
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json)
Hash identifier: ljfczWWda/MoYyxCXBj750oaHh9as/i4ZaP1g7ySVuU=
Subject key identifier: C6:11:D2:CC:76:32:C2:80:35:42:C0:9B:2E:E0:B8:98:19:EB:66:B1
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial: 0C25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
Manifest number: 0BFC
Signing time: Wed 22 Jul 2026 19:14:35 +0000
Manifest this update: Wed 22 Jul 2026 19:14:35 +0000
Manifest next update: Wed 29 Jul 2026 19:14:35 +0000
Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: 2J2TSfY1irpScw5SPdXeUbwc1oW2AvB9KEx4R3dJWts=)
2: 44AB1490608611F190EDABDB6E47A888.roa (hash: H6vMQ2t2D2rSoT2Sb3T5cU2Q7kcQetOPzezN9R6P68g=)
3: 1C69D67C1AEC11F1BECB19E5043D8C67.roa (hash: D4VLFLoLda9iVGzy5j4mVaxWgRrpARPiO4/t3mX7N14=)
4: F6A7E804177911F18F01239F253D8C67.roa (hash: 94B4DzsJi2Ia0XMNp0IDkQKvwnPAbaf/PbW4VjRjqfk=)
5: F62847A2177911F18F01239F253D8C67.roa (hash: 2WCfGiDTIDu8+cnHkGMO0SBE3Ppp/vqnYU6M++BnmjU=)
6: 1CEF944C1AEC11F1BECB19E5043D8C67.roa (hash: bK4wK4ZW2AeyeEa2VWf/EBV02KYa6Sd38Fy+vGgwV2Q=)
7: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: 1HP1754dk+5RSjaQvu6ezyGMKjRnbLeUT9+IOmEICYw=)
8: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: MTYW3WZ5bmFwcXuZyuU6mJSaDv2kg390mgtMrX2qGao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3109 (0xc25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Validity
Not Before: Jul 22 19:14:35 2026 GMT
Not After : Jul 29 19:14:35 2026 GMT
Subject: CN=6a61169b-6444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:16:fa:fc:11:22:7e:f5:81:e9:a7:b0:5a:
80:b1:42:36:fb:77:d2:10:48:95:a3:9c:80:27:80:
ea:82:40:cc:e0:bf:3e:a3:c6:f1:09:41:30:ef:c6:
14:a2:b7:07:82:2f:e4:7f:97:10:cf:16:ae:79:fe:
1f:c2:6d:b5:b2:89:6d:91:11:1f:5b:86:d0:8e:c1:
27:23:aa:d3:7a:3a:03:a4:20:58:3c:64:33:51:b7:
9b:7c:91:6b:4d:55:ea:6a:a5:6b:0f:31:aa:62:95:
2e:8e:85:ed:dd:8e:7d:0e:e2:97:b2:43:19:3c:eb:
81:41:b3:1d:70:25:91:4e:38:00:84:9d:ea:12:3d:
39:ad:87:c8:f1:64:5b:b1:ec:46:07:ef:c5:be:41:
cf:8c:25:a4:2b:29:ed:74:03:4c:1c:51:32:42:23:
d9:1b:67:dc:82:2d:d8:22:df:9f:2f:8c:4a:89:55:
aa:42:5f:39:8a:fd:1d:9a:06:0f:f3:0e:a5:80:a8:
4a:3d:e8:5b:b4:0d:8f:04:d3:d7:11:a3:de:81:28:
34:89:f6:04:3a:a5:cd:4c:51:0e:59:10:2e:a6:25:
51:23:fc:31:14:72:07:f2:9a:c6:25:4f:8d:a5:d5:
2b:34:9e:2d:e8:d3:cb:8b:da:96:e7:fc:5f:1e:46:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:D2:CC:76:32:C2:80:35:42:C0:9B:2E:E0:B8:98:19:EB:66:B1
X509v3 Authority Key Identifier:
keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:fc:d1:8a:67:1c:b0:9a:e5:e5:5c:ce:ad:fb:2a:01:6c:2f:
21:e0:b6:7b:92:18:ae:fb:fe:e5:60:8c:d5:38:55:fa:30:10:
30:a3:2b:8f:63:ff:92:3f:6f:fb:71:02:dd:1a:ee:ab:0c:e3:
05:7e:46:1f:6a:b2:1e:2e:6f:e4:5f:d1:93:0b:6d:32:08:ad:
76:f7:67:73:ec:fa:5a:21:a0:e8:e2:1d:d9:13:c2:8c:7e:4d:
33:9c:63:4d:ff:8c:5c:7b:18:18:19:b8:c5:64:ee:fc:3f:5a:
67:32:30:bb:da:fd:a0:93:55:8d:ef:8d:b5:9f:43:e7:d6:a4:
05:7a:77:58:3d:bb:06:4c:0c:9b:89:20:6e:76:c8:1f:d0:54:
bd:f3:e6:8f:51:a5:bb:5f:7d:84:9b:ba:1b:71:fa:8e:56:23:
38:40:3b:fd:b3:2d:71:0d:fc:94:d6:19:60:86:0d:a4:d9:c4:
1b:64:c2:dd:a6:31:44:ef:92:41:2d:2d:f1:99:1d:e9:1f:fa:
a7:df:6b:f9:3f:17:cd:46:dc:7e:fe:f8:fd:8a:ff:ec:95:46:
10:7e:96:fd:f4:f8:2b:95:ce:95:99:37:e4:d9:35:0c:46:8a:
68:1d:32:3a:ce:08:ae:6e:cd:b2:d6:0c:34:01:67:a6:6e:e8:
68:26:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:51:29 2026 by rpki-client