
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
File: lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json)
Hash identifier: VUtgdfzhRHJh5NHwWcUlKDMbEZ5JPvVsTyGJjOGnCpA=
Subject key identifier: B2:0D:A7:79:C1:6E:D2:24:AC:4E:C2:F9:6B:E5:82:CD:EA:BB:B3:29
Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Certificate issuer: /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
Manifest number: 72
Signing time: Sun 25 Oct 2026 08:16:42 +0000
Manifest this update: Sun 25 Oct 2026 08:16:42 +0000
Manifest next update: Sun 01 Nov 2026 08:16:42 +0000
Files and hashes: 1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: 9gFDYLPPLwh1iwgOAiZ/MZEEX7ZMnS624BiIZDhwYmg=)
2: 0190D9DAB27811F1901667443511F970.roa (hash: FYWhAcq7Avqujd9P2u3A9dXiOLrYNlsp2Zn1y3CZTn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Validity
Not Before: Oct 25 08:16:42 2026 GMT
Not After : Nov 1 08:16:42 2026 GMT
Subject: CN=6addbaea-bdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:3c:89:9c:3f:6a:4c:f7:33:52:7f:04:79:
e0:e8:cc:5c:24:7d:64:60:6a:e0:2a:03:01:68:f5:
72:f2:01:98:9e:1c:98:be:82:50:db:3c:fd:f1:9a:
e9:b4:19:99:e5:c3:06:d4:6e:4c:c3:dc:2b:4c:ab:
3f:ab:7f:bd:33:85:49:43:c5:ea:70:aa:b2:c6:e3:
ac:18:43:a4:ee:ff:f5:1b:70:5e:8e:f0:57:86:8b:
33:c6:e7:5c:73:0b:87:c3:66:8b:6b:8b:c0:58:17:
51:3a:d9:d9:cd:45:a8:29:30:c8:af:a6:bb:89:5f:
cc:80:1b:ed:1d:d1:74:b6:48:3a:39:2c:96:63:c0:
dc:7d:5c:0a:f8:15:10:ce:ea:1f:de:6e:73:ed:01:
fe:d4:45:93:9e:51:37:0b:76:e9:38:ac:94:0d:da:
03:fa:f0:14:c4:94:c7:c6:c7:d0:cd:d1:3c:7d:3d:
a0:38:29:30:8b:ff:0d:d4:0b:7f:40:38:e4:e4:89:
31:b0:7a:30:40:93:c8:55:12:5d:30:dd:a8:dc:a9:
6e:a7:9d:28:57:72:7b:a1:a4:a9:2d:77:6c:44:87:
1a:34:59:d2:e7:23:b3:76:8c:55:06:79:e8:4a:14:
a2:1b:4d:c0:11:9f:3a:fd:c3:13:9e:f7:10:7d:c3:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0D:A7:79:C1:6E:D2:24:AC:4E:C2:F9:6B:E5:82:CD:EA:BB:B3:29
X509v3 Authority Key Identifier:
keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:da:28:2f:8e:77:08:0d:13:e9:90:fb:50:74:5a:b7:ca:
99:20:3a:55:ac:22:64:01:2b:f4:41:b0:bd:30:4f:2d:19:9a:
f1:81:b2:b8:e7:4a:92:ae:67:db:cb:61:54:e7:49:71:ac:ea:
df:08:ec:50:b7:5a:c9:46:b8:bf:c7:da:3c:c0:76:eb:5d:34:
be:5e:c2:ec:63:9d:2e:46:6a:5b:0e:fd:0e:70:42:79:d8:79:
5e:7d:64:7a:f8:30:d6:e3:79:06:49:3a:5d:bf:45:e9:b9:cf:
d0:31:85:50:06:e8:5b:8d:08:db:38:c0:fd:88:6e:5d:07:3c:
fb:32:d0:37:e9:5e:2b:c7:4a:81:a6:7c:91:d0:33:b5:5a:b7:
a4:dd:db:17:98:d3:8c:16:08:ff:e3:bd:cb:f0:ba:45:8e:09:
2b:81:5e:29:39:bd:bc:d0:71:02:71:4c:83:63:8a:15:0a:6e:
09:58:66:c7:7a:cc:2a:88:18:af:9f:9e:1a:f5:13:63:c2:aa:
a8:30:eb:da:51:44:21:57:85:32:20:b9:04:4c:4f:a9:e1:ba:
a7:8c:83:2a:23:00:c0:bd:10:62:c2:25:7a:24:f1:08:11:57:
f6:a4:b8:1e:e1:a5:51:1b:aa:fa:60:ce:da:28:ec:ff:d7:c6:
1c:10:1b:1a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NkE4NzExMC8GA1UEBRMoOTZDMUJDOTg3QUQ2NjQzOTEzRjY1RTA1RDFBNjYzRjY0
QzRBRTFCNjAeFw0yNjEwMjUwODE2NDJaFw0yNjExMDEwODE2NDJaMBgxFjAUBgNV
BAMTDTZhZGRiYWVhLWJkYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtDDyJnD9qTPczUn8EeeDozFwkfWRgauAqAwFo9XLyAZieHJi+glDbPP3xmum0
GZnlwwbUbkzD3CtMqz+rf70zhUlDxepwqrLG46wYQ6Tu//UbcF6O8FeGizPG51xz
C4fDZotri8BYF1E62dnNRagpMMivpruJX8yAG+0d0XS2SDo5LJZjwNx9XAr4FRDO
6h/ebnPtAf7URZOeUTcLduk4rJQN2gP68BTElMfGx9DN0Tx9PaA4KTCL/w3UC39A
OOTkiTGwejBAk8hVEl0w3ajcqW6nnShXcnuhpKktd2xEhxo0WdLnI7N2jFUGeehK
FKIbTcARnzr9wxOe9xB9wyhZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsg2necFu
0iSsTsL5a+WCzeq7sykwHwYDVR0jBBgwFoAUlsG8mHrWZDkT9l4F0aZj9kxK4bYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTg3L0JFMDYyOEMyMjRD
NTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRrVDlsNEYwYVpqOWt4SzRi
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbHNHOG1IcldaRGtUOWw0RjBhWmo5a3hLNGJZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2
QTg3L0JFMDYyOEMyMjRDNTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRr
VDlsNEYwYVpqOWt4SzRiWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBJFNooL453CA0T6ZD7UHRat8qZIDpVrCJkASv0QbC9ME8tGZrxgbK450qSrmfb
y2FU50lxrOrfCOxQt1rJRri/x9o8wHbrXTS+XsLsY50uRmpbDv0OcEJ52HlefWR6
+DDW43kGSTpdv0Xpuc/QMYVQBuhbjQjbOMD9iG5dBzz7MtA36V4rx0qBpnyR0DO1
Wrek3dsXmNOMFgj/473L8LpFjgkrgV4pOb280HECcUyDY4oVCm4JWGbHeswqiBiv
n54a9RNjwqqoMOvaUUQhV4UyILkETE+p4bqnjIMqIwDAvRBiwiV6JPEIEVf2pLge
4aVRG6r6YM7aKOz/18YcEBsa
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:33:19 2026 by rpki-client