
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json)
Hash identifier: xJAHtnK07DdwTZ1HYsMQWDo3BXz0Y+FSkCoBZjz3zpE=
Subject key identifier: 9A:8B:57:B5:D0:3A:98:D0:B3:37:32:C0:8C:00:44:14:A6:1A:E6:CE
Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3
Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
Certificate serial: 10FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
Manifest number: 18CA
Signing time: Tue 06 Oct 2026 17:21:37 +0000
Manifest this update: Tue 06 Oct 2026 17:21:37 +0000
Manifest next update: Tue 13 Oct 2026 17:21:37 +0000
Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: twsP8ga8upXSkbSQugPA2Y72xagdkz3mVFxfIulpVaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl
rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4348 (0x10fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
Validity
Not Before: Oct 6 17:21:37 2026 GMT
Not After : Oct 13 17:21:37 2026 GMT
Subject: CN=6ac52e21-80af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:69:71:08:73:8d:2c:28:c8:e0:25:04:1b:
fc:47:7e:5d:d2:e6:80:81:f2:d3:dc:8f:31:f1:c7:
84:ac:1c:f2:28:b4:80:46:8b:f7:76:c6:53:79:d5:
1f:ae:1e:85:91:25:87:91:42:5e:63:e5:c1:2a:1c:
c2:99:2f:d5:e0:4d:95:0d:c0:4e:7d:51:4b:d9:87:
96:f6:d0:01:e7:f4:81:02:40:03:b1:c1:eb:79:bc:
e0:c5:98:b4:6b:21:4f:36:ff:7c:a1:11:70:0a:7d:
d2:90:32:38:02:36:8b:8e:7b:c1:58:eb:74:60:fe:
41:3b:d6:ce:3d:0d:37:8c:3c:73:61:39:61:d9:8e:
10:36:90:d9:a6:fe:a3:b3:4c:31:97:a6:ea:e5:d3:
f5:dc:61:96:b4:9d:ad:89:30:90:c1:37:7b:87:46:
d9:99:b4:21:bc:a7:3d:8a:1b:c9:b2:a7:f9:b6:34:
5a:e9:0a:d8:52:13:8a:41:84:7d:16:84:e9:85:04:
a3:38:fc:a9:bc:00:77:2f:62:bf:55:82:ec:af:de:
07:56:35:a3:48:7c:6b:e1:20:c5:29:07:e9:2d:a6:
2a:61:38:0e:bc:5c:e6:b0:0a:02:7d:68:69:d9:99:
31:6b:f0:a9:82:25:60:08:a8:94:b9:f4:5f:db:b7:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:57:B5:D0:3A:98:D0:B3:37:32:C0:8C:00:44:14:A6:1A:E6:CE
X509v3 Authority Key Identifier:
keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:86:50:28:7c:b3:c4:2b:6c:37:f8:bf:a7:c4:c3:ec:c4:5b:
a4:16:d6:27:d8:a6:39:da:af:08:ba:c8:f5:c8:96:1d:6b:cb:
dd:bd:ce:4d:e5:d4:68:e7:e9:67:f0:67:a7:9c:f8:72:06:7f:
94:9e:47:80:2e:3b:01:e3:7f:fa:4b:0a:91:fd:02:ff:99:c8:
8f:e7:50:9c:9c:fe:53:13:33:72:4e:a7:16:95:75:cf:54:48:
02:02:1f:b1:a6:d1:08:46:92:03:ee:1d:a6:15:2a:f7:c1:7b:
71:75:95:60:b6:a0:fa:64:0f:ca:96:2f:2e:9c:0c:1f:4f:c8:
cc:18:b4:5c:4d:aa:90:05:b6:56:d6:23:83:81:b2:36:b3:6a:
e6:81:f6:01:1d:50:40:83:78:a8:71:1e:10:63:ba:0a:2b:1e:
de:e8:60:e0:d0:da:35:8c:06:7b:00:8d:4b:bc:5c:9e:14:5a:
b4:8a:8c:99:54:d9:ab:58:bc:eb:35:fa:a0:1e:f2:c7:05:27:
d6:bc:10:09:3f:cf:ea:21:e7:8e:5e:f5:c4:ec:c4:b1:b3:6d:
10:2f:4c:dd:29:82:c4:92:0e:c2:76:63:ef:39:74:22:78:27:
fb:bf:72:0d:73:12:91:7c:de:f1:0b:c8:4f:fe:6e:0a:ec:5c:
af:5b:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:25:59 2026 by rpki-client