
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
File: L77sEYtTYT4VQvM__DYRjlYtRy4.mft (raw, json)
Hash identifier: gyrJgl49XRhnpbSmrFPZGMAMH4plqYHcSZZxeRlpy/A=
Subject key identifier: C1:17:8A:23:D9:DF:BE:06:75:B9:D1:1C:E0:1E:D9:9E:8E:BC:CE:D2
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Certificate issuer: /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
Manifest number: 60
Signing time: Thu 23 Jul 2026 10:15:00 +0000
Manifest this update: Thu 23 Jul 2026 10:14:59 +0000
Manifest next update: Thu 30 Jul 2026 10:14:59 +0000
Files and hashes: 1: L77sEYtTYT4VQvM__DYRjlYtRy4.crl (hash: AIRV3rbL7HCVVXLrDU+JOLh2n7LAnFquiIoATvy/TDE=)
2: C4618A34188D11F1A1D836EC3D3D8C67.roa (hash: zGs/9ZPuQmBMjGcesFDtJEy650HEEHK6+s759wT6WOM=)
3: 63C8FE7A276D11F1856D09ECC3833773.roa (hash: R14w9cl533WbyeT8xCKzVPtv1wFWXETsfR643wwbAq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Validity
Not Before: Jul 23 10:14:59 2026 GMT
Not After : Jul 30 10:14:59 2026 GMT
Subject: CN=6a61e9a4-793f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:b5:da:68:f9:36:35:51:6b:0b:25:44:3e:
9f:b7:83:a1:43:58:2f:67:f0:b3:2d:19:3b:58:8d:
7e:9a:aa:18:c4:3b:1f:cf:14:04:42:18:eb:82:b9:
83:33:cb:e0:83:a9:a7:67:62:a2:5c:72:d0:9c:fa:
f4:30:b7:98:e5:13:1c:3e:aa:e2:07:3a:60:8d:5c:
d5:03:5f:3d:83:dc:cc:2f:d0:37:f4:3c:83:07:0b:
f1:7f:22:c8:9c:8f:36:ae:1d:20:13:66:54:7a:14:
ea:03:56:44:e1:7b:54:89:28:a0:f2:b0:f6:cc:fe:
48:6d:c1:a1:c3:28:e5:d6:21:4b:e0:89:ea:cf:e0:
a3:da:51:ce:cb:7f:dd:b3:b7:ca:30:9c:7b:20:40:
d6:2f:af:6c:69:bc:96:20:64:7c:9f:bc:c5:80:69:
11:bf:3b:e7:7a:b0:d9:7a:37:54:64:b7:af:51:6a:
ac:47:64:30:4e:bc:0b:b2:15:c8:96:c3:3f:a1:98:
1a:85:64:1c:53:61:02:db:79:70:fe:63:a6:c6:17:
53:58:ff:d5:8f:07:0d:bd:8d:72:3c:3d:cb:24:a0:
f6:7b:77:ea:25:16:ae:d6:54:7d:fc:de:7b:55:ba:
89:b9:d1:4a:38:1e:29:fd:af:55:b3:60:58:36:6d:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:17:8A:23:D9:DF:BE:06:75:B9:D1:1C:E0:1E:D9:9E:8E:BC:CE:D2
X509v3 Authority Key Identifier:
keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ac:85:7a:2a:2b:c9:7b:ed:5d:c0:17:aa:d2:08:1a:56:78:
c7:a1:0d:7d:e5:23:6d:6f:22:06:93:ee:e1:b3:cb:30:dd:8a:
6a:4f:00:ab:b9:27:05:b9:2d:fa:d2:83:7f:40:c2:fa:73:c9:
82:b7:15:5e:3e:96:bd:91:2e:26:c7:56:2a:be:e0:58:2b:cc:
18:fc:9c:2d:51:62:e0:27:9c:e5:f6:80:28:3e:b2:3d:60:ee:
97:81:e4:ea:c1:cf:93:a3:cf:7c:3e:1a:bd:56:bc:43:44:a3:
e8:99:5b:60:d3:88:be:6c:43:26:8a:55:53:30:4d:68:dc:99:
ad:6d:90:71:71:27:c0:89:bc:a0:51:42:01:7d:63:f3:ec:e5:
e7:ad:cf:48:11:23:b9:8a:4e:47:45:b4:57:1a:30:20:11:a5:
ec:03:8d:58:6d:30:10:96:7d:bb:ab:1e:73:e3:3b:50:a2:e4:
1d:c1:f7:94:11:e1:6e:dc:e4:4e:4e:5f:aa:33:99:0d:97:86:
5d:58:4c:89:3d:2d:6a:fe:1f:d0:d8:c5:59:8c:61:f9:05:90:
c2:ad:50:8f:4e:19:17:82:f2:e8:cb:d3:58:a8:73:97:50:e6:
f0:c0:bc:b0:6f:7d:64:4a:71:3b:2b:20:df:8e:29:d3:c9:75:
54:d6:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:06 2026 by rpki-client