
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json)
Hash identifier: 9uHmBR7rubcnpCQEHRkzn9s2MDooCOvZxm6WlTOetoY=
Subject key identifier: 6E:60:4C:EB:85:1A:2B:B8:1D:C0:E8:5A:D9:35:C4:D2:9B:D3:A6:22
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial: 0331
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
Manifest number: 0325
Signing time: Fri 11 Sep 2026 00:54:27 +0000
Manifest this update: Fri 11 Sep 2026 00:54:26 +0000
Manifest next update: Fri 18 Sep 2026 00:54:26 +0000
Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: 1GTcY3ahZGWXfgmRQptdhxpyHNyW4o/ktV7jQSQFl7g=)
2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: aefMK2H8VuJURMPwEnmuT8GCvTBNLWTHQiekOGLIEHw=)
3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: fau8zrxoL5+rKWWTOegWV7fze5dW+nWi1/hJ5SSwjv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Validity
Not Before: Sep 11 00:54:26 2026 GMT
Not After : Sep 18 00:54:26 2026 GMT
Subject: CN=6aa35142-5d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:64:06:5a:c0:6d:a9:f5:81:92:8e:b4:0d:
a5:da:0e:f4:10:dd:e7:dc:bc:65:cc:ed:af:7f:91:
a9:f1:63:b8:cf:96:46:88:98:5c:ee:db:72:8b:56:
ea:56:e2:11:d7:51:9f:f5:38:ba:40:01:53:36:11:
56:85:49:95:be:51:32:60:c1:b3:85:06:ec:fd:8e:
ef:dc:22:a4:9e:da:f7:1d:30:05:78:27:c2:b7:e3:
18:fa:fd:74:4e:51:0d:8a:51:bb:ff:eb:3d:79:ed:
0a:c7:bf:05:74:50:a6:0e:1d:79:36:b5:5f:d8:1f:
3a:10:95:b7:f0:bc:a0:5c:0e:2a:9b:8a:b8:1f:9e:
c3:4d:94:62:19:e8:c7:b7:ba:d2:15:e1:72:00:cc:
68:f5:ea:f3:cc:1c:ee:3b:a3:9f:72:bb:08:1d:0d:
9f:5c:c6:27:08:49:19:d3:5d:08:4a:51:c0:bd:18:
61:c5:a9:0d:45:ba:05:4a:03:b4:12:4a:35:41:3f:
41:9f:a8:aa:db:f7:0c:a4:a8:36:f4:89:68:de:e6:
22:fe:3d:bf:a7:7b:a8:6a:3b:fe:90:5b:d2:bf:5a:
8d:b1:72:03:97:29:21:ec:18:a1:88:f9:f4:85:b2:
b3:54:c7:29:fd:ab:d9:31:2e:af:6c:bf:54:4a:e9:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:60:4C:EB:85:1A:2B:B8:1D:C0:E8:5A:D9:35:C4:D2:9B:D3:A6:22
X509v3 Authority Key Identifier:
keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:35:8e:48:fa:92:8e:b5:8f:86:01:a9:f7:9a:64:29:ca:fb:
c2:58:ea:91:03:37:7c:3d:d2:42:2f:80:fa:fe:f4:46:20:7b:
29:61:2d:10:ba:f1:88:93:87:fe:ce:5f:e7:49:26:57:d7:b6:
7e:f1:ab:bc:01:86:af:cd:3d:49:32:35:cf:ea:32:3f:cd:e4:
a6:14:88:be:38:1d:20:4f:d3:d3:26:3f:6f:fe:a5:34:75:eb:
3e:89:45:16:3f:e9:1d:66:0f:f4:88:fc:ab:2a:aa:a1:84:7a:
91:59:49:d4:d8:e5:15:8f:19:bd:21:fe:48:d0:d0:2a:b6:10:
40:fe:12:0b:6a:cd:16:bc:54:a1:5f:d3:af:a6:e9:a4:4e:1c:
8f:a3:53:4b:66:5a:c5:b7:1e:2e:a9:b1:4c:8f:17:f0:0f:30:
b6:be:bf:31:ee:bc:00:9c:dc:15:11:97:35:da:b4:ee:d6:12:
de:56:39:38:b1:ed:a5:27:ff:6c:2b:57:62:fc:50:ee:7c:e1:
da:07:e3:f4:19:7e:4c:78:b5:32:6b:f2:5d:1e:c4:a9:83:e4:
d4:2b:b8:06:02:18:bd:b1:d2:22:e4:38:78:5f:7f:23:7d:03:
1c:7d:d4:90:51:a6:a6:06:3b:e0:a9:24:81:16:4d:9a:f9:c1:
1b:be:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:28:20 2026 by rpki-client