
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File: lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier: 3TUpvXgkjY5MzxA1ngOUpArM0fppNp9Nl2OzU4diwsc=
Subject key identifier: E9:A7:51:E8:DF:62:BF:7D:21:82:68:B9:1A:42:59:B5:0B:1D:0F:84
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer: /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial: 02CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number: 04A5
Signing time: Sun 27 Sep 2026 01:36:43 +0000
Manifest this update: Sun 27 Sep 2026 01:36:42 +0000
Manifest next update: Sun 04 Oct 2026 01:36:42 +0000
Files and hashes: 1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: 5rBgGFqAvh3SZ2CAjw1gMjMTXmHFjBrqDYaLQm5d6CI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 01:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Validity
Not Before: Sep 27 01:36:42 2026 GMT
Not After : Oct 4 01:36:42 2026 GMT
Subject: CN=6ab8732b-8d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:95:18:65:8a:fc:11:dc:08:e9:ec:97:f0:
b5:2d:ae:cf:97:a7:e6:bb:d9:04:14:0c:da:e4:77:
44:b8:21:fb:36:24:96:02:b3:b3:b0:e7:35:f5:52:
5e:95:11:68:d7:a1:8a:55:38:bd:08:d9:8a:2d:86:
c3:d0:70:19:a7:7c:2e:32:55:eb:b6:ae:9a:0d:a7:
52:98:cc:53:85:90:e6:44:5b:c6:f7:1b:ac:09:7a:
4f:d0:a8:e9:92:68:e0:46:a3:10:29:85:d1:c0:c0:
bf:a5:b2:3f:64:1e:e5:65:3b:c3:92:95:21:05:74:
d3:1e:15:29:41:fd:ca:31:08:7d:23:c5:5a:df:b9:
c8:fa:d6:17:17:bb:34:44:39:9c:f7:ce:d7:ea:0d:
94:9f:b6:e4:a9:52:24:08:aa:59:da:b4:7f:6d:74:
0b:11:4e:df:38:f5:c9:cf:f5:64:a0:71:7d:77:f3:
8f:33:66:1a:cb:65:d7:fb:7d:2e:63:e1:90:6a:d6:
9e:15:d1:5b:2e:6b:69:c1:59:cd:f2:41:fe:22:25:
d0:23:e0:13:ae:eb:2f:57:ec:90:66:3b:21:b4:58:
30:ad:9e:c2:7c:90:68:54:28:2e:25:e7:52:cc:ea:
ea:e2:fa:45:d7:d9:26:4c:3c:1f:6a:a0:a9:a3:ee:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:51:E8:DF:62:BF:7D:21:82:68:B9:1A:42:59:B5:0B:1D:0F:84
X509v3 Authority Key Identifier:
keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:c4:1d:7c:6a:dc:35:48:d8:cd:ea:53:cc:1b:25:2e:b8:32:
94:f6:10:1d:77:27:af:8a:f2:7a:d4:f6:6a:2f:e3:09:21:fd:
78:68:76:65:ee:40:99:a7:e6:c4:1c:a6:fa:e8:2b:74:e1:25:
c3:02:5d:48:9c:6f:01:f7:cd:cb:6d:82:6c:7a:a1:04:b0:ee:
69:77:12:98:dd:a5:d4:e3:b2:2a:ce:23:a2:72:a6:74:1c:a8:
3d:10:56:29:d2:14:25:f6:b1:11:b1:d1:56:16:f3:d7:d6:95:
8b:84:4d:9e:f2:05:06:93:e5:8d:33:75:3c:1b:28:19:cb:d6:
c9:fc:af:c8:61:2d:2d:27:a1:dc:f2:d0:af:bf:bd:42:23:58:
27:81:00:07:98:35:23:dd:11:9d:2c:d6:c7:32:05:9d:c9:ab:
f6:84:44:27:65:8c:31:e2:50:51:3e:c8:3d:ce:03:f5:18:95:
5d:49:13:c3:32:13:0c:ff:14:ca:c0:bd:74:78:24:c3:ce:ff:
d0:82:fe:6a:50:21:5b:fc:c8:9a:09:36:e3:51:a9:76:fc:1b:
46:8c:66:03:f3:22:9d:9d:96:ab:dc:89:e4:13:b7:5d:ea:12:
9f:b9:61:11:f0:f3:18:f4:92:00:69:9c:ef:39:14:be:fa:73:
68:2e:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:21:06 2026 by rpki-client