
$ rpki-client -vvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
File: lUb_2jDoTm_o815o7CVUGDnprQ8.mft (raw, json)
Hash identifier: vrWF2NeFbUsr116SevzuMmUKXHAOkGtg3z3eZUQFecs=
Subject key identifier: 6D:9C:98:D4:FB:C9:B3:B2:08:08:A4:34:C4:E8:1C:04:67:A6:4E:C6
Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F
Certificate issuer: /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
Manifest number: 45
Signing time: Tue 21 Jul 2026 10:26:32 +0000
Manifest this update: Tue 21 Jul 2026 10:26:31 +0000
Manifest next update: Tue 28 Jul 2026 10:26:31 +0000
Files and hashes: 1: lUb_2jDoTm_o815o7CVUGDnprQ8.crl (hash: DBMnEUW8fDB/h76FnZmU1VhjThVDSUHekqUE4tDrNug=)
2: F594A6063FA511F1B714D040BE833773.roa (hash: vpQZtX1yMfD38qzmAFhlXuV41BUehxqTr9ZL+NUr+4c=)
3: 49589EFA2D9F11F1920FEBD19F833773.roa (hash: rB6mncEodXlTCyNlNE9b7egaGZ8DkJX6TOSzNBIB7dQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl
rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
Validity
Not Before: Jul 21 10:26:31 2026 GMT
Not After : Jul 28 10:26:31 2026 GMT
Subject: CN=6a5f4958-4831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:40:e6:2a:10:3c:3c:28:24:af:46:a4:ad:
d1:b9:15:ea:de:25:79:1d:f7:fe:5b:ea:be:8f:de:
fb:a8:10:b8:ea:bd:6f:49:50:9a:96:67:f4:ed:30:
00:13:71:19:4a:07:01:01:72:c8:ba:a4:76:5b:e0:
c5:3d:0d:10:ac:18:a7:3f:48:65:ad:06:08:42:ca:
a5:39:8a:e0:cf:02:e6:5a:35:34:42:38:b7:bc:70:
49:c0:20:dc:c8:16:e2:cc:23:5e:73:b2:d6:bf:49:
20:10:c7:14:27:82:e7:ac:2c:76:9b:98:23:27:fb:
65:66:32:79:f8:01:d7:d0:4a:7c:49:a8:34:f6:f1:
27:fa:08:dd:5a:2f:e2:c0:d7:91:ff:d1:6d:cd:eb:
45:47:72:1e:a1:d8:23:69:11:db:94:02:45:e4:5a:
4e:11:b6:1f:54:13:8e:13:f7:bf:25:84:fd:b1:9e:
7a:7c:00:b0:bb:a9:b4:04:4a:da:7e:12:62:b5:29:
6a:27:04:a2:e7:22:ed:a2:a6:26:1f:6d:a0:68:09:
02:00:20:14:66:6d:36:e7:3d:5a:25:8c:ac:b4:31:
10:0e:86:c5:a6:e5:9d:cb:4e:51:b0:59:90:1c:10:
f1:5c:22:71:0f:05:f9:5a:81:37:70:06:a4:44:be:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9C:98:D4:FB:C9:B3:B2:08:08:A4:34:C4:E8:1C:04:67:A6:4E:C6
X509v3 Authority Key Identifier:
keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:dd:26:23:7c:6f:12:59:5c:69:3a:ab:7a:83:80:9b:30:8e:
68:17:59:7d:46:dc:2c:53:58:1e:67:aa:fa:0e:cd:d9:47:0b:
c6:dd:16:ac:fd:ff:b0:a1:2a:7d:82:27:3d:f6:1f:3f:96:63:
34:b5:ea:c0:68:4a:1d:e6:a4:35:91:df:84:b6:25:d2:a8:a8:
fc:82:4c:89:04:d8:77:02:53:a1:c7:14:f4:8a:0e:48:13:8e:
d6:7a:39:c9:37:ef:75:08:b5:5f:d1:f1:31:1d:a6:b0:b3:07:
1a:fa:41:2a:68:20:c0:aa:ea:e9:a4:8c:20:aa:78:bf:48:c6:
5e:d7:73:58:36:72:9a:4a:ff:11:7c:31:e4:41:ce:53:ce:d3:
16:58:13:46:dc:0e:23:4c:8d:5a:72:e5:74:67:49:c5:b4:03:
41:fb:0f:08:25:21:d4:f1:bf:77:4d:71:54:c4:18:03:e6:47:
11:c7:2a:da:58:01:44:59:41:fc:66:25:62:10:24:99:73:95:
1f:a6:cc:fe:10:97:e8:1d:ac:bb:e6:3c:15:f3:3f:6b:82:26:
a6:23:48:0c:2b:69:2b:42:d9:72:26:18:21:32:81:d8:10:53:
75:8a:17:2e:bb:6b:3f:bd:33:f3:16:4c:43:81:a5:00:b4:97:
ba:88:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:28 2026 by rpki-client