
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft
File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json)
Hash identifier: boFEIO+5YepzReNb96KyXZZ0+txI7qYDAHW09DYdRqQ=
Subject key identifier: 31:B6:56:B3:86:16:40:6A:BE:7C:0C:8B:93:ED:BF:0D:5D:15:2C:A6
Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24
Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924
Certificate serial: 0524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft
Manifest number: 0513
Signing time: Thu 10 Sep 2026 23:30:19 +0000
Manifest this update: Thu 10 Sep 2026 23:30:19 +0000
Manifest next update: Thu 17 Sep 2026 23:30:19 +0000
Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: P7QfzYq6HbLHo4z8xdTmLrikcyz9rtzkelobKAt4H7c=)
2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: zzqL67oBfa7jh21a6YkB8pxmZp3PhnTtbMccXW5iB0o=)
3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: RIwVKjVZKrFHjQ/9a+o2G3hFBPmeu0/eXYz01rKe7M4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl
rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924
Validity
Not Before: Sep 10 23:30:19 2026 GMT
Not After : Sep 17 23:30:19 2026 GMT
Subject: CN=6aa33d8b-e685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:68:cd:b4:2b:a6:06:9b:66:c6:11:c6:58:
fe:3c:84:3f:74:48:64:cb:01:5d:85:d3:1b:da:f3:
85:62:4a:b8:6f:c1:29:68:23:27:f9:6d:df:4a:69:
38:e2:a2:59:3c:d4:f2:d8:b2:a9:ff:50:ab:a8:4f:
8c:25:22:4c:b5:dd:ef:e5:f7:83:54:0d:a7:d8:92:
c6:2a:10:87:83:65:d4:ef:6a:f5:3c:85:f2:29:25:
72:2a:cf:b4:ea:9e:b3:98:cb:af:fe:48:b3:bc:b0:
5f:a6:e5:b2:15:08:ab:d7:c6:2b:aa:04:91:aa:94:
d8:8d:6e:d1:49:75:ba:35:e6:ea:94:1f:ea:ae:a7:
fb:cf:ef:47:71:60:0b:9d:66:cb:49:8e:5a:32:61:
45:05:89:81:04:ed:d6:0b:68:49:31:f0:cf:60:16:
fe:a6:14:c9:b7:b3:63:ef:eb:0c:85:a0:b8:d8:1f:
83:51:63:40:8c:69:88:ff:f7:42:84:f0:af:5c:3e:
91:c3:de:af:50:ab:d3:25:64:6c:94:ea:fd:34:b6:
8c:04:d7:5d:aa:2b:8b:8a:45:24:93:72:3c:4c:9e:
17:f9:48:0e:25:2c:bf:e0:a2:02:74:5f:23:d0:aa:
43:57:f7:7d:25:2b:b1:56:f1:e1:aa:07:59:20:0b:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B6:56:B3:86:16:40:6A:BE:7C:0C:8B:93:ED:BF:0D:5D:15:2C:A6
X509v3 Authority Key Identifier:
keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ee:b7:d4:91:f2:9e:7f:03:25:db:d8:2a:8a:ea:ef:8d:9d:
08:14:0f:ef:8b:e2:55:83:10:0a:45:a3:c3:ac:2e:37:44:fc:
12:80:18:6f:f0:4d:32:98:80:29:3f:9c:8e:73:88:e8:bb:a1:
93:3e:7d:12:76:87:3f:39:ed:fe:47:7a:4b:03:9c:8e:94:69:
f9:96:d6:38:2a:e8:e2:03:5e:5a:4f:42:bd:41:40:b7:1f:79:
d1:80:d5:e7:69:ca:d6:c7:c3:0b:ba:51:57:4c:c5:a0:49:51:
2f:68:0a:82:ea:0e:7f:56:b4:41:f9:c7:54:1b:8e:5a:8b:1a:
11:38:f2:f1:d1:7e:74:46:ea:f6:68:60:c8:87:83:64:d1:66:
1c:9a:4f:65:10:f6:06:9c:3b:44:99:2e:6a:5f:2c:98:78:92:
7f:f6:01:13:d4:c2:71:b4:a1:c2:1b:4c:66:1a:39:fc:2d:33:
14:2f:3f:3b:72:96:d2:5b:7d:3a:72:ef:8f:ce:ff:8b:e4:66:
ee:0e:0d:da:12:9d:38:8e:59:d1:5a:14:73:a3:4a:c4:df:79:
fe:1f:c8:af:c2:32:4c:07:a9:33:85:24:f2:86:1d:d5:24:6c:
6b:a2:30:17:74:22:e9:07:ed:11:17:47:53:86:ce:66:f8:98:
16:bf:62:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:56:15 2026 by rpki-client