
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier: j+fMsqdn065ZpFTDtGAVK83TksBLxbOLV+ysf4REEtY=
Subject key identifier: B7:8C:0C:F5:4C:91:74:FC:7F:C6:6B:9B:12:FE:F8:CE:26:8A:D0:30
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number: E7
Signing time: Wed 19 Aug 2026 07:11:28 +0000
Manifest this update: Wed 19 Aug 2026 07:11:28 +0000
Manifest next update: Wed 26 Aug 2026 07:11:28 +0000
Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: pGzKufJS+6fDHkoaVC/Wb5mTd8IJGJhwM/5tXlQRu9Q=)
2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: XsH+IJ5SSw5cAUWIZZhkMzbgbFC8kkMlwg6uRhNZXvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Validity
Not Before: Aug 19 07:11:28 2026 GMT
Not After : Aug 26 07:11:28 2026 GMT
Subject: CN=6a855720-2af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:fa:2e:5b:2d:56:6c:c9:4f:13:6b:c8:86:
b8:60:70:a4:b0:54:18:62:12:9c:2d:68:9b:89:1d:
64:2c:d3:59:7b:d6:a6:47:bf:71:f6:65:44:b5:31:
39:43:4a:2a:de:df:61:8d:94:37:4f:d4:41:e4:92:
2e:c6:ab:bf:09:65:e2:1b:65:87:10:b2:e3:f1:dc:
a0:3c:52:4b:08:fa:39:ef:a4:d0:bc:99:6b:16:a6:
4e:15:5f:32:b6:f1:b8:97:e0:49:61:4a:69:d1:e9:
0b:f2:2d:b3:3e:60:e5:a8:01:8d:b6:b3:84:96:28:
2a:8c:19:95:06:50:b3:bb:8c:ea:3f:bf:21:b1:9b:
6e:c3:a2:60:29:fc:0e:25:02:b2:90:12:55:8e:2e:
f4:ac:fc:27:7f:0c:22:44:dd:da:d3:a7:2e:48:18:
be:00:ff:ae:54:e2:b2:4c:fd:bc:9a:2b:91:c2:a3:
a8:3d:be:1d:00:18:3b:d4:11:09:e4:33:88:96:31:
4b:2c:29:a8:34:6d:9d:2f:cf:ad:e3:45:da:00:64:
d5:f0:36:c4:36:88:d1:76:54:e6:26:45:32:16:5d:
65:f7:02:c1:89:a7:4e:49:9a:ef:bc:5d:3e:83:15:
39:7d:10:af:9d:a6:dc:9d:02:48:6a:10:b4:74:7b:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:0C:F5:4C:91:74:FC:7F:C6:6B:9B:12:FE:F8:CE:26:8A:D0:30
X509v3 Authority Key Identifier:
keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:70:61:2b:a6:51:f5:2e:c1:68:d7:a7:fe:fe:5f:24:ec:b1:
64:12:89:7c:7d:49:c0:31:b0:20:6d:cb:76:41:d6:f2:a4:f2:
08:56:c9:b0:a0:5c:ea:55:28:78:1c:b1:1d:78:11:88:00:a1:
2f:19:7b:58:f8:29:fa:94:64:f3:85:d7:7e:45:ac:6a:22:35:
f0:93:d6:0a:4c:06:a8:86:6c:6f:52:cd:b6:a1:24:80:76:8f:
7e:ff:2b:1a:b6:79:57:6b:58:7f:74:1c:b7:87:97:6d:31:40:
d8:42:80:2c:d8:d3:da:25:97:4c:81:2e:66:79:10:99:57:d6:
41:62:16:db:ad:1f:bd:eb:16:55:62:d6:14:40:d0:74:be:bf:
c2:b0:f0:40:76:05:18:32:f7:50:59:11:48:65:6b:30:56:e4:
eb:42:18:9b:37:65:20:72:f8:d9:4b:8d:9f:f1:e4:88:21:32:
70:22:87:db:3e:93:29:f5:f6:18:c1:21:d1:d0:0f:3f:94:5f:
00:17:92:79:c0:e8:e0:12:96:d4:a6:e1:ef:24:94:54:08:b2:
46:32:12:61:3e:e2:5b:9f:2a:06:73:dc:b5:5d:29:8b:ed:a1:
01:b7:0d:ae:1f:9d:f7:f5:83:b7:e3:32:b3:36:60:81:ec:79:
58:d6:d1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:24 2026 by rpki-client