
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
File: luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json)
Hash identifier: ETzK+i1h1kprAFNgddz8mSy1hRaz/3M4vvc0he174ec=
Subject key identifier: 35:06:55:43:8F:BC:8B:38:44:4E:C1:FD:EC:94:3D:D0:A7:85:AF:6F
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Certificate issuer: /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial: 074C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
Manifest number: 073F
Signing time: Mon 20 Jul 2026 22:28:46 +0000
Manifest this update: Mon 20 Jul 2026 22:28:46 +0000
Manifest next update: Mon 27 Jul 2026 22:28:46 +0000
Files and hashes: 1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: NbTcA5sMV5YPk4S8qP5PvMqNM6AyTWUMNFUr82gAnZ4=)
2: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: 1TlAtJPOio9UQi08UbIj729Wbe4QKyxGpD+tkiHOZtI=)
3: 69FB4E726DC511F08948D952C4F9AE02.roa (hash: di5EPG08vSgsTvQVKmlP9cypSsgnEAsjgJZhJNMQn10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868 (0x74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Validity
Not Before: Jul 20 22:28:46 2026 GMT
Not After : Jul 27 22:28:46 2026 GMT
Subject: CN=6a5ea11e-45ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:94:d9:71:9e:fa:4f:80:34:5f:9c:0c:02:
3c:90:f8:e8:f0:0c:3c:a2:6a:97:90:0d:8b:27:5e:
37:69:17:1c:ad:83:9d:7b:df:80:07:fc:87:9a:56:
b5:82:ee:cf:f6:2d:27:dc:5a:4f:09:b6:fd:ba:73:
9c:69:4f:eb:73:fd:c5:28:f6:ca:8a:05:43:64:d8:
d6:43:2e:1c:4b:78:6f:c8:7b:4b:27:e9:88:cd:cb:
c3:4c:c1:1e:fd:6a:99:82:7e:ae:a2:95:0d:c8:cf:
79:f5:ae:f2:35:c6:fc:b1:20:54:b2:d4:fe:d7:a0:
61:de:83:f4:f7:06:cc:89:03:71:d2:e5:87:12:34:
bc:b8:fa:10:c9:2c:6f:47:0a:14:10:56:1e:02:07:
6f:7c:08:07:7a:d2:67:88:5c:cb:e4:9c:2d:e1:bf:
8d:9e:f7:21:54:76:5a:99:95:f8:08:24:fa:33:6a:
21:60:de:12:c7:96:6c:80:e4:b9:9c:a5:96:21:ae:
ff:94:d9:60:ce:cf:4b:11:54:72:8f:25:af:f4:0e:
05:f1:19:ac:c0:7e:46:a1:5b:b8:2c:86:3f:98:b7:
4e:5c:69:5e:ed:8a:a3:2c:85:ee:ee:62:b9:e5:08:
88:38:0e:2d:46:1a:74:80:d8:2c:19:e4:70:10:b5:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:55:43:8F:BC:8B:38:44:4E:C1:FD:EC:94:3D:D0:A7:85:AF:6F
X509v3 Authority Key Identifier:
keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:93:4a:8c:a9:f6:59:eb:f1:83:d2:c1:84:c1:ff:a9:18:bd:
bc:1a:cb:5b:83:a8:de:5b:13:2e:b9:e2:99:47:26:aa:b0:28:
a3:d9:f1:0e:08:e6:2e:3e:76:47:91:a6:62:50:00:a7:4f:9e:
05:96:69:1d:d5:ec:9a:2b:97:5c:33:ca:56:7e:f7:02:17:a6:
43:2d:4d:96:4d:65:b4:02:53:91:df:13:b2:cd:c6:c0:ac:4e:
3c:63:12:5f:94:6a:c9:e0:c4:e5:cc:54:0e:36:14:eb:14:58:
46:f8:71:8f:02:16:6e:f5:f6:ec:bc:7f:8a:cd:8e:8e:85:54:
bf:ef:e2:7e:5b:3e:d4:99:49:47:fa:54:ab:45:c0:f5:fc:3c:
a2:4d:0a:b9:90:0a:95:62:62:67:b2:25:2e:3c:f2:43:cd:07:
c4:81:b8:79:d0:81:c1:0c:53:04:00:f4:10:3b:e0:09:0d:75:
ae:b1:47:97:8d:86:ff:7d:e1:78:ac:7f:60:d0:f5:8b:d6:5a:
2f:63:8a:63:d9:ca:f6:4f:24:49:c1:c3:86:d2:92:aa:c7:44:
a2:63:7a:d0:44:f7:2f:ab:9d:f9:4e:15:d2:57:ee:7d:7a:13:
35:4f:ac:3d:f1:d8:94:19:c9:50:9c:ec:a3:7f:aa:b3:8c:77:
b3:77:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 13:45:06 2026 by rpki-client