
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json)
Hash identifier: JHtLCkrdKSMWM6VbyzQO8PIMe7oWIHooDHGe9IHA7l8=
Subject key identifier: B3:AB:49:31:28:38:FA:89:82:C2:3E:0C:32:AC:27:D0:30:A9:F2:E9
Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
Manifest number: 48
Signing time: Thu 23 Jul 2026 10:26:18 +0000
Manifest this update: Thu 23 Jul 2026 10:26:17 +0000
Manifest next update: Thu 30 Jul 2026 10:26:17 +0000
Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: yG0UC1KkZIOYzFIeeTqTSKrnePEor6yBj2Z8OKsBg8A=)
2: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: jL1weeYdf5UVgi3H8dQWMroRrXWySaPVDw+CBr3Q+X4=)
3: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: YICsi1o5Z1QCNa3raABk0vbNZqKDNF4/heN9D5mwTtc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl
rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
Validity
Not Before: Jul 23 10:26:17 2026 GMT
Not After : Jul 30 10:26:17 2026 GMT
Subject: CN=6a61ec49-e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:b4:2c:f9:41:f1:df:e7:6a:54:5f:c9:8e:
ce:ff:8b:0d:a7:2d:58:95:2c:2e:9f:25:a4:6e:1a:
dd:a8:7e:24:1d:29:86:3f:72:e7:70:e5:d4:71:e0:
e5:84:ca:66:e2:b8:0a:f3:09:ab:fb:7a:0d:49:d7:
43:dd:8a:6a:21:57:cc:fb:04:b8:21:80:fa:c3:ae:
a1:92:2e:60:46:dd:fc:68:d5:80:bd:b1:41:df:21:
59:1b:a5:86:79:1d:51:5c:ca:69:87:3d:97:02:53:
e9:47:23:34:90:47:86:f3:40:e3:1d:cb:ce:f7:ed:
f6:4a:fa:20:fb:a6:a8:b3:c3:b4:af:29:36:22:75:
d9:2c:8d:ee:c5:73:e1:e6:83:6d:67:0b:b7:eb:9e:
fe:95:de:7e:c9:61:c7:fb:14:ca:47:d2:b4:7f:9e:
03:7f:12:a6:74:8e:9c:84:d6:fe:0a:22:02:13:d5:
e7:b4:1e:31:40:43:24:34:e0:6d:ef:06:7a:9e:d8:
bc:16:4c:b9:3b:86:3e:f9:35:ea:f2:cd:ff:4c:36:
e1:4a:3d:9f:a3:60:f8:66:29:fa:59:26:65:c2:7f:
2c:05:33:a1:f7:2a:f6:29:56:17:a0:db:b7:0e:f3:
40:77:87:a9:07:dc:55:a7:24:31:db:74:15:e0:64:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:49:31:28:38:FA:89:82:C2:3E:0C:32:AC:27:D0:30:A9:F2:E9
X509v3 Authority Key Identifier:
keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:16:2a:0e:6f:63:7c:c9:79:e5:18:38:10:76:31:84:00:83:
15:ad:92:98:b4:31:2e:90:14:ec:4f:74:26:b5:46:d9:87:cb:
73:f6:49:4a:fc:bf:56:ed:58:6b:36:49:bc:dd:16:22:b3:21:
54:0d:0e:ff:85:2e:57:4e:6e:99:89:e8:18:dd:61:3c:c9:a6:
ca:f2:53:d1:82:69:06:53:3f:7e:59:a8:8f:7a:47:f3:2d:63:
87:f8:e1:05:24:f1:3c:eb:7f:03:59:60:7d:31:07:78:51:37:
18:09:f7:38:be:ae:44:50:3d:ca:ef:94:fe:68:4f:7f:c5:01:
ba:19:32:9c:36:b3:a3:b4:8d:2f:8c:21:aa:b8:7b:59:67:cd:
d3:b5:61:09:d4:7e:f8:27:d7:61:7e:a6:47:90:5a:f9:38:17:
ed:b4:54:2a:a9:04:24:c6:6f:c3:a6:de:cf:49:81:f2:64:53:
6f:ed:9b:38:50:2c:5d:73:16:84:2f:11:82:2c:05:c8:6a:90:
c0:10:b5:cf:50:4e:a7:23:9b:f0:ec:22:c4:b8:3e:64:29:c6:
4a:d3:75:44:1d:61:71:1f:cd:5e:10:a6:98:b5:e0:de:ac:55:
fc:7b:72:db:36:14:9f:ec:a7:d2:e1:9c:51:0b:33:21:d4:f2:
74:da:16:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:04 2026 by rpki-client