
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier: nepoSi1YCK8VbMj0S7Hp9oou7fPlCEWxWz6U/kwZ11U=
Subject key identifier: 42:97:8D:8A:63:1C:E4:DA:7A:7A:42:D4:A6:13:A2:74:6D:7A:2E:0C
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number: 01BF
Signing time: Sat 05 Sep 2026 03:43:49 +0000
Manifest this update: Sat 05 Sep 2026 03:43:48 +0000
Manifest next update: Sat 12 Sep 2026 03:43:48 +0000
Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: Ztx6U5xbfYuUlSDW1D7nNqmHHMWhFQdg+VBLCj+n8GE=)
2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: 47l1ln9Nx13HUurVSbC4jY0jHYfX9Vb/9u1t5wwZQzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 03:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Validity
Not Before: Sep 5 03:43:48 2026 GMT
Not After : Sep 12 03:43:48 2026 GMT
Subject: CN=6a9b8ff5-153d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:6b:f0:63:78:d3:19:63:45:b7:0d:bd:f8:
d5:d8:3f:f7:32:cd:f0:8f:8e:f8:02:ce:f1:55:86:
d1:09:44:4c:f1:16:bb:31:da:2b:d5:4f:0f:5e:df:
48:eb:c4:42:75:5e:d4:52:cf:26:a4:77:8d:f5:d6:
9f:3d:19:f8:cd:9b:eb:1a:82:27:1f:b0:b2:ba:f9:
96:e7:d7:72:c8:22:16:a6:66:bb:80:3b:f4:a2:45:
b7:23:5b:8c:48:2f:10:e0:0d:86:b3:7d:4c:d9:ac:
cf:c3:37:9c:1b:9c:db:22:88:30:45:70:63:7f:e6:
5d:45:ef:af:8e:6c:69:17:fa:fc:87:b1:e2:94:df:
24:62:b5:fe:c2:f1:05:3f:69:46:35:4a:70:a9:2b:
09:91:13:35:e2:b0:9a:2d:22:a7:e1:28:4c:a8:37:
c7:d8:ba:4b:7f:f5:9f:63:51:7e:bd:9f:2d:ee:cb:
6e:76:ac:73:97:f9:b0:85:ac:d6:e1:a2:bb:93:c4:
fb:65:91:59:db:01:12:59:ad:d4:15:a5:6c:46:c5:
a9:c6:a4:27:51:4f:d8:36:9f:be:1c:d0:33:c3:3a:
db:dd:99:38:82:a6:6d:5d:00:81:34:32:dc:ce:ad:
d9:df:d7:a0:39:da:0a:5e:0f:cd:ed:29:3c:21:bf:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:8D:8A:63:1C:E4:DA:7A:7A:42:D4:A6:13:A2:74:6D:7A:2E:0C
X509v3 Authority Key Identifier:
keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4b:ab:b3:e8:d1:99:03:fb:4e:b0:10:b3:6c:3d:57:8e:c2:
b9:44:65:62:d1:a3:be:30:c0:f9:8d:5f:c9:f0:75:81:24:55:
85:ba:de:b6:fb:51:6a:3d:0d:b7:8e:e7:e3:eb:90:0a:4a:c0:
83:25:c6:e5:6c:6d:7b:98:b0:6e:b4:4b:2e:4f:5d:f0:19:bd:
b2:63:7f:0d:75:26:26:dc:76:42:3f:b5:0b:6c:1e:51:07:ce:
f4:d8:77:d1:f6:59:b4:0d:8d:31:9f:c4:60:8a:71:e2:93:f9:
47:c7:ef:ab:48:79:bd:e5:9f:68:86:00:09:cd:9b:a3:01:2e:
fb:4a:ce:84:2e:e6:f6:f0:79:8f:3c:d5:22:aa:23:74:e0:a2:
45:9b:a2:7f:0a:6b:7b:18:60:63:76:f3:14:0d:76:c4:4b:51:
e4:28:c1:ab:fd:f1:55:ca:45:0e:de:5c:63:f0:f2:e4:dd:ca:
18:b7:ef:36:d8:95:be:62:7b:02:58:51:c8:94:fc:e4:6d:20:
d9:a6:84:34:88:d9:80:1d:97:f8:42:47:ab:c5:67:fc:40:2e:
3c:fc:63:30:45:96:85:5c:ea:a5:d5:b8:bb:42:b3:d0:ec:0b:
61:ab:fe:d0:2e:7a:6d:86:96:87:82:32:ad:1c:c0:78:1a:7b:
cd:c5:b0:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0
Mjc5REYwQ0YwHhcNMjYwOTA1MDM0MzQ4WhcNMjYwOTEyMDM0MzQ4WjAYMRYwFAYD
VQQDEw02YTliOGZmNS0xNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAueBr8GN40xljRbcNvfjV2D/3Ms3wj474As7xVYbRCURM8Ra7Mdor1U8PXt9I
68RCdV7UUs8mpHeN9dafPRn4zZvrGoInH7CyuvmW59dyyCIWpma7gDv0okW3I1uM
SC8Q4A2Gs31M2azPwzecG5zbIogwRXBjf+ZdRe+vjmxpF/r8h7HilN8kYrX+wvEF
P2lGNUpwqSsJkRM14rCaLSKn4ShMqDfH2LpLf/WfY1F+vZ8t7studqxzl/mwhazW
4aK7k8T7ZZFZ2wESWa3UFaVsRsWpxqQnUU/YNp++HNAzwzrb3Zk4gqZtXQCBNDLc
zq3Z39egOdoKXg/N7Sk8Ib8MzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKXjYpj
HOTaenpC1KYTonRtei4MMB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz
OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4
TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT
NnhtbVQySXVGODFDZWQ4TTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATUurs+jRmQP7TrAQs2w9V47CuURlYtGjvjDA+Y1fyfB1gSRVhbretvtRaj0N
t47n4+uQCkrAgyXG5Wxte5iwbrRLLk9d8Bm9smN/DXUmJtx2Qj+1C2weUQfO9Nh3
0fZZtA2NMZ/EYIpx4pP5R8fvq0h5veWfaIYACc2bowEu+0rOhC7m9vB5jzzVIqoj
dOCiRZuifwprexhgY3bzFA12xEtR5CjBq/3xVcpFDt5cY/Dy5N3KGLfvNtiVvmJ7
AlhRyJT85G0g2aaENIjZgB2X+EJHq8Vn/EAuPPxjMEWWhVzqpdW4u0Kz0OwLYav+
0C56bYaWh4IyrRzAeBp7zcWw1w==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:37:54 2026 by rpki-client