
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File: lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier: oq66Nyy772afcQjpBUi7goDmjRhiqLQs2Chpbp70Smc=
Subject key identifier: 80:5F:3B:D1:B8:FF:41:B9:E9:91:3B:0E:D5:D6:4A:37:0A:08:43:6F
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer: /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number: 045B
Signing time: Thu 23 Jul 2026 02:41:43 +0000
Manifest this update: Thu 23 Jul 2026 02:41:43 +0000
Manifest next update: Thu 30 Jul 2026 02:41:43 +0000
Files and hashes: 1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: o4y2PP2ueP7YMHF14rqwCJzuFJZFroun2AaTnfEUB+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Validity
Not Before: Jul 23 02:41:43 2026 GMT
Not After : Jul 30 02:41:43 2026 GMT
Subject: CN=6a617f67-9702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:ac:54:10:8b:bf:0d:ce:c7:29:b0:48:90:
df:06:bb:66:78:40:77:ed:35:78:2b:b0:54:3f:e5:
20:aa:21:df:4a:08:c2:7a:f1:45:ff:f9:4e:93:2c:
cb:9b:e7:d0:87:a7:eb:38:4f:e2:c7:07:ae:3a:88:
03:bd:fc:0b:e2:ba:d8:52:86:d8:78:13:b5:d7:fb:
46:02:28:02:df:b6:b7:b5:bd:31:0f:e5:5a:11:25:
1f:d2:ca:98:39:66:d7:71:e2:d0:ff:55:3a:39:65:
8b:a5:d1:d8:84:ac:3d:44:fa:f5:b4:46:45:fe:c0:
db:df:97:26:cc:24:ba:1f:42:7b:19:e7:89:f7:6f:
63:0d:f4:54:a3:a4:6f:ed:db:4a:3d:6d:92:31:91:
a2:b7:5d:ce:0d:51:d1:f9:b2:0e:e3:33:49:b3:fd:
40:f5:2f:a2:85:80:cb:89:99:50:72:6f:27:45:2f:
e4:d0:d8:6b:ac:93:19:88:bc:79:8d:ae:5d:d1:88:
32:96:41:02:d6:ec:83:11:ab:9d:1f:11:45:f8:a0:
17:14:e5:d7:dc:71:25:77:8c:3d:dc:d8:c2:48:a8:
ac:53:40:3e:65:97:a0:60:55:28:8a:8f:80:12:5e:
d7:f1:3a:e1:e8:af:bf:2a:09:32:3b:5a:a6:b8:db:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5F:3B:D1:B8:FF:41:B9:E9:91:3B:0E:D5:D6:4A:37:0A:08:43:6F
X509v3 Authority Key Identifier:
keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:96:49:22:71:ba:bb:da:e0:b2:d7:14:6e:83:7b:68:9a:33:
27:5c:88:21:55:b5:ca:a8:f2:bd:c1:aa:a5:9f:9b:c5:3d:47:
d1:c5:43:12:9e:b6:fd:0e:55:4d:5d:cd:b9:ed:40:df:09:cc:
d8:23:35:a3:67:e3:a3:6a:38:db:ed:f5:10:c0:a3:86:d4:1f:
e4:ca:15:f7:8e:7f:92:0f:7e:97:9f:69:d8:01:8f:0b:c4:fa:
80:1d:c5:fa:20:82:64:a5:87:8a:0b:2f:e9:5a:5d:b0:53:b1:
fc:8b:41:f1:08:70:cf:86:03:1d:0f:7d:de:b5:7b:b3:d5:b0:
b6:0c:e3:1c:38:d6:fc:31:d4:b3:74:82:b7:5f:e7:69:08:69:
db:eb:24:9c:e9:56:92:66:9b:1e:6c:fd:9c:21:df:95:6d:83:
42:32:0a:a3:88:fc:52:8c:02:48:11:90:f1:f4:71:7d:e8:90:
79:c9:05:03:c6:71:ce:d9:de:bb:bf:d1:ee:b8:f5:7e:64:eb:
39:76:a9:88:63:b4:58:95:bb:27:a9:31:da:86:8b:32:d6:94:
9e:fe:33:3f:c7:4c:14:25:ae:92:e7:ff:a3:1c:40:c7:1c:00:
4e:a4:0b:08:85:03:36:ae:d4:44:ad:7e:61:37:63:69:48:11:
10:ec:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:23 2026 by rpki-client