
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json)
Hash identifier: P6CWEb312F0mwWBEftil0gvpHXRPdQWotVktHbFHiZI=
Subject key identifier: 31:0C:9E:4A:11:4F:5C:3D:92:95:1C:0C:54:D4:F5:36:72:6E:CA:5D
Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Certificate serial: 08FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
Manifest number: 08F4
Signing time: Tue 18 Aug 2026 20:38:31 +0000
Manifest this update: Tue 18 Aug 2026 20:38:31 +0000
Manifest next update: Tue 25 Aug 2026 20:38:31 +0000
Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: gIRGDLS17pzvuF8f4z3XVW9O9Kq1PXzXTUUdR4ThvqY=)
2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: ZvW50NxBS75UluAXlHVMuxFqxEWVEP7STBY/nxFqOto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Validity
Not Before: Aug 18 20:38:31 2026 GMT
Not After : Aug 25 20:38:31 2026 GMT
Subject: CN=6a84c2c7-2f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:95:f1:75:8e:22:ee:c4:72:9d:dd:60:e6:
14:68:c2:df:e0:c3:46:06:59:c8:88:37:f8:1d:a1:
5d:3e:0a:51:19:69:93:6f:2e:72:5c:98:1c:e4:24:
7f:75:7b:1e:4c:dc:d3:56:8e:a6:d4:f1:72:c0:26:
14:2a:8a:d6:83:12:b7:a2:0a:c3:b0:df:70:98:8f:
4f:7e:2f:b7:21:6b:f3:37:3a:c6:83:35:49:57:07:
fd:04:46:bc:87:01:ab:44:8f:f8:f3:f1:c0:d7:c1:
74:cc:be:3d:4c:1f:31:0e:cd:05:e8:f6:c6:c1:09:
1d:e2:4c:f7:48:ae:2f:62:69:3a:18:d3:b1:31:56:
c4:6e:76:cf:da:6c:51:ae:13:33:c3:3b:18:3b:76:
29:50:8e:31:9e:2e:8e:c6:1a:08:33:ec:2e:e4:37:
a9:54:ac:8d:d7:53:f6:c9:7d:3d:78:dd:99:6c:3f:
48:f3:72:53:c6:c6:c5:48:bb:fc:91:21:e3:8e:80:
19:ae:70:cf:da:bc:2e:b0:dc:16:4b:af:b9:69:72:
bf:37:51:63:cd:c9:4f:99:21:00:87:65:0a:bd:4d:
9a:df:14:5c:6c:a4:eb:b9:9a:bc:2f:67:42:6f:67:
bf:48:fe:4d:2d:4c:3c:48:8e:39:38:95:77:d9:8b:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0C:9E:4A:11:4F:5C:3D:92:95:1C:0C:54:D4:F5:36:72:6E:CA:5D
X509v3 Authority Key Identifier:
keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:46:40:e4:c9:b4:f5:f3:e6:7d:b2:55:e4:74:c7:52:a3:93:
d8:46:dc:fe:a5:1c:42:72:b0:d4:2a:16:88:08:04:e5:c9:f0:
a4:9c:a2:4e:f2:32:7b:3b:ae:48:20:b4:70:5d:ab:cf:6b:b3:
8b:ee:00:3c:67:8e:45:43:ff:68:fb:fe:40:f2:77:57:1b:92:
ad:56:12:2c:77:89:f5:6d:2e:02:ec:2f:cd:86:46:e7:f8:de:
e7:cb:92:c0:52:98:2c:f1:4d:c5:9a:d0:a7:87:4b:51:5c:58:
69:c9:23:ec:4a:b5:e8:67:c3:50:a1:73:86:ae:6c:f4:42:50:
a5:91:2f:34:0c:3b:62:0e:f7:55:e6:38:0b:d0:e2:f4:aa:9e:
57:53:88:bd:02:79:1b:91:c5:92:93:26:26:7a:fb:03:2c:cf:
67:78:74:80:b8:ba:a0:cb:ec:ea:9c:d4:44:97:84:16:8e:91:
66:9c:ce:69:3a:06:9d:f7:8c:53:fb:54:a2:a8:97:e1:a4:58:
43:d6:51:07:3d:9f:d4:bd:9c:b4:c5:52:01:4c:3e:48:30:f7:
47:af:5d:13:12:52:78:17:42:60:9a:26:f2:8a:cc:5d:68:34:
cf:df:fc:02:19:e7:d9:b2:be:73:41:09:29:09:65:21:11:49:
bd:12:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:21 2026 by rpki-client