
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier: YegWhO3t3NuaNMpyu4DCnSSQWpj8na8WYGPXL+3VwJ0=
Subject key identifier: 85:D4:82:B2:EA:24:F5:2F:E2:06:4C:07:51:11:69:E0:DE:FA:A0:36
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial: 08BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number: 08AB
Signing time: Tue 06 Oct 2026 20:49:27 +0000
Manifest this update: Tue 06 Oct 2026 20:49:26 +0000
Manifest next update: Tue 13 Oct 2026 20:49:26 +0000
Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: GvsNJrvM4034J5PUHSqbMQNCc0XF7No6G/Ju/2Z7k6U=)
2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: qWStS0v5bHsp5UQ+CjZRahzRxVHNB9C2cwcqgmnOyvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Validity
Not Before: Oct 6 20:49:26 2026 GMT
Not After : Oct 13 20:49:26 2026 GMT
Subject: CN=6ac55ed7-7ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:d1:56:1c:58:65:6f:35:e4:75:15:f1:8e:
cb:ad:4c:82:4e:70:84:0f:30:c4:5a:52:e3:d0:01:
4b:ad:fa:4b:17:e7:01:63:0a:ab:fd:9c:77:7d:45:
66:3d:4b:54:49:bc:ed:96:ed:81:7f:e5:65:d2:88:
8a:85:85:7a:e5:4a:63:a0:d7:c3:cf:d4:14:4a:e3:
79:c8:63:ed:54:9f:2d:40:98:e9:69:66:a1:bb:96:
ca:8c:df:ac:d4:be:d9:7e:31:10:d0:6b:b0:0c:d9:
8b:59:58:a5:c6:ba:42:d5:94:a0:76:e6:3c:a3:8c:
26:2d:15:36:01:a3:f9:fe:27:3b:0d:85:cb:bd:3b:
54:50:e2:ca:30:e0:f3:56:67:0c:3e:58:2d:56:b1:
d1:0f:c7:d2:a9:de:78:fd:b8:5a:84:0a:18:ea:54:
5e:e5:ff:77:02:55:18:b0:93:75:36:02:51:45:16:
bf:af:7e:42:a6:0f:53:7d:2e:55:c2:ce:ff:d7:2a:
67:64:e6:83:2b:73:e6:3b:fc:5f:e6:f4:dc:68:7a:
8b:12:77:48:f1:21:13:b8:25:00:c8:38:92:0a:cd:
bf:1d:a6:4f:1e:e4:3b:fa:67:0d:27:f7:f5:78:ad:
ba:29:d2:7f:37:bb:0a:e8:d7:23:93:d1:e6:d1:3f:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D4:82:B2:EA:24:F5:2F:E2:06:4C:07:51:11:69:E0:DE:FA:A0:36
X509v3 Authority Key Identifier:
keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:dd:e1:87:5a:1e:55:c6:f7:b5:0f:68:0b:be:ec:8e:38:93:
af:83:61:e1:f7:1b:60:2b:93:45:d8:a4:07:d9:20:eb:92:56:
fa:1b:54:6b:b9:27:bc:f5:00:06:34:76:64:57:f1:d6:a5:26:
0e:7e:53:89:e3:e9:d8:b1:d7:6f:4e:2c:28:03:66:c0:f1:dd:
ac:2b:2e:57:84:dc:d0:6a:6f:6f:be:4f:d1:9e:1d:f9:ae:11:
68:e5:8c:a3:8d:f4:b4:3b:94:55:eb:4f:70:cc:4f:dc:bd:f6:
1d:4f:dd:ea:f2:7d:40:e6:c2:7d:53:34:eb:32:b4:88:70:7e:
4b:09:11:4f:d3:1f:f1:30:7b:a6:5e:54:c4:9e:c5:d5:30:f6:
1b:36:c5:84:ee:14:63:e7:5b:cd:89:d0:ca:b3:75:5d:5d:85:
d9:fc:f2:2e:d4:6d:25:6d:97:fe:9a:73:ee:ba:c9:8b:3e:59:
cc:1f:98:ab:0a:bc:73:52:1d:ca:38:ea:18:65:f2:14:d0:f3:
c1:08:2f:76:49:28:e0:62:f2:44:53:3c:e4:88:05:5f:a7:1a:
8d:99:68:f2:cb:a7:88:c8:9a:5c:71:b7:64:77:3f:af:52:3e:
df:5b:9a:39:ec:a6:2e:73:c9:c6:1e:08:b0:0a:f4:11:60:87:
fe:ba:5e:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy
QzE3NkIzNzYwHhcNMjYxMDA2MjA0OTI2WhcNMjYxMDEzMjA0OTI2WjAYMRYwFAYD
VQQDEw02YWM1NWVkNy03ZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl+jRVhxYZW815HUV8Y7LrUyCTnCEDzDEWlLj0AFLrfpLF+cBYwqr/Zx3fUVm
PUtUSbztlu2Bf+Vl0oiKhYV65UpjoNfDz9QUSuN5yGPtVJ8tQJjpaWahu5bKjN+s
1L7ZfjEQ0GuwDNmLWVilxrpC1ZSgduY8o4wmLRU2AaP5/ic7DYXLvTtUUOLKMODz
VmcMPlgtVrHRD8fSqd54/bhahAoY6lRe5f93AlUYsJN1NgJRRRa/r35Cpg9TfS5V
ws7/1ypnZOaDK3PmO/xf5vTcaHqLEndI8SETuCUAyDiSCs2/HaZPHuQ7+mcNJ/f1
eK26KdJ/N7sK6Ncjk9Hm0T8QjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXUgrLq
JPUv4gZMB1ERaeDe+qA2MB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5
MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR
UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAht3hh1oeVcb3tQ9oC77sjjiTr4Nh4fcbYCuTRdikB9kg65JW+htUa7knvPUA
BjR2ZFfx1qUmDn5TiePp2LHXb04sKANmwPHdrCsuV4Tc0Gpvb75P0Z4d+a4RaOWM
o430tDuUVetPcMxP3L32HU/d6vJ9QObCfVM06zK0iHB+SwkRT9Mf8TB7pl5UxJ7F
1TD2GzbFhO4UY+dbzYnQyrN1XV2F2fzyLtRtJW2X/ppz7rrJiz5ZzB+Yqwq8c1Id
yjjqGGXyFNDzwQgvdkko4GLyRFM85IgFX6cajZlo8suniMiaXHG3ZHc/r1I+31ua
OeymLnPJxh4IsAr0EWCH/rpeJA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:55:34 2026 by rpki-client