
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
File: lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft (raw, json)
Hash identifier: CxfNHhJ8U/mcb6mI3HOyZRwOj/hznnZ72GTijN1ZjTw=
Subject key identifier: 0B:9F:02:B8:4A:49:AE:B6:E1:99:C9:38:3A:95:A8:67:DE:AE:C6:54
Authority key identifier: 95:65:01:9A:A6:51:69:5E:04:F8:61:BA:1D:3D:6E:FF:3E:BA:4D:BB
Certificate issuer: /CN=A91187F1/serialNumber=9565019AA651695E04F861BA1D3D6EFF3EBA4DBB
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
Manifest number: 08
Signing time: Wed 19 Aug 2026 09:56:40 +0000
Manifest this update: Wed 19 Aug 2026 09:56:39 +0000
Manifest next update: Wed 26 Aug 2026 09:56:39 +0000
Files and hashes: 1: lWUBmqZRaV4E-GG6HT1u_z66Tbs.crl (hash: iz6e7owmLaMB3Sooov+UIPoSmzS8VRYe/Wxl1F5GNvE=)
2: BE2B8A2E949E11F1B3CB7B066C11F970.roa (hash: UCN2Zm5VCKtgcnFKRnHOKmxNgbpNt9SjwIItt5plX9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.crl
rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187F1, serialNumber=9565019AA651695E04F861BA1D3D6EFF3EBA4DBB
Validity
Not Before: Aug 19 09:56:39 2026 GMT
Not After : Aug 26 09:56:39 2026 GMT
Subject: CN=6a857dd8-ceed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:77:54:da:f3:0d:18:e6:a9:c2:d8:a1:7a:
bc:6d:05:75:95:21:45:b6:e4:44:71:32:7b:7d:39:
c9:3d:65:61:45:e2:de:4c:4d:2e:78:81:90:60:c4:
d4:2b:fe:c6:49:4b:66:65:f3:93:27:2c:7a:42:4f:
c1:7d:24:7e:12:a2:bf:14:e0:9f:64:9b:33:20:06:
5e:1a:5a:9f:f3:2a:18:b5:80:75:66:d7:69:60:01:
81:27:81:f3:95:bd:74:bc:d3:ff:fe:fc:7c:fc:6d:
a5:74:ed:02:3e:9f:0e:d4:9a:f8:f8:e1:33:dd:1c:
8e:54:b0:8e:18:67:bf:bb:9f:be:14:6c:ce:81:31:
20:e1:7d:c6:1c:a8:61:ca:e0:5a:c1:85:37:55:cd:
24:dd:85:57:b7:7d:da:15:d6:82:cc:27:a2:85:ae:
f6:d3:85:dc:36:33:e1:e0:7b:3a:81:96:d0:26:ec:
fa:98:84:47:a6:af:55:cb:2c:b8:85:44:94:f0:82:
75:88:b8:06:58:9d:06:6e:a1:cc:72:89:50:40:0d:
bc:db:d4:27:0f:05:66:41:6e:4d:8e:3f:b3:6f:5c:
4b:26:39:e1:6a:a0:d5:1d:f9:a5:8d:d5:47:85:5a:
a5:e4:47:b1:3f:e1:6f:f9:58:62:d8:6c:05:e5:59:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9F:02:B8:4A:49:AE:B6:E1:99:C9:38:3A:95:A8:67:DE:AE:C6:54
X509v3 Authority Key Identifier:
keyid:95:65:01:9A:A6:51:69:5E:04:F8:61:BA:1D:3D:6E:FF:3E:BA:4D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWUBmqZRaV4E-GG6HT1u_z66Tbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187F1/A537478A949C11F194CDEE676B11F970/lWUBmqZRaV4E-GG6HT1u_z66Tbs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:f3:27:fa:bc:0b:d5:f6:3d:9e:c4:40:50:f0:10:32:a4:
40:80:41:b7:03:01:89:2b:dd:b3:86:12:cd:66:3d:12:4a:cb:
84:63:b2:bb:84:43:c9:6b:a7:04:4e:f4:b7:cd:49:55:29:13:
f9:26:b1:e7:cf:92:0f:a0:62:39:e1:91:d9:56:69:ce:d0:bc:
c1:f7:2c:da:95:7d:25:3a:6d:0a:d5:74:af:74:47:2e:7b:c0:
f9:62:f5:ee:ec:6c:7e:09:aa:8a:e6:a4:89:ee:0a:3e:c1:7f:
b0:2f:05:db:cf:bc:cb:ab:f2:05:19:2a:66:9b:7f:7b:e7:f7:
c7:e4:e6:b0:e1:68:05:b1:a1:cc:3b:46:08:d6:af:ff:a1:a4:
34:cf:6e:d9:53:3a:77:08:ec:ab:a6:1e:f3:9a:cd:ef:ed:d0:
7e:13:dd:68:e0:d0:e0:66:b7:e7:30:f1:7c:30:32:87:3b:30:
a2:33:dd:20:37:fc:7b:3b:ed:a7:f3:9f:a8:21:3f:a5:ff:e3:
1e:d7:d8:8c:7e:c3:66:52:a2:b4:53:5d:cc:43:f4:ec:1d:a4:
cd:f3:e3:a4:ca:0d:8d:1e:6a:ed:fe:89:66:0c:93:c7:99:77:
4e:8e:f9:8a:c9:cc:b9:c0:a1:0e:da:f0:79:ab:09:11:aa:6f:
b6:bd:96:4d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
ODdGMTExMC8GA1UEBRMoOTU2NTAxOUFBNjUxNjk1RTA0Rjg2MUJBMUQzRDZFRkYz
RUJBNERCQjAeFw0yNjA4MTkwOTU2MzlaFw0yNjA4MjYwOTU2MzlaMBgxFjAUBgNV
BAMTDTZhODU3ZGQ4LWNlZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCamXdU2vMNGOapwtiherxtBXWVIUW25ERxMnt9Ock9ZWFF4t5MTS54gZBgxNQr
/sZJS2Zl85MnLHpCT8F9JH4Sor8U4J9kmzMgBl4aWp/zKhi1gHVm12lgAYEngfOV
vXS80//+/Hz8baV07QI+nw7Umvj44TPdHI5UsI4YZ7+7n74UbM6BMSDhfcYcqGHK
4FrBhTdVzSTdhVe3fdoV1oLMJ6KFrvbThdw2M+HgezqBltAm7PqYhEemr1XLLLiF
RJTwgnWIuAZYnQZuocxyiVBADbzb1CcPBWZBbk2OP7NvXEsmOeFqoNUd+aWN1UeF
WqXkR7E/4W/5WGLYbAXlWXCJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC58CuEpJ
rrbhmck4OpWoZ96uxlQwHwYDVR0jBBgwFoAUlWUBmqZRaV4E+GG6HT1u/z66Tbsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4N0YxL0E1Mzc0NzhBOTQ5
QzExRjE5NENERUU2NzZCMTFGOTcwL2xXVUJtcVpSYVY0RS1HRzZIVDF1X3o2NlRi
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbFdVQm1xWlJhVjRFLUdHNkhUMXVfejY2VGJzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4
N0YxL0E1Mzc0NzhBOTQ5QzExRjE5NENERUU2NzZCMTFGOTcwL2xXVUJtcVpSYVY0
RS1HRzZIVDF1X3o2NlRicy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPdPMn+rwL1fY9nsRAUPAQMqRAgEG3AwGJK92zhhLNZj0SSsuEY7K7hEPJa6cE
TvS3zUlVKRP5JrHnz5IPoGI54ZHZVmnO0LzB9yzalX0lOm0K1XSvdEcue8D5YvXu
7Gx+CaqK5qSJ7go+wX+wLwXbz7zLq/IFGSpmm3975/fH5Oaw4WgFsaHMO0YI1q//
oaQ0z27ZUzp3COyrph7zms3v7dB+E91o4NDgZrfnMPF8MDKHOzCiM90gN/x7O+2n
85+oIT+l/+Me19iMfsNmUqK0U13MQ/TsHaTN8+Okyg2NHmrt/olmDJPHmXdOjvmK
ycy5wKEO2vB5qwkRqm+2vZZN
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:35 2026 by rpki-client