
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier: zCH3VWXFvNWtJ8A33Ws97X23X7nSppfz81dO+p9z13A=
Subject key identifier: CB:F9:12:0A:44:C2:AE:7F:76:40:D8:54:78:B4:D4:9B:1F:54:14:A1
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number: 0107
Signing time: Mon 27 Jul 2026 08:22:02 +0000
Manifest this update: Mon 27 Jul 2026 08:22:01 +0000
Manifest next update: Mon 03 Aug 2026 08:22:01 +0000
Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: FYnBmG3g3ZJ/xXNpJbTtlr1dZdBsFysGnkwdlnDapWQ=)
2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: IaV3dmr7MH64uEELqjBq/78684gUfePzw+oStPl/t4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Validity
Not Before: Jul 27 08:22:01 2026 GMT
Not After : Aug 3 08:22:01 2026 GMT
Subject: CN=6a67152a-d0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:1c:34:62:a9:39:2d:3d:72:16:dc:5c:22:
43:75:13:a2:19:5f:e0:c2:03:ea:04:94:6a:77:60:
66:1f:a7:4e:81:64:2a:9e:ee:6d:7c:3c:64:d1:47:
ac:35:9c:91:0d:ca:51:b5:5d:0e:10:fa:0a:e7:ee:
52:8e:00:c9:2e:64:68:f4:c5:e0:7a:8f:6a:f2:91:
04:69:7e:c7:16:5f:48:45:09:9e:37:e1:85:8c:29:
16:7e:7d:3e:55:04:ad:c1:63:8d:7e:82:6d:e2:05:
82:79:d6:e6:67:21:35:35:98:80:22:8c:15:44:1a:
17:7b:ff:43:c6:7a:1c:1f:5c:3f:88:c6:3e:2f:3d:
62:dd:0f:29:85:a2:98:40:d7:bd:fd:27:25:2b:c3:
9b:7a:68:06:59:6d:87:f4:02:c6:94:ab:42:9c:21:
b4:f4:b2:c4:e8:b6:73:b2:39:bd:b1:ea:fa:5b:b0:
ee:b0:69:ce:28:af:ec:ad:d4:7f:1f:13:7f:a7:80:
d6:2d:c5:66:3a:1a:35:c9:14:aa:9e:db:b4:8e:6d:
fc:f6:8f:0a:ed:55:b7:eb:a9:ae:49:9e:07:65:61:
6d:81:40:28:6e:22:9e:51:96:a6:f4:3a:5e:ab:78:
b4:90:f5:ae:14:40:45:f2:f0:0f:48:bd:9b:10:06:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F9:12:0A:44:C2:AE:7F:76:40:D8:54:78:B4:D4:9B:1F:54:14:A1
X509v3 Authority Key Identifier:
keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3c:27:6f:2c:e7:51:83:cd:4d:2d:23:10:da:cd:e6:4a:67:
4b:93:ac:7a:d2:94:00:bc:ae:ae:65:73:30:43:09:ef:95:94:
84:ff:2b:bf:db:4e:ad:b1:2e:58:7c:ab:ab:d3:8f:5c:7a:e2:
78:48:8c:67:44:1e:de:0a:71:59:ea:39:91:a6:19:14:7b:ca:
03:fc:42:0f:17:4a:85:0b:cb:19:62:5a:13:34:bc:3a:17:92:
63:aa:65:1e:6d:4d:6a:fa:e4:ee:2d:1c:55:3c:5a:29:55:7d:
07:d2:7c:5a:de:b2:4f:25:d0:02:ec:22:9b:e7:95:b6:ef:91:
43:94:8e:ec:83:5b:67:32:2b:1c:99:19:02:05:31:7f:1a:5c:
52:d2:67:88:7f:d2:4f:21:b6:10:02:76:9b:f7:0b:44:ae:14:
74:e7:7e:de:c9:8e:ab:8c:6a:14:fb:a0:59:ab:cd:22:79:7b:
26:6e:ea:6d:e7:d5:41:fd:4d:29:43:0a:17:4a:54:5a:c3:71:
67:da:38:0f:1e:76:d6:1e:15:c4:f5:df:06:28:8c:cf:3e:a1:
64:c5:95:57:d2:fc:dd:60:b1:64:c7:ad:b8:58:3a:e0:9b:41:
5a:ef:88:0e:17:43:3a:a7:27:80:07:a9:a7:25:f2:4c:78:d3:
8f:7f:3e:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ0QzkxMTAvBgNVBAUTKDk1NzQ1MjkzQzg4QTI3MjZFMTBBNTdENThGNDJDQzMx
NjlCN0M5MjIwHhcNMjYwNzI3MDgyMjAxWhcNMjYwODAzMDgyMjAxWjAYMRYwFAYD
VQQDEw02YTY3MTUyYS1kMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNkcNGKpOS09chbcXCJDdROiGV/gwgPqBJRqd2BmH6dOgWQqnu5tfDxk0Ues
NZyRDcpRtV0OEPoK5+5SjgDJLmRo9MXgeo9q8pEEaX7HFl9IRQmeN+GFjCkWfn0+
VQStwWONfoJt4gWCedbmZyE1NZiAIowVRBoXe/9DxnocH1w/iMY+Lz1i3Q8phaKY
QNe9/SclK8ObemgGWW2H9ALGlKtCnCG09LLE6LZzsjm9ser6W7DusGnOKK/srdR/
HxN/p4DWLcVmOho1yRSqntu0jm389o8K7VW366muSZ4HZWFtgUAobiKeUZam9Dpe
q3i0kPWuFEBF8vAPSL2bEAYCEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMv5EgpE
wq5/dkDYVHi01JsfVBShMB8GA1UdIwQYMBaAFJV0UpPIiicm4QpX1Y9CzDFpt8ki
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS84NDJGOTg5NDBF
QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5YmhDbGZWajBMTU1XbTN5
U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lTSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDRDOS84NDJGOTg5NDBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5
YmhDbGZWajBMTU1XbTN5U0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtTwnbyznUYPNTS0jENrN5kpnS5OsetKUALyurmVzMEMJ75WUhP8rv9tOrbEu
WHyrq9OPXHrieEiMZ0Qe3gpxWeo5kaYZFHvKA/xCDxdKhQvLGWJaEzS8OheSY6pl
Hm1Navrk7i0cVTxaKVV9B9J8Wt6yTyXQAuwim+eVtu+RQ5SO7INbZzIrHJkZAgUx
fxpcUtJniH/STyG2EAJ2m/cLRK4UdOd+3smOq4xqFPugWavNInl7Jm7qbefVQf1N
KUMKF0pUWsNxZ9o4Dx521h4VxPXfBiiMzz6hZMWVV9L83WCxZMetuFg64JtBWu+I
DhdDOqcngAeppyXyTHjTj38+Ug==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:38:10 2026 by rpki-client