ea:0a:
eb:af:da:37:6c:37:cb:dd:8a:ba:71:5d:1c:2f:d0:
8a:6d:04:37:0d:c4:19:d9:92:b0:df:63:ad:65:77:
69:8b:44:e5:17:74:e9:73:f5:07:b9:ec:c8:b1:c3:
03:02:b6:71:a3:0b:bc:2b:35:66:0f:32:7d:de:86:
49:55:00:8c:af:2e:6c:3f:1a:c2:b5:eb:dd:5e:d6:
81:30:58:a1:e6:b3:f5:54:ff:34:ae:bb:77:b2:0a:
7a:94:59:f4:f9:1e:b8:c8:3e:2f:d8:7d:e9:66:89:
1a:92:be:2f:81:4b:85:f7:11:6c:d2:24:31:e2:4a:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:EB:2A:34:75:F8:AE:B9:42:FF:B7:B0:19:36:AC:78:0A:78:D0
X509v3 Authority Key Identifier:
keyid:95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:12:ec:c7:6e:53:e8:78:2e:58:aa:d5:d9:6d:44:d0:50:50:
0b:a9:8a:bd:8b:03:2e:45:99:7a:7c:3e:cc:6d:18:7e:b4:dd:
8c:7c:9f:36:b1:17:a8:ab:10:0d:6c:9a:9c:69:15:5e:f1:04:
19:41:31:14:62:7e:c2:73:ea:7c:8b:dd:65:4c:3d:5c:02:79:
69:0c:a4:d1:9e:a1:41:f4:f1:1e:e3:cd:c0:44:0b:46:4b:1f:
e1:8a:11:d1:12:91:89:3d:16:04:da:de:86:e6:87:73:be:cb:
c5:95:fc:34:c8:88:f5:a7:01:54:1b:ca:61:04:a2:a3:49:3b:
3b:93:c3:3d:aa:bf:93:e1:2b:06:85:14:d3:f5:83:19:88:13:
82:3d:20:65:8f:3c:b0:85:cb:62:64:5b:85:b4:4b:59:43:1f:
15:9a:99:3d:76:ad:83:dc:61:1f:53:36:8a:f9:8a:b2:a7:69:
c9:44:03:ff:25:5a:14:79:ec:b6:ee:7b:20:c9:c4:9a:ec:c5:
ed:fc:2d:0f:e2:84:9f:79:4a:4d:f1:35:80:99:a6:ef:02:5e:
c5:dd:ac:2d:68:10:78:26:04:21:71:bd:f7:20:3b:42:b2:36:
93:d0:61:82:56:be:6d:5b:85:42:3b:49:72:dd:70:f2:83:04:
e8:70:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:53:21 2026 by rpki-client