
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
File: lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json)
Hash identifier: 0NEWys+NLjhw8bq57EY+106+omlshL4zCdGPFpcaJN8=
Subject key identifier: CF:DC:04:84:CE:43:4C:B9:55:71:02:AA:9C:FD:DD:86:1B:D9:AA:A6
Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Certificate issuer: /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
Manifest number: 38
Signing time: Tue 07 Jul 2026 09:50:23 +0000
Manifest this update: Tue 07 Jul 2026 09:50:22 +0000
Manifest next update: Tue 14 Jul 2026 09:50:22 +0000
Files and hashes: 1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: 9DPr1dWy56b29SvcVvRJo3wBEifMij8B8gwF/oxLDrM=)
2: 20763B5024C611F191287557A6833773.roa (hash: 0r6vS9qeg1815ILGWf03i2uDlWfL7ibwuznjphtmkNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Validity
Not Before: Jul 7 09:50:22 2026 GMT
Not After : Jul 14 09:50:22 2026 GMT
Subject: CN=6a4ccbdf-8870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:a8:ba:5c:30:a3:0e:3f:5d:4c:bb:2f:8f:
1f:7a:ed:2b:28:1e:28:7b:17:1e:78:a4:66:0e:fb:
01:af:fb:90:38:30:92:09:20:32:20:a2:c1:e0:20:
6c:d2:88:9a:d0:b4:a2:fe:73:46:3e:e3:e2:aa:d8:
5d:04:b4:a6:c7:c3:ff:59:28:bb:04:aa:51:b4:50:
16:49:27:d2:c1:b8:76:aa:38:04:8c:33:88:d7:96:
5e:ed:8d:4b:15:0a:33:20:79:6c:a3:5d:c6:d8:6d:
93:3f:93:87:5d:25:13:f4:ff:a5:8d:50:08:7e:7a:
03:a3:39:07:e2:28:3f:c7:46:6d:fd:b7:41:68:4e:
19:10:35:55:cd:44:5a:ce:73:ad:41:2d:ed:c2:20:
4a:9f:1e:46:ce:3a:03:31:5d:be:21:fb:3d:cb:d5:
77:89:e1:5c:2a:ec:96:7c:1d:c9:c1:01:a6:c8:44:
16:c0:cd:76:9a:21:03:0e:07:9f:16:0d:27:2b:ad:
46:79:a9:97:9a:37:92:6d:70:70:64:d9:1c:d4:82:
36:4d:d0:01:76:97:d3:b4:08:a8:bf:fe:4c:66:e4:
1f:af:64:1a:f9:8d:18:91:40:55:07:b0:c4:98:3a:
fe:ac:9f:0e:c5:e4:4a:11:26:59:e3:86:c5:48:8b:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:04:84:CE:43:4C:B9:55:71:02:AA:9C:FD:DD:86:1B:D9:AA:A6
X509v3 Authority Key Identifier:
keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:42:57:21:cf:35:5e:28:18:d0:27:41:9b:3c:50:a0:3e:ad:
2c:86:2f:bc:b5:97:b8:90:95:fb:31:8b:04:d6:3d:53:f5:63:
c3:5f:7f:8b:0d:a3:a5:39:87:99:c9:72:e6:56:b5:69:bd:fa:
c2:83:38:11:08:bb:78:71:f0:57:ac:76:f1:f3:a6:f5:ce:c2:
9a:c7:3d:25:aa:fc:41:5f:7c:dd:5a:e5:ab:3a:cf:91:58:d8:
fc:39:1b:76:63:44:d6:9f:9f:ea:e3:08:c1:78:60:d0:42:da:
2d:84:de:6e:0a:82:b9:ac:6c:48:f4:f7:50:07:bc:81:40:7e:
70:ef:c7:65:84:35:8e:20:8f:e9:eb:a8:8f:70:bd:38:e4:10:
08:a9:aa:f2:bc:c3:22:2e:80:83:ea:98:0e:94:b1:fc:fd:e4:
d0:5e:66:14:a0:5f:25:01:25:a7:37:27:c0:0c:1b:64:3e:11:
40:aa:49:49:8e:81:db:0f:99:d4:5e:ce:84:5a:1b:cf:b9:53:
c8:54:c3:ea:e9:b8:62:38:57:cb:e9:fb:94:1b:45:c2:2a:0a:
84:2c:51:68:46:ab:65:4c:60:d4:5a:63:b8:64:18:15:8b:7f:
b3:ba:69:1a:48:c5:25:30:51:64:69:4c:8d:7e:16:0b:4a:9c:
a1:2a:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:04:21 2026 by rpki-client