
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier: NzNM9zGGDAEzv1Wjflk6Qk4Wphl/21Swm1zsEpNkpmk=
Subject key identifier: 9D:2E:E2:36:12:F6:F4:25:0C:35:3D:59:16:61:54:E5:DE:11:21:8E
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number: 014B
Signing time: Thu 23 Jul 2026 06:55:38 +0000
Manifest this update: Thu 23 Jul 2026 06:55:37 +0000
Manifest next update: Thu 30 Jul 2026 06:55:37 +0000
Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: jog9j1fpxSDkT0YBJzdFeS4ZwcpXEBEIR5ExlIizUA0=)
2: 496B943085B811F1904E05A160A30FBC.roa (hash: kzKLI8ZxIk66mC3lTcah6XxCKgGcbN+/Y9xbXXYxul4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Validity
Not Before: Jul 23 06:55:37 2026 GMT
Not After : Jul 30 06:55:37 2026 GMT
Subject: CN=6a61baea-e786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:1d:82:3e:64:a6:28:90:2b:f3:c7:76:7d:
98:78:d5:f8:93:75:25:ce:95:59:e9:b7:38:0f:eb:
51:4d:1e:86:53:41:89:55:51:90:ba:83:57:8c:f3:
e7:f5:7e:cf:d9:9c:71:d2:9d:7a:29:b3:53:e4:2e:
08:53:7c:8b:57:01:bd:26:26:eb:a4:93:20:de:fa:
73:68:7b:f5:a2:5f:dd:31:0e:4e:e6:a1:45:16:c1:
8c:20:c0:ee:02:46:59:e8:37:46:5d:5f:a3:42:77:
9a:18:77:83:36:d1:db:99:85:ad:af:f7:80:5a:9d:
dd:be:9b:88:2a:81:62:49:d3:ec:7e:00:3b:ce:c4:
f1:95:c3:7e:cf:8e:7b:85:a1:14:d6:e2:a1:f6:1c:
d2:ca:58:9c:ac:54:0b:97:1a:5f:59:69:78:52:71:
de:3f:2e:55:7a:85:3f:d6:b4:fe:b6:70:7f:33:3d:
33:5e:3a:67:a3:8d:b7:47:59:51:d3:34:55:6b:c6:
4f:ca:46:e4:3b:45:a4:9b:3d:c2:b2:2b:c6:8c:c5:
70:0f:e2:28:ad:3c:a4:65:51:f3:e7:97:2b:dc:e8:
98:b2:c7:eb:19:79:38:2d:70:e6:04:59:f7:5d:23:
70:ae:99:b2:23:42:c9:a2:df:6d:ee:b2:8c:1c:87:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2E:E2:36:12:F6:F4:25:0C:35:3D:59:16:61:54:E5:DE:11:21:8E
X509v3 Authority Key Identifier:
keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e3:7c:90:dc:1b:15:83:56:e2:b7:b3:31:a2:bd:48:21:5f:
27:fd:e7:6c:35:61:7f:7a:2f:78:e8:ab:1a:7f:24:7d:e4:41:
e7:a3:6b:75:18:2c:a0:c4:a1:ec:8b:86:fa:10:a2:29:99:6b:
6e:d9:3a:81:f6:21:f3:5a:ef:4a:96:e3:ea:ef:f5:5c:b5:31:
25:45:b5:56:70:af:ff:b7:99:ae:81:30:2a:41:d0:1e:47:24:
d7:55:7f:d1:19:1e:51:af:92:3e:16:69:3a:24:04:79:a1:4a:
20:53:25:f0:62:1f:29:2d:df:54:05:17:4d:58:33:8b:16:20:
e1:0e:5d:08:9e:a6:c8:ef:4f:08:8c:89:d1:9d:5e:49:5f:00:
91:06:56:7a:50:8d:c4:15:7d:ca:48:1f:8d:0a:ae:1a:b8:a9:
e2:d8:e6:88:a4:67:d7:3a:e3:0d:40:4a:84:ef:bc:b0:2e:ac:
77:00:42:49:48:6d:98:65:e0:b0:3c:5e:4c:12:06:d0:57:67:
b7:78:31:ac:5f:f3:eb:34:94:df:ef:4e:62:93:09:ec:50:23:
df:52:5b:87:65:7e:19:ae:8e:49:d7:32:99:eb:60:5a:d0:f4:
b8:6f:2d:68:20:5a:0c:5c:ba:19:5f:88:8a:bf:00:25:71:97:
41:47:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:55 2026 by rpki-client