
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File: liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier: WVXUiGauL+LAL4MccYyOO5bf3macDknn7F74CqjmnXU=
Subject key identifier: C1:20:73:EE:6D:22:6B:C1:B0:F9:F6:54:8D:DB:DC:29:6E:36:10:64
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial: 02C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number: 02A9
Signing time: Wed 23 Sep 2026 01:27:51 +0000
Manifest this update: Wed 23 Sep 2026 01:27:51 +0000
Manifest next update: Wed 30 Sep 2026 01:27:51 +0000
Files and hashes: 1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: Ra3DJ+nMctcnEvQHJOZgaHzulT4Q7F023pJKQHefc0c=)
2: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: nLmRRkvPmyWIllTJe9Zouh2k0tm12CDZu9M1JMdFVeo=)
3: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: XCU9CEh5JfWyfgXD9tBMgbhcrtxpGC1QtyGffV0ujNk=)
4: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: olArFcM1PUtHpMUsUbFSqGqQtjy1wHpvrbRn0NFqaZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Validity
Not Before: Sep 23 01:27:51 2026 GMT
Not After : Sep 30 01:27:51 2026 GMT
Subject: CN=6ab32b17-b082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:4a:5c:e0:82:09:10:1e:79:28:87:3c:1f:
fd:75:7e:15:f4:30:22:80:3f:33:6a:6c:36:3d:4c:
3c:b8:82:3f:28:be:7d:1b:04:5e:c0:2e:18:75:f5:
0f:81:52:5b:e9:a1:d6:e0:83:ce:df:bc:83:05:30:
60:e0:b0:80:16:b4:16:0b:33:d3:42:64:5d:b2:c3:
e9:77:1e:40:9e:3d:25:98:76:10:83:17:a1:bd:3f:
73:fb:58:f6:5a:be:36:98:e2:e7:93:cd:d6:6b:9f:
02:96:78:8b:0d:68:1b:b5:90:3b:f3:06:00:ca:4c:
76:64:8d:12:96:3a:7b:45:5b:4a:a3:ca:80:9f:a5:
b9:c8:d6:8c:8f:56:21:3e:71:ad:cb:96:aa:14:4a:
36:e0:7f:60:f4:8a:02:f4:eb:9b:31:18:7f:3e:89:
64:ae:c2:33:be:0a:04:e4:4c:4b:ea:d8:41:c1:3a:
6f:62:e2:0a:7a:01:0a:e4:75:08:0b:b3:72:10:b2:
dd:b7:a0:28:43:77:61:b3:a8:4a:dc:32:59:7c:70:
2d:06:96:65:1d:d1:bf:e4:5d:68:7a:fc:b1:0c:c0:
d6:77:a3:95:e0:9c:21:3e:e2:28:04:57:59:49:5e:
61:60:e5:73:f1:c1:de:32:e4:cd:3c:07:47:77:15:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:73:EE:6D:22:6B:C1:B0:F9:F6:54:8D:DB:DC:29:6E:36:10:64
X509v3 Authority Key Identifier:
keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2c:b5:3b:b4:6b:17:5e:a3:0e:6f:cb:9a:99:f4:29:7e:e2:
62:e4:38:33:f7:73:f5:a3:55:b1:29:02:c0:07:2c:32:a7:0a:
6e:22:34:0e:43:4f:0d:57:12:ca:88:fc:70:22:a9:50:a0:30:
3d:5f:10:ac:9d:3f:e6:1c:ed:cc:2d:dd:a3:11:0d:aa:cf:96:
7e:a5:71:2d:39:58:58:bf:47:f1:55:7f:1e:0c:85:77:43:1d:
32:8e:08:2f:0e:04:4d:81:ce:49:ba:c8:55:49:5b:11:93:96:
51:4d:74:2a:71:51:bc:20:2a:83:49:84:ff:ef:be:bd:46:29:
d3:f3:d7:7b:c0:c8:ef:33:42:3b:e2:88:d4:75:75:c3:ef:12:
c1:e9:dd:50:1d:83:99:ed:33:fb:d6:d7:3b:f0:22:92:9d:6d:
0a:17:b5:c4:9f:cb:1d:36:2a:a1:75:6e:8f:f7:a0:9f:54:88:
96:82:34:ca:12:29:00:d0:61:23:fb:9c:9b:a9:fc:60:c6:92:
bc:e3:46:ed:df:8f:93:08:9b:34:15:dd:60:b9:57:8c:b0:b0:
bb:7b:06:69:02:f8:9e:48:83:38:0e:f5:ce:16:39:33:40:63:
61:42:21:58:64:4f:f0:bb:c9:1e:b6:70:5b:85:4c:fe:50:d7:
72:4c:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:49:01 2026 by rpki-client