
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json)
Hash identifier: GJu+CXwl5gz//QPHYV3FmiLn8tXFFegd80DAkMw86z0=
Subject key identifier: EC:57:FD:86:37:3B:6E:07:3F:86:04:64:FB:65:B9:32:CB:CE:20:7D
Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Certificate serial: 0763
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
Manifest number: 0759
Signing time: Thu 08 Oct 2026 21:57:01 +0000
Manifest this update: Thu 08 Oct 2026 21:57:01 +0000
Manifest next update: Thu 15 Oct 2026 21:57:01 +0000
Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: sBPSso2WYz8TUW0Zwm1PoG9K4+labULz4U8llRkQQ3I=)
2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: X5seaG41aTTcYS0YJ5ID592qQAd6TABWJEt0PwhEjdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 21:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Validity
Not Before: Oct 8 21:57:01 2026 GMT
Not After : Oct 15 21:57:01 2026 GMT
Subject: CN=6ac811ad-d842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:d8:58:8b:ad:fa:8a:d8:a8:8d:4a:bf:19:
f9:cc:f0:67:50:fe:48:91:e3:45:05:c3:3f:b1:9a:
67:7f:b8:3f:6a:19:f8:26:79:b1:6d:cb:93:34:d8:
9e:6b:3b:da:1f:05:9b:ff:25:d5:05:c8:3b:fd:48:
57:76:85:02:82:b7:fd:d6:22:1a:d9:77:c4:77:f0:
47:40:ed:e4:70:4a:31:8e:da:7b:05:36:ae:b1:17:
53:0b:ae:81:df:60:9a:30:08:a9:db:57:67:7e:67:
b8:8e:d0:8f:7c:ac:1a:24:e5:28:7f:b5:32:6e:b2:
fd:c9:42:21:48:96:77:34:de:90:03:b7:b3:5e:ad:
c8:9f:59:1a:ed:bb:3d:80:1e:c8:a1:70:7f:13:61:
56:48:89:6c:50:cf:c4:8c:a8:00:fb:a5:ac:53:f2:
a2:43:88:5c:de:4d:8b:11:37:6f:45:62:9b:3c:3e:
e9:ff:7c:e8:3a:fc:79:b3:52:74:a9:51:76:10:90:
eb:b6:21:65:da:3a:3e:df:5d:08:b9:e2:6a:33:07:
62:e8:c8:fa:9e:84:b1:65:92:95:6c:04:4f:05:20:
38:78:62:ab:42:e5:f0:70:6b:56:dd:5c:aa:78:1e:
61:9d:e0:dc:e9:c0:15:48:ab:dd:96:6c:26:6e:1c:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:57:FD:86:37:3B:6E:07:3F:86:04:64:FB:65:B9:32:CB:CE:20:7D
X509v3 Authority Key Identifier:
keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:53:45:91:25:e8:68:be:0c:d8:7c:44:a9:c8:ae:79:d2:47:
8f:dd:90:b1:99:be:77:61:ed:a9:a9:08:e4:ef:44:2a:3a:ee:
4b:3c:6f:0f:2a:c1:e1:e0:ac:af:e9:10:d9:99:73:ce:c4:c6:
9d:65:fb:4a:52:0d:90:86:32:cb:b4:e6:a9:9f:88:3d:83:44:
57:38:71:d9:36:9c:5f:3d:13:ca:bd:2f:e1:fb:3d:15:b6:b0:
92:ea:79:de:22:e1:67:96:7a:e3:e1:9d:14:44:fd:c9:48:3a:
9a:56:15:66:8b:6f:b4:c2:74:72:39:ad:de:da:bc:e5:14:0f:
12:36:1f:e4:ee:07:50:2c:0a:4d:91:8c:98:69:d8:ce:1c:b1:
a2:50:09:f8:1f:98:96:0a:06:37:4c:96:b6:48:ef:21:f0:ce:
62:59:22:03:cf:cf:12:be:7f:f6:bf:33:56:28:ad:ef:c9:83:
25:2a:11:49:77:41:d7:d3:c1:68:a0:b4:12:9f:5b:23:64:fb:
8b:b0:92:8f:22:81:23:3e:10:55:92:9f:95:b7:13:79:71:81:
c1:08:85:2b:89:15:12:bb:7e:78:48:ed:38:94:da:e2:03:71:
8f:fd:2c:da:6c:e9:52:54:ce:f4:3c:ed:86:1f:e7:37:8e:52:
36:ce:2e:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz
MEFEQTVGMzIwHhcNMjYxMDA4MjE1NzAxWhcNMjYxMDE1MjE1NzAxWjAYMRYwFAYD
VQQDEw02YWM4MTFhZC1kODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlkbYWIut+orYqI1Kvxn5zPBnUP5IkeNFBcM/sZpnf7g/ahn4JnmxbcuTNNie
azvaHwWb/yXVBcg7/UhXdoUCgrf91iIa2XfEd/BHQO3kcEoxjtp7BTausRdTC66B
32CaMAip21dnfme4jtCPfKwaJOUof7UybrL9yUIhSJZ3NN6QA7ezXq3In1ka7bs9
gB7IoXB/E2FWSIlsUM/EjKgA+6WsU/KiQ4hc3k2LETdvRWKbPD7p/3zoOvx5s1J0
qVF2EJDrtiFl2jo+310IueJqMwdi6Mj6noSxZZKVbARPBSA4eGKrQuXwcGtW3Vyq
eB5hneDc6cAVSKvdlmwmbhxrZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxX/YY3
O24HP4YEZPtluTLLziB9MB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1
RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzM0RC8yN0U4NjFEODg1RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFF
VG5UNnFsU1gwR2N3cmFYekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ1NFkSXoaL4M2HxEqciuedJHj92QsZm+d2HtqakI5O9EKjruSzxvDyrB4eCs
r+kQ2ZlzzsTGnWX7SlINkIYyy7TmqZ+IPYNEVzhx2TacXz0Tyr0v4fs9Fbawkup5
3iLhZ5Z64+GdFET9yUg6mlYVZotvtMJ0cjmt3tq85RQPEjYf5O4HUCwKTZGMmGnY
zhyxolAJ+B+YlgoGN0yWtkjvIfDOYlkiA8/PEr5/9r8zViit78mDJSoRSXdB19PB
aKC0Ep9bI2T7i7CSjyKBIz4QVZKflbcTeXGBwQiFK4kVErt+eEjtOJTa4gNxj/0s
2mzpUlTO9Dzthh/nN45SNs4uKw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:27:10 2026 by rpki-client