
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier: /L1yjT1I568Sc9KS7tL0ivg/liR0QemRmgeHHW5bG5I=
Subject key identifier: BA:FA:B7:E2:62:C9:8E:FA:E7:7D:F6:A8:40:BA:63:93:91:D4:24:68
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0C8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number: 0C60
Signing time: Thu 10 Sep 2026 18:41:32 +0000
Manifest this update: Thu 10 Sep 2026 18:41:32 +0000
Manifest next update: Thu 17 Sep 2026 18:41:32 +0000
Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: 3q/o9smIjbVR7zQRrwxJGUwZ5CoGST8zAGqU4TThZ/I=)
2: D9173AE459E811ED85614349C4F9AE02.roa (hash: SuPmWKkBjA+MG2np2cJm+aHvROfST1rUMzPE+o3Kdeg=)
3: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: MY+T8lD7ELcNmfXtDFy1DozxA/ZjKMCtGQcsDkI7xHM=)
4: F8088528E65D11EDB5112931C4F9AE02.roa (hash: jPSPyzxZ2jIKGy878SzguBP9UIeeLmvl0IzeDBo7IuY=)
5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: TWRBYTEu2YvhIheWJBNIRcOrfed1qkUI5EpJZHqUja8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3215 (0xc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: Sep 10 18:41:32 2026 GMT
Not After : Sep 17 18:41:32 2026 GMT
Subject: CN=6aa2f9dc-3420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:84:b4:53:59:24:25:4a:da:ae:4e:13:74:
21:11:eb:dd:04:e5:01:b0:ec:f8:0b:ef:09:de:d8:
31:90:f8:5d:9a:34:ba:53:74:1e:a5:67:7a:56:26:
9a:58:8d:2f:af:a6:73:41:e3:f2:e2:80:e7:d4:89:
a4:72:64:d3:68:9a:69:b0:76:6c:15:4d:a4:30:4c:
73:61:38:95:bf:cb:1d:92:5b:f4:31:48:f4:51:67:
74:6a:0f:1b:08:84:0e:ac:90:e0:4b:b2:50:65:89:
54:63:59:d9:81:f7:d1:e6:a6:17:69:74:9b:2d:6b:
b2:cd:2e:60:5d:d1:ed:36:48:c4:4d:a4:76:4f:23:
03:48:1c:b4:c8:90:87:2e:cf:1c:3d:33:8d:a0:da:
29:e9:48:4d:66:ed:5b:85:99:1e:05:8e:c7:9f:60:
28:8f:aa:3f:91:51:51:a7:dc:77:1d:bc:06:46:be:
db:f0:cd:30:c9:76:53:63:46:dc:d6:ad:f1:33:19:
19:cd:25:6e:8f:de:3a:a6:05:bc:ac:b7:ce:60:d5:
84:21:3c:0a:9f:9a:c0:53:df:80:a1:6c:b2:c7:8d:
8f:0f:87:f5:2b:d5:b9:b8:ca:b9:8a:d3:01:30:3a:
da:d1:39:6f:dc:71:2c:f6:d5:ac:da:3a:df:89:78:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FA:B7:E2:62:C9:8E:FA:E7:7D:F6:A8:40:BA:63:93:91:D4:24:68
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:2f:5a:f3:1e:21:67:1a:96:82:28:85:b4:e2:28:f2:a2:6c:
bf:db:b6:27:34:a9:c4:9f:04:91:45:00:cf:4b:7b:29:e8:1b:
87:d1:35:cc:31:28:ef:18:5e:e4:4f:38:c0:e3:f4:29:2a:6f:
89:9a:6a:47:42:a4:9d:58:1d:37:66:7e:e7:54:09:71:9a:ba:
1e:37:f4:b3:62:69:6e:2d:ac:4b:79:b6:cd:f3:eb:94:de:20:
eb:08:b4:e9:18:7b:e1:6a:00:b3:1c:37:11:75:f2:96:1a:73:
ff:68:e5:15:a7:3e:82:f1:34:b3:cc:49:1f:a4:3c:90:95:72:
87:f9:5a:22:be:b8:1f:66:f8:fc:61:25:d1:24:87:fa:6e:57:
b8:33:41:6e:be:be:26:d3:aa:0b:8c:e0:55:a1:83:bc:81:56:
d9:cf:b0:2b:c5:d8:d2:c9:6a:de:c9:06:52:85:07:98:28:ce:
be:56:39:ec:df:a3:fe:00:32:05:e3:10:4b:32:09:13:3b:7d:
24:1e:90:43:bd:6d:aa:64:a5:1a:89:af:42:c2:0b:6c:3f:e4:
81:c5:cb:8b:6d:1e:ed:78:33:de:69:03:da:3d:7e:cf:09:12:
29:43:cd:6d:f9:4d:04:8f:72:59:e7:fb:35:85:09:fe:25:60:
35:88:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:26:55 2026 by rpki-client