
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
File: limscQ0-IdWZGSjVmk22VBGpa_8.mft (raw, json)
Hash identifier: rPBkxphT+qxKQx25OA6eDu67/KBUkcfRAvqiXvN1VF0=
Subject key identifier: 5F:F0:1D:B1:13:3D:6B:24:2E:DE:EA:C3:36:3E:90:BA:63:CF:1E:41
Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF
Certificate issuer: /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF
Certificate serial: 0D36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
Manifest number: 0D2A
Signing time: Tue 22 Sep 2026 18:08:03 +0000
Manifest this update: Tue 22 Sep 2026 18:08:02 +0000
Manifest next update: Tue 29 Sep 2026 18:08:02 +0000
Files and hashes: 1: limscQ0-IdWZGSjVmk22VBGpa_8.crl (hash: 44f7ljN1cupEaiqfCBgIq50J35UsDk3gqVxo0sy89Gc=)
2: 9CDAADC2091E11EAB375615BC4F9AE02.roa (hash: nbleFFcKgxmn1F4KARea2uckGFoVmcgHkC7uA6X0V9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl
rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3382 (0xd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE6E8, serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF
Validity
Not Before: Sep 22 18:08:02 2026 GMT
Not After : Sep 29 18:08:02 2026 GMT
Subject: CN=6ab2c402-7a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:28:e5:bd:54:c3:cc:66:45:66:35:c5:2f:
8e:09:1a:73:7e:ce:9b:66:d6:35:c7:95:76:c3:a5:
3a:8c:9e:a1:a5:29:01:26:cd:20:66:9d:51:b3:ca:
a6:bd:d2:7b:77:58:b8:96:9a:10:3f:9d:a8:02:cc:
4d:87:50:73:38:2d:5d:91:e9:ab:22:2c:b6:2b:14:
1f:d0:42:96:0d:0c:21:ec:84:ec:52:95:00:e4:8d:
67:f1:94:0b:88:c7:9a:4b:43:da:e2:ed:8a:8d:47:
3a:d3:31:db:83:c0:dc:29:13:98:a9:7d:a2:49:8b:
6b:44:6f:b2:a6:92:15:73:c0:b6:c3:f7:59:ff:83:
b7:00:08:39:7e:83:e6:51:da:39:e7:85:e7:1e:0e:
29:14:a5:79:0e:7a:72:9c:67:d7:c6:75:b3:17:2f:
66:5a:9b:7b:d5:65:1b:d8:77:8e:72:92:c7:a5:d8:
a0:f7:1f:32:a4:b0:27:13:db:a8:b3:61:7c:3b:b5:
74:ea:f7:c2:9e:9a:ab:5d:44:1b:da:94:f3:b9:a1:
67:20:2e:68:e4:62:2e:a8:a2:64:62:3f:5f:74:77:
92:8b:a0:d5:15:cc:4f:31:0b:9b:e8:df:df:2f:a1:
8d:22:9c:2e:f1:2a:87:3f:90:ad:e2:fe:a9:97:92:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F0:1D:B1:13:3D:6B:24:2E:DE:EA:C3:36:3E:90:BA:63:CF:1E:41
X509v3 Authority Key Identifier:
keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:73:a5:72:9f:63:44:37:a6:55:0a:42:68:83:ac:91:6c:05:
01:ab:ec:f0:77:c4:d9:ca:e3:9b:d5:a3:d2:4f:fe:9a:b0:20:
11:c0:40:fa:e0:d1:e9:1c:8b:a8:bb:3e:24:f2:2a:21:9d:12:
8f:8f:75:db:b4:93:cf:6d:e7:5a:f2:fb:3a:95:9f:90:0f:75:
f3:d3:70:ca:6f:13:cc:da:d5:f7:99:fa:c0:8d:3c:d2:83:1d:
0e:bd:91:a3:a2:f5:e2:37:c1:61:ab:c2:b4:99:48:58:92:50:
f8:a4:65:0c:52:02:91:aa:f7:7c:6a:4f:a5:4d:90:09:1f:9c:
47:b2:de:f5:dc:f2:43:9a:08:73:70:60:f9:e3:cd:40:87:0f:
7c:dc:cd:db:5f:87:b8:45:e9:94:35:65:eb:26:1c:57:16:c0:
03:f9:4c:d8:b3:3d:05:ab:92:d9:2a:5e:2e:0c:f9:65:76:bb:
63:d5:15:ef:67:35:c2:3f:9d:f6:15:36:2a:7e:36:29:cd:95:
ff:52:0c:19:6a:3f:5f:5c:72:06:05:24:17:1a:e8:e9:d5:ed:
4f:af:d3:e8:36:af:37:5c:5b:c3:f4:bf:57:5a:57:fa:72:d8:
ee:2d:60:cc:bd:c7:3a:49:b1:77:cb:12:12:c2:83:93:81:89:
75:f0:fb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:53:39 2026 by rpki-client