
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier: YDtiHVOKD9LyMciO8C1fRDriSOdtUl2ntIk7n4sLjag=
Subject key identifier: 10:2C:2F:25:4D:47:54:4B:DD:94:D5:8D:FC:17:45:DA:12:E0:22:CA
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0C77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number: 0C48
Signing time: Sun 26 Jul 2026 19:08:00 +0000
Manifest this update: Sun 26 Jul 2026 19:07:59 +0000
Manifest next update: Sun 02 Aug 2026 19:07:59 +0000
Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: ynweVQ6tGBy8uey1l9YyYX4DjRjzBDBskx3+e4TOgCQ=)
2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: MY+T8lD7ELcNmfXtDFy1DozxA/ZjKMCtGQcsDkI7xHM=)
3: D7D5B86859E811ED85614349C4F9AE02.roa (hash: TWRBYTEu2YvhIheWJBNIRcOrfed1qkUI5EpJZHqUja8=)
4: F8088528E65D11EDB5112931C4F9AE02.roa (hash: jPSPyzxZ2jIKGy878SzguBP9UIeeLmvl0IzeDBo7IuY=)
5: D9173AE459E811ED85614349C4F9AE02.roa (hash: SuPmWKkBjA+MG2np2cJm+aHvROfST1rUMzPE+o3Kdeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3191 (0xc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: Jul 26 19:07:59 2026 GMT
Not After : Aug 2 19:07:59 2026 GMT
Subject: CN=6a665b10-b030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:11:5f:0f:6c:0d:a2:55:b8:62:29:a8:9b:
37:09:e8:93:61:ce:a1:4c:7a:e3:0b:26:db:04:d8:
87:50:13:ac:12:10:5c:04:f3:d5:56:e0:8c:dd:83:
7b:73:02:ce:78:71:0c:20:d4:e8:48:2f:07:79:a9:
bb:b8:6b:91:72:72:50:df:e3:30:95:1b:03:5e:21:
ee:b2:c1:70:b4:7b:bc:aa:86:a4:67:3a:01:19:97:
46:0a:ca:b8:9c:fa:c7:dc:fe:35:20:d8:d1:a7:9d:
79:14:b1:19:ad:3a:7d:74:0a:bf:0a:fe:42:98:32:
ec:78:6d:0c:5d:0e:fc:28:6a:e8:f6:49:a8:78:dc:
3b:7c:8b:b6:a2:2f:6d:e0:f2:e0:6a:c3:8c:f8:bf:
94:55:ac:30:9a:7e:22:6f:cb:93:9e:f2:57:43:1d:
25:3d:a7:a4:67:b2:1c:a9:9a:a3:7c:93:21:af:62:
87:a0:d7:ef:c7:10:79:05:d7:ac:ac:c8:3d:cd:f8:
83:eb:a9:56:e6:1f:95:cc:e2:3d:d9:50:12:4b:5e:
ba:10:85:0d:39:c7:d9:54:54:ec:76:ca:7f:3d:20:
0a:7a:73:f8:86:b0:67:1e:7f:42:9b:e5:60:e2:65:
0f:e3:89:59:a0:30:b5:18:df:9b:12:b9:ed:3c:9e:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:2F:25:4D:47:54:4B:DD:94:D5:8D:FC:17:45:DA:12:E0:22:CA
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:da:cc:60:11:e0:e9:a3:69:b8:81:2b:39:18:b8:09:d8:3e:
7a:f6:c5:d5:5e:af:69:5c:d3:1b:c5:ff:67:6e:e2:42:04:2c:
bc:db:f2:65:eb:91:a6:87:68:0f:81:87:ad:99:8c:16:0e:58:
a9:3c:2e:8b:85:88:28:98:b1:83:d7:b0:a5:87:83:2d:93:53:
2e:0f:5b:fe:08:13:b6:80:c7:36:ac:3b:ce:96:53:19:ac:d0:
2b:ec:b8:21:bf:36:13:39:6e:40:54:be:8d:db:22:18:9c:2e:
0a:8b:d5:36:32:ce:6e:5c:0a:17:ca:45:3a:af:33:e3:23:55:
4b:e9:b1:b7:d7:74:fb:82:b2:b4:e3:78:f1:a3:1f:5b:9f:bf:
92:ef:46:ac:71:ac:4f:78:4f:bb:ed:07:b3:37:10:fa:7d:f6:
a7:1f:d3:11:36:f3:7f:d6:74:88:2e:38:be:8f:cb:30:a7:ae:
33:93:f6:cd:58:84:de:fa:c6:e6:87:a6:c5:90:1e:1b:90:68:
71:35:27:72:af:a0:e7:31:b1:b1:48:9f:d8:de:f3:f6:d4:c7:
f3:43:3e:ec:0a:a9:be:33:38:41:70:cf:17:aa:37:bb:21:5c:
d3:17:e8:bd:49:96:c2:c9:ff:0a:fa:da:52:a7:2f:55:63:bf:
2e:29:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:41:45 2026 by rpki-client