
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
File: L6lxpjvCY6602uvyDC_HEYPKZI8.mft (raw, json)
Hash identifier: G0tWBHVyPysLRcM1hSMtwXhNknzPnKC8NCoe3jhzN7U=
Subject key identifier: 50:C5:12:F1:CC:E4:21:30:79:12:5E:F4:E7:D1:12:43:0C:CD:07:68
Authority key identifier: 2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F
Certificate issuer: /CN=A91F5DFB/serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
Manifest number: 7E
Signing time: Wed 23 Sep 2026 07:31:15 +0000
Manifest this update: Wed 23 Sep 2026 07:31:15 +0000
Manifest next update: Wed 30 Sep 2026 07:31:15 +0000
Files and hashes: 1: L6lxpjvCY6602uvyDC_HEYPKZI8.crl (hash: beej1kFGWcPQQZvVf6hO0UeQINqEInQ6Jbxkeezkgk0=)
2: 3C5B5EF4FDC011F0B8AD40E9676F56BC.roa (hash: z+YkDVCxHIqN3QUlYGYvRtLpkeGO91vbNLFc9h3UONw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl
rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5DFB, serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
Validity
Not Before: Sep 23 07:31:15 2026 GMT
Not After : Sep 30 07:31:15 2026 GMT
Subject: CN=6ab38043-0c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ad:e2:9b:03:38:1e:77:14:64:5f:f6:b9:66:
23:09:e3:21:ef:bf:db:0a:f6:b8:25:06:a3:f5:30:
e1:62:c2:91:ee:2b:65:d9:6b:b0:f4:63:57:36:1c:
b2:5b:de:34:a4:36:91:97:3f:25:4b:3e:63:85:96:
5a:e7:73:0b:f8:49:f5:0b:d1:22:d2:b4:bd:44:59:
62:13:2d:47:d8:64:3e:7d:45:16:ae:e2:37:de:15:
bf:e4:c8:64:6e:ee:92:3b:9b:96:2f:98:5e:68:64:
24:2d:37:a8:75:2b:e6:54:34:ae:9b:68:98:c7:cc:
97:96:1b:7d:ae:64:ee:3c:be:be:aa:d1:03:fb:7c:
48:c8:ef:41:c6:4c:8b:96:19:58:c9:85:61:f1:fd:
cd:51:54:11:49:ac:35:ed:a8:65:90:03:39:ed:8b:
d4:ba:b0:85:84:fd:f7:30:7b:b4:f6:43:5b:52:49:
e9:6a:e6:b5:61:e2:1c:b5:8a:25:2a:50:82:35:33:
d7:a1:a7:26:14:67:fa:0a:99:45:e5:09:64:4d:4e:
b3:ec:67:61:e8:3f:83:48:42:e5:e6:08:ff:7c:bd:
ea:2a:02:4f:9f:b3:0f:9e:6e:13:c6:51:a8:18:f6:
e7:4f:64:96:37:f4:33:5e:8d:20:3d:21:b5:bb:11:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:12:F1:CC:E4:21:30:79:12:5E:F4:E7:D1:12:43:0C:CD:07:68
X509v3 Authority Key Identifier:
keyid:2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3c:00:73:ab:9a:68:4e:fb:c7:da:48:92:0a:ce:c5:4d:6d:
0f:f9:4f:fc:3d:96:39:e5:bb:9d:d7:af:f2:b3:14:39:61:64:
b5:ef:53:4d:58:32:44:38:2e:3f:88:59:b7:15:8d:0f:e4:c7:
47:9b:99:c9:f2:cd:9c:02:17:a5:64:e2:1c:10:e3:d1:45:4d:
70:0a:32:9b:8d:01:1b:c1:34:5f:d5:77:f7:66:52:5c:18:3c:
8a:1f:ca:e8:58:55:cd:7f:7c:5b:51:eb:fa:93:17:40:0d:cb:
c4:6e:21:a3:06:ba:ed:68:4e:35:fe:87:b2:ff:f5:ec:16:0f:
97:c7:7b:a5:89:6b:7e:3a:f4:dd:9f:8d:1f:47:bc:c3:d7:8b:
5c:83:ff:d2:8e:d3:ac:a6:8c:fc:ed:48:07:ed:9a:3a:23:44:
ff:ce:c9:e2:c3:05:65:96:ec:3f:0c:ba:82:b1:49:53:51:59:
45:1c:d1:96:67:47:ca:0d:0e:41:40:07:a5:4e:80:9f:c4:60:
64:a5:b1:fd:91:ba:8e:11:05:c1:49:43:d6:1a:70:2f:84:72:
18:82:02:d6:df:a0:f0:3d:8e:1e:67:ae:95:94:3a:e3:20:92:
92:86:af:b5:46:6d:62:12:99:ca:a1:c5:05:dd:f7:be:83:bb:
ff:61:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:46:23 2026 by rpki-client