
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json)
Hash identifier: +3AIkpknp5M2g6TCBfM3ax3Np+isA2WJzi160DVDC3Q=
Subject key identifier: 71:BB:4D:BD:C7:D5:AE:0A:EB:46:09:AA:D9:29:C1:97:FD:97:B8:2F
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial: 0C39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
Manifest number: 0C19
Signing time: Fri 10 Jul 2026 19:05:07 +0000
Manifest this update: Fri 10 Jul 2026 19:05:07 +0000
Manifest next update: Fri 17 Jul 2026 19:05:07 +0000
Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: r7h1PIE+hmB4eWQxgiqVPR3Qj0O7IKaSm6sU58mr7YY=)
2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: ZdWgxsTDmp2SCgpKV/pUzjdMnUTtasFIwHsMjvPLzoQ=)
3: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kq7sx+cXw+m9S0qiyAa+VcKr/WKvuChbXwIbeJRy3rg=)
4: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: qP73CAez9BA/Kxf0LXcrxOa4cBuTk6ek4TGHHpeWEII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Jul 2026 19:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3129 (0xc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Validity
Not Before: Jul 10 19:05:07 2026 GMT
Not After : Jul 17 19:05:07 2026 GMT
Subject: CN=6a514263-638e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:3c:76:d5:b4:03:1f:d9:4d:01:7e:05:a1:
24:46:e7:1f:3d:8b:b3:27:16:aa:fe:58:fe:94:dc:
93:79:9c:f5:74:86:09:cb:6f:91:42:e4:56:0f:04:
8a:75:0a:99:ac:de:9a:3b:8b:9f:0d:4f:53:30:4a:
85:11:c3:2c:e5:89:b1:75:35:7a:57:25:e0:c1:3d:
95:2d:25:d8:7f:19:07:5e:5d:51:73:62:cb:c1:3b:
22:b2:42:8a:11:a4:45:8c:65:fc:3b:4a:33:b0:47:
e5:4b:c3:58:bb:53:aa:eb:f1:5a:9f:26:4e:d2:49:
a6:1f:70:21:d4:1e:01:08:dd:62:0d:4c:99:80:13:
4d:21:94:00:5d:36:3f:0d:ba:bb:48:22:01:df:ea:
c3:06:f7:36:63:cd:4b:9f:ac:1c:da:71:da:1c:59:
10:7b:d9:5e:80:5e:6b:88:f9:ed:11:de:7f:f6:88:
a2:2b:21:6c:51:d8:10:65:fb:7c:9d:ba:ac:87:d8:
e5:b5:bf:89:15:26:74:e4:b9:94:18:2b:29:bc:8e:
ed:ea:ce:be:78:a2:af:77:5a:0c:db:37:33:3d:52:
41:f6:b2:be:3a:d6:96:8f:e0:6e:4a:0d:c3:71:2d:
1b:fd:cd:be:bf:a6:71:6e:55:21:44:5d:b7:23:2f:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:4D:BD:C7:D5:AE:0A:EB:46:09:AA:D9:29:C1:97:FD:97:B8:2F
X509v3 Authority Key Identifier:
keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:05:19:49:38:12:e6:81:46:0c:6e:52:b6:28:2f:62:83:62:
a6:18:33:be:e9:1b:92:7a:e1:a7:a2:c1:38:5a:6b:09:71:69:
2d:6d:9b:0a:f8:8d:59:f3:7f:fb:94:ce:97:ef:9c:1e:02:08:
4d:9c:59:28:73:53:ae:20:76:30:30:cf:0b:04:06:19:16:09:
70:a9:e2:26:1f:72:2e:32:22:70:8e:b8:17:65:30:26:61:4a:
95:55:68:01:6c:f2:60:d1:6f:fd:aa:52:09:2e:de:71:c4:d3:
49:7b:e5:03:d9:e8:9b:46:35:dc:84:8c:1f:6f:f9:e0:b0:58:
83:7c:28:92:cc:af:b8:e4:3e:32:25:51:8e:7b:b4:08:3f:76:
1b:2c:17:80:ac:d3:a4:6f:26:d6:b5:59:18:1f:05:52:7b:6c:
9a:1f:66:2f:f9:dc:36:da:c4:9d:04:42:da:e6:ea:da:14:9f:
95:4d:8d:32:20:de:d5:01:57:95:47:cf:3b:34:f7:6e:de:b9:
bc:6c:e4:6b:13:4a:85:67:4d:7c:f7:32:bb:00:b2:c4:e6:c5:
94:e4:92:60:14:cf:eb:fd:be:42:8f:e5:7f:55:aa:ac:4c:0d:
01:39:b9:fe:59:e4:f0:09:29:14:5f:84:6d:6c:ef:c1:3f:c2:
aa:bd:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 13:12:11 2026 by rpki-client