
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier: HQ3cwNbYKGapG3IJNaPsTP4t0arErpk002mdqCwp3Vw=
Subject key identifier: 37:5D:5E:23:2F:50:18:9F:4F:B3:A0:48:FD:46:2D:5F:9F:89:F2:74
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number: 85
Signing time: Wed 23 Sep 2026 07:23:12 +0000
Manifest this update: Wed 23 Sep 2026 07:23:11 +0000
Manifest next update: Wed 30 Sep 2026 07:23:11 +0000
Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: fRcYKO1pVUxaLPXLI5TT8DOM6O2G6I+l4Jq+13un4OM=)
2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Validity
Not Before: Sep 23 07:23:11 2026 GMT
Not After : Sep 30 07:23:11 2026 GMT
Subject: CN=6ab37e60-c58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:fa:47:91:e9:e6:fc:88:59:da:c8:5e:3b:
e8:4e:15:ae:00:75:97:e5:cd:e0:7c:a1:3f:e9:de:
63:bc:11:ac:79:bb:30:fe:e6:dc:dc:ce:2d:ec:e1:
d7:6e:77:fb:b0:2c:0f:e5:0c:ca:15:1e:76:07:86:
40:46:90:64:c7:60:94:36:13:9b:24:e0:bc:e6:82:
05:e6:cb:f0:ad:e2:a4:4b:bb:22:6e:62:29:f4:6e:
5c:a7:ae:86:2d:f5:35:61:49:98:f5:42:75:5e:31:
fa:58:0d:b5:c4:a9:b1:7c:8d:4a:06:7e:4c:90:cb:
7c:08:f3:63:a4:49:87:fb:68:ae:48:a2:9f:1d:bc:
3e:8b:79:f1:7d:40:be:09:ef:5e:36:58:7c:68:9e:
79:93:c0:b5:c0:ff:58:a1:5e:de:9b:0e:13:40:61:
c6:88:98:a9:c1:e7:81:ef:b8:3f:9c:27:59:ba:2f:
53:b1:2e:a1:d2:94:32:ae:11:f7:80:ae:ab:ff:69:
90:aa:08:c4:68:6f:7d:c2:bb:f6:72:9c:26:3f:54:
68:1f:3a:b0:50:1b:f9:75:a1:91:e1:a7:52:c0:ae:
4c:ad:1e:4d:17:08:75:ba:fe:19:55:9f:76:35:50:
a0:73:8e:f1:e1:77:d8:18:a5:b3:8f:ea:d1:98:84:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5D:5E:23:2F:50:18:9F:4F:B3:A0:48:FD:46:2D:5F:9F:89:F2:74
X509v3 Authority Key Identifier:
keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:02:cb:57:c8:e6:36:34:78:7b:5a:10:09:dd:f4:90:fa:8b:
0f:a3:4d:6c:de:e7:41:aa:59:99:e6:ec:d3:80:d4:3b:95:b1:
98:82:17:b5:7f:43:d2:5e:5d:c4:36:37:7d:bf:58:19:60:4a:
fe:d6:16:09:ea:cb:5b:b9:c3:48:b5:6a:23:24:b9:c0:df:13:
c0:5f:06:de:70:e0:69:0e:b8:4d:de:42:24:9a:6a:d3:a7:45:
9e:94:0a:0c:32:15:ba:20:a2:5a:90:cc:3d:c7:97:dc:61:5a:
2a:c8:a8:af:4c:86:61:94:7b:0e:46:23:ac:68:7c:d7:41:e0:
50:c2:94:47:7d:bd:e7:df:70:24:43:83:51:33:b6:e5:79:31:
31:2c:62:c1:32:1b:cb:4f:a8:0c:72:bb:eb:6a:53:e9:54:ab:
ae:92:ab:4b:25:de:bb:38:3e:b7:b2:24:2c:60:7c:01:9e:f1:
2b:c7:53:ee:b3:51:1b:a2:78:c7:56:55:ba:07:ad:12:3e:bf:
8c:26:f6:d7:36:b1:96:d8:90:13:49:51:f8:2c:a8:59:cd:b3:
c6:8f:aa:d8:d7:05:d9:b4:0d:95:70:d4:29:7d:9b:41:49:e0:
51:56:6f:e3:94:83:5c:93:22:cc:a7:be:ba:0b:33:44:11:70:
e9:33:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:52:35 2026 by rpki-client