
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft
File: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft (raw, json)
Hash identifier: F9ef9+aboGd0+nWRvBZL+CXwkOqgpyGyVyJEB3v4mwk=
Subject key identifier: BF:79:21:82:09:93:19:4A:21:FB:CF:B8:DF:85:BE:7E:96:0A:E2:74
Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2
Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft
Manifest number: 01FF
Signing time: Fri 25 Sep 2026 03:13:35 +0000
Manifest this update: Fri 25 Sep 2026 03:13:35 +0000
Manifest next update: Fri 02 Oct 2026 03:13:35 +0000
Files and hashes: 1: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl (hash: rAH/yep/LSVemfDeHTFB0t3F7Lvk+ZAv6LykxV5T40E=)
2: F41E4608AD1511EE8FBA3458C4F9AE02.roa (hash: lKTLlH2NdmZabiSB46vthmuT0FwAQJtHjJmk7xS2S70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl
rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF94F, serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2
Validity
Not Before: Sep 25 03:13:35 2026 GMT
Not After : Oct 2 03:13:35 2026 GMT
Subject: CN=6ab5e6df-4b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:65:de:ab:4a:26:ea:fa:d6:18:de:95:fe:
f1:9a:f5:a4:0d:2d:10:5f:bd:68:3c:28:24:f8:cd:
ae:09:44:0a:00:29:48:63:9e:6a:c4:53:33:eb:a6:
78:56:9d:3b:d1:9e:72:f5:c9:a6:a7:c4:fb:63:c8:
cc:ff:b1:fb:a1:a3:f0:93:56:38:f5:27:f0:3e:71:
a8:cc:13:3a:11:17:83:5d:90:e3:ab:89:de:6a:3f:
08:46:7d:ac:b3:45:c9:20:82:cb:6f:57:c5:5e:0d:
fd:f4:cd:50:cf:0d:93:84:1e:22:37:f9:94:e9:58:
f5:a5:b2:80:ce:4d:03:9d:22:1d:9a:d4:b9:bd:8b:
00:53:58:8e:91:f4:3c:10:b2:4b:a5:29:a1:85:1f:
ef:76:8f:31:97:a2:88:97:5f:c7:e8:ca:56:91:30:
86:b5:1f:8d:41:b2:ff:68:98:20:6b:b4:8c:fd:1d:
d0:a3:17:a0:fd:64:3d:40:98:26:ca:fb:df:56:0b:
b6:39:5d:4d:9f:1b:d1:da:97:c9:dd:79:0d:c8:74:
86:99:08:f9:aa:c0:d7:0c:a5:c1:f7:e6:6b:2b:be:
ff:36:74:7d:f2:c1:da:02:56:9e:c1:52:64:e7:19:
b3:ca:b1:0c:f0:57:31:b8:79:08:d4:a4:f6:ed:ed:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:79:21:82:09:93:19:4A:21:FB:CF:B8:DF:85:BE:7E:96:0A:E2:74
X509v3 Authority Key Identifier:
keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:84:6c:f6:4b:19:36:a6:f5:e3:bd:21:f0:78:fb:2a:3f:f8:
ab:70:5d:a6:f6:f7:3b:b8:04:88:bd:19:52:9d:c9:e1:32:8a:
42:7e:07:a2:20:b4:7b:a1:eb:25:a8:83:cc:6f:8a:9b:17:f0:
bc:62:f1:7a:24:da:c0:79:fd:d9:f7:85:32:34:c0:a8:5c:10:
a0:88:64:a3:fe:53:37:ae:2a:21:a5:80:e9:41:3b:61:a4:5e:
61:e2:35:c4:81:9a:eb:53:62:25:85:99:6e:71:be:93:1b:3f:
23:40:e0:52:ec:26:72:09:3b:1d:db:eb:cf:f0:49:46:0c:ac:
3b:a1:f2:6b:78:7a:cf:58:57:1e:19:b2:97:fc:6b:95:9c:b1:
6b:cf:11:f2:ee:e1:dd:ae:64:67:03:be:79:86:de:79:04:b7:
a0:c6:e5:1e:2d:2e:87:13:4e:d5:0f:43:6a:0c:af:b5:d5:48:
c0:43:71:e6:be:85:6d:76:b2:2e:f6:c1:a9:27:8f:7e:34:31:
90:bf:cf:cd:19:5d:1b:27:42:a4:5d:0c:a1:4a:3e:1a:3f:b4:
ea:51:3f:5e:e9:5f:30:20:af:41:0b:71:94:6a:68:2f:47:91:
9f:a4:50:e4:01:e4:08:04:d0:a7:28:e5:46:76:95:15:a9:03:
ba:4b:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:45:03 2026 by rpki-client