
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json)
Hash identifier: aSRvzfGGxcovIB0OFMy+kg8lrvrolPKyIosdyT6gWHY=
Subject key identifier: 08:24:9A:F0:57:2E:00:DD:48:BA:16:71:6C:A9:53:64:83:D5:B2:7F
Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
Manifest number: DF
Signing time: Tue 21 Jul 2026 08:16:24 +0000
Manifest this update: Tue 21 Jul 2026 08:16:23 +0000
Manifest next update: Tue 28 Jul 2026 08:16:23 +0000
Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: WI69a/N9V8FYbDd+xcl+CSwFJsfjpscpuiC69vwk9ew=)
2: 2917F838011D11F19AF518A8476F56BC.roa (hash: xJYWdy3vw+vjD1PJdLPXMUN2+mPgPI/QMzbJ06GDJ8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Validity
Not Before: Jul 21 08:16:23 2026 GMT
Not After : Jul 28 08:16:23 2026 GMT
Subject: CN=6a5f2ad8-ea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:5b:51:5c:6e:d1:fa:21:4f:b0:ac:27:e8:
7b:22:43:77:b5:6c:f8:f6:2a:4d:04:81:13:fa:73:
04:bd:3d:a2:4f:59:c9:c6:db:cc:1c:eb:b6:6b:30:
f3:01:42:8a:46:91:37:b6:cc:d5:a9:a9:33:0e:9f:
89:6f:bf:1b:52:b3:15:02:b9:f9:37:ab:52:6d:b2:
b0:09:54:a9:20:1d:7b:c8:e8:1d:0b:a6:e5:ae:e0:
cf:25:00:e2:44:60:e0:c2:f9:09:39:3f:59:3b:ab:
cd:5a:6d:82:10:9a:e7:4d:0d:1f:44:99:b2:e4:20:
e1:9d:14:f8:2d:d0:f4:ab:58:e9:f1:c2:ae:fa:55:
58:46:05:e9:07:20:a6:26:2b:c3:9c:e5:43:cb:fb:
e8:01:98:25:35:65:be:61:bb:9f:66:9d:0b:a0:13:
bd:79:8d:47:c2:93:07:23:86:e1:e6:2b:89:cc:db:
e4:71:a1:3b:df:f0:91:98:b4:ec:a7:62:8c:d4:dc:
dc:c5:34:bc:16:7e:7e:eb:65:71:ef:fe:72:c3:74:
6d:3f:e9:a7:10:ef:a6:5b:72:73:47:d5:ae:8d:2f:
20:d1:89:e7:2d:0a:47:b7:06:f8:13:8d:14:00:49:
be:bc:aa:6b:7a:da:89:04:5f:d0:d2:c2:33:10:5d:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:24:9A:F0:57:2E:00:DD:48:BA:16:71:6C:A9:53:64:83:D5:B2:7F
X509v3 Authority Key Identifier:
keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:80:a7:7a:e8:7f:61:cc:22:be:a1:89:78:43:d3:15:ac:d8:
0a:5a:07:4b:9b:da:73:8d:46:59:c6:7f:ab:81:4d:44:0f:48:
2d:47:95:1a:db:37:66:d2:e3:4a:c7:47:d9:8e:51:75:c2:88:
46:7c:08:42:e5:35:84:94:b0:8a:01:83:a9:ee:f5:06:d1:92:
9c:d5:ec:23:81:36:32:31:24:7f:19:ea:dd:b0:a4:31:a9:89:
5b:ea:b0:fe:33:19:88:89:8c:e6:b2:dc:b3:98:1b:49:29:9f:
40:24:bc:70:c3:1f:1c:c9:e8:0d:f1:4d:57:77:aa:aa:1c:41:
4d:3a:09:57:df:15:e2:f5:8c:2f:65:98:2f:8e:99:26:2a:c8:
c9:ba:ab:7a:ca:4b:f5:85:88:3d:b4:8b:e1:7f:1f:f0:9a:41:
d0:4f:4b:eb:e2:fb:5a:9f:c1:b9:72:7a:74:af:2c:16:a2:27:
64:b1:0a:b6:0d:59:83:41:0c:6a:3e:c1:19:f9:61:ea:cb:4f:
ba:c3:22:ac:a6:c4:da:87:fd:83:a3:5a:78:f1:ed:9d:b0:b5:
d1:c0:25:95:2c:dc:db:78:be:52:1f:71:f3:fa:6f:a4:0f:75:
0f:eb:6b:82:99:f9:5b:7f:e4:4d:aa:d4:9d:34:ee:c3:20:02:
95:3e:de:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:23:19 2026 by rpki-client