
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier: r0gzOl52NrM/mxtFw8xdNTSg8GXkOEsagMynzOF8Vj4=
Subject key identifier: CE:6F:72:AC:F2:7C:8E:6F:B5:1B:B0:7E:C5:E5:8F:89:7C:82:7B:23
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number: 0120
Signing time: Wed 09 Sep 2026 06:26:27 +0000
Manifest this update: Wed 09 Sep 2026 06:26:26 +0000
Manifest next update: Wed 16 Sep 2026 06:26:26 +0000
Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: eKEhoG5KdO7WcLKN/5ytQ8NlXicgx6wDk91OPIoZBD0=)
2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: vs8LiC2a7yfcHqx0F2jxfAS1octXGMx2IWNSmWMrwRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 06:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Validity
Not Before: Sep 9 06:26:26 2026 GMT
Not After : Sep 16 06:26:26 2026 GMT
Subject: CN=6aa0fc12-ace9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:d9:c6:b2:3a:58:41:11:53:a8:34:ee:be:
99:95:3a:ad:63:f5:85:f9:8a:a6:c1:b3:77:74:3b:
3c:c5:4b:ba:de:a9:1b:12:90:da:15:c7:a0:85:8a:
81:3b:50:d6:bd:05:64:33:b8:ff:0a:cf:74:6b:34:
aa:d1:b7:14:6b:2e:e9:e1:3e:12:81:99:af:51:9d:
77:7a:2d:30:c0:35:96:35:03:0c:fc:9e:29:f2:20:
ad:b9:df:e2:16:6e:86:27:ad:74:22:7b:51:e4:c8:
65:4c:b0:56:e6:ed:6c:fd:27:04:49:7d:ef:6b:4f:
35:cb:4b:23:f5:fa:79:9c:b3:e8:30:96:3f:ce:5e:
11:05:9f:b7:f3:b3:d3:c4:e3:b1:52:a1:f0:9a:df:
0f:9f:ce:19:fa:d8:87:d0:fc:b2:7f:c3:2b:fa:51:
43:f2:57:f7:9a:a3:ec:aa:08:f3:8a:65:c6:6d:c6:
99:e7:2f:18:d6:bc:ae:6d:f1:6b:1c:cc:d0:64:fa:
5b:75:34:c8:69:23:8e:e4:50:20:3a:b0:79:13:a5:
36:00:62:f5:72:6c:53:15:b0:ad:2f:8b:f6:7c:a3:
4f:7c:7e:2f:eb:f5:a8:87:53:5a:80:95:3d:b1:ce:
a6:75:37:e0:12:90:9c:22:f3:a0:1d:31:55:8a:61:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6F:72:AC:F2:7C:8E:6F:B5:1B:B0:7E:C5:E5:8F:89:7C:82:7B:23
X509v3 Authority Key Identifier:
keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:12:46:dd:cc:31:90:5e:6f:9f:67:2a:e7:f8:30:82:9e:
22:75:46:1e:90:21:8d:70:18:04:66:52:71:7f:a8:10:06:27:
0a:66:59:4e:44:79:df:01:2a:16:9d:e0:ee:fd:1b:11:a6:e2:
9e:86:df:2b:e6:5d:c6:ed:10:c3:42:f3:5b:7a:a3:e8:55:25:
0e:a6:99:23:70:60:ad:75:7d:9c:6a:84:11:79:6c:f0:3f:a2:
0f:dd:2c:c4:9b:3d:e4:ce:10:2b:7e:f3:62:8e:69:d7:0d:eb:
55:60:91:54:1d:cd:29:08:85:50:aa:a1:99:42:61:9d:0a:bd:
c1:46:99:60:ec:3a:2f:ee:a8:fa:81:0e:c1:4c:56:82:0c:3c:
1f:2b:60:73:aa:fa:c6:8a:ae:8a:5d:35:1e:66:d1:34:35:3e:
94:a4:5b:85:30:40:7c:3d:a5:6f:64:32:3a:2b:d1:1f:7e:a1:
d7:51:af:27:82:33:69:31:e3:a5:0d:2f:d9:7f:61:ea:43:df:
55:d8:e8:b7:e5:06:12:a5:2b:d6:ba:45:75:53:2e:0f:b8:c4:
77:dc:ea:27:f6:3c:4e:4e:bf:72:0c:a4:a6:87:f3:9e:19:c3:
1a:99:fc:45:36:0a:db:10:32:cc:58:81:29:e8:24:b4:1a:71:
33:34:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:39:12 2026 by rpki-client