
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json)
Hash identifier: Ew0KhlIDWgL8QZ7ix2rus9D1SYLUL6ZgTfc+OfAK/i0=
Subject key identifier: AA:71:24:08:D0:9D:23:77:44:FE:BC:3D:59:97:54:15:58:55:7C:79
Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF
Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF
Certificate serial: 058C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
Manifest number: 0580
Signing time: Tue 06 Oct 2026 23:25:33 +0000
Manifest this update: Tue 06 Oct 2026 23:25:32 +0000
Manifest next update: Tue 13 Oct 2026 23:25:32 +0000
Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: B8B1L0IA8nW6hdwjlcJL6p7rvgSyM1XquNa6YjLq2H4=)
2: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: I3gaSJbRtBej3m7ESAqqUXRIOkfko3scyKuyIisZUvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl
rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF
Validity
Not Before: Oct 6 23:25:32 2026 GMT
Not After : Oct 13 23:25:32 2026 GMT
Subject: CN=6ac5836d-bc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:1b:4d:92:a3:21:b3:52:2e:44:f4:41:65:
97:66:79:c9:3e:c2:6f:f9:60:b9:b1:50:87:94:c5:
1e:a9:d0:11:b7:12:95:db:b0:9e:c8:a1:20:3c:d2:
69:91:d9:8d:ea:83:57:86:64:57:da:43:4b:44:ab:
e9:97:fb:9e:33:ac:cc:7d:47:c2:b3:55:eb:62:44:
68:1e:7e:28:58:7a:95:9e:e4:91:27:f2:d2:65:26:
11:27:da:be:74:37:7c:c1:1b:66:ab:f4:58:b1:bf:
af:0a:6d:77:08:e0:c0:8a:25:88:63:c4:f8:00:6c:
c3:a8:53:5a:be:e3:87:1b:25:b0:34:6e:42:6a:75:
62:1a:2b:0d:9e:8a:47:c0:94:ce:5b:a7:63:a1:af:
7e:9c:4c:f5:40:8c:d7:01:1a:29:27:51:83:6f:59:
8c:f0:1f:93:26:df:fa:a8:bd:7c:d8:e2:c4:8e:b5:
64:ef:f6:49:53:1b:95:94:eb:2d:29:d1:58:da:34:
fc:67:93:ef:be:35:fe:57:58:bc:c3:2d:5f:69:68:
8c:3b:9f:99:51:85:48:a3:0b:98:0f:3a:da:35:c3:
86:de:f8:3c:ba:2f:c8:9c:a4:f3:3d:3c:33:17:85:
85:81:b0:78:ea:a9:e8:14:14:74:05:0c:c7:47:74:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:71:24:08:D0:9D:23:77:44:FE:BC:3D:59:97:54:15:58:55:7C:79
X509v3 Authority Key Identifier:
keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:38:5f:2c:bf:f5:2a:0e:5d:d9:ee:5a:3b:13:a0:66:fc:52:
e6:b3:83:36:f9:14:a6:ec:44:e9:b2:61:e5:da:ab:d0:18:ee:
3c:e4:7d:fb:00:16:95:52:e8:3e:1c:ba:5a:a6:b8:43:81:8a:
d4:08:ed:c0:fa:e8:09:a9:70:d4:45:34:ea:67:9c:51:0e:e9:
e0:8b:7d:4d:a6:ac:a3:c4:4b:73:7c:f3:0e:24:92:9d:5c:b4:
44:b5:46:6c:80:b5:72:c2:5e:95:db:79:09:b8:e6:13:b6:97:
4d:cf:bb:19:e7:b1:df:1a:ba:a5:b8:ed:25:61:85:10:bb:e1:
de:5c:a9:4a:e1:a1:96:d9:fc:3a:89:82:45:e4:c5:6d:13:8a:
82:a3:8d:4a:83:cc:b9:fe:d8:a8:b0:3f:8a:63:82:9f:bb:05:
75:a9:28:2f:be:cd:cb:9e:b1:8d:0d:94:85:51:67:53:29:0a:
99:96:f7:19:cc:af:18:e5:fe:8f:ec:dc:58:5a:84:eb:e4:ca:
ce:1e:df:b0:ec:f0:03:58:e5:65:7d:2b:c1:40:1e:91:32:07:
46:08:b2:3f:e7:31:43:89:a4:34:40:4e:96:a7:2b:aa:35:6d:
ea:7b:e5:72:e6:76:04:b6:20:ec:68:c4:40:6c:2d:7a:3f:f8:
e5:0d:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:55:36 2026 by rpki-client