
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
File: LZqjsNhdis2WNSgFXHSHpmkEyHk.mft (raw, json)
Hash identifier: RTg9FpjAcZte5IIqlKalmdbWn4IEOiJ6gYSMiSnh5+U=
Subject key identifier: 57:AA:6C:8E:C1:66:28:22:2F:F5:4C:7C:37:8F:42:FA:51:5A:64:5D
Authority key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
Certificate issuer: /CN=A91CD883/serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
Manifest number: 2D
Signing time: Fri 17 Jul 2026 10:00:12 +0000
Manifest this update: Fri 17 Jul 2026 10:00:11 +0000
Manifest next update: Fri 24 Jul 2026 10:00:11 +0000
Files and hashes: 1: LZqjsNhdis2WNSgFXHSHpmkEyHk.crl (hash: rTDYu3VNMZq/IsIEaXVGtW2beUdoJCeLkKTknzqHS+o=)
2: FFF0486A3D7C11F1AE97A9BABA833773.roa (hash: 8PBVOn5rHRwK4EpJUtLvYRy9A1Nxp+wwyWqks95ix4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Validity
Not Before: Jul 17 10:00:11 2026 GMT
Not After : Jul 24 10:00:11 2026 GMT
Subject: CN=6a59fd2b-48f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:55:db:c0:03:75:89:d6:ea:73:ab:b0:6c:
4c:d6:76:a2:74:15:b4:aa:e1:78:f5:1e:11:ae:15:
13:49:a0:2f:aa:d7:b4:b1:89:09:01:26:3d:6f:a4:
3a:fd:74:d7:87:46:27:8e:ac:8a:af:ea:7b:e0:84:
a6:af:a5:95:71:bd:34:c9:1d:fa:76:b5:cd:38:12:
e8:fa:b8:7b:14:ce:16:73:00:9e:6f:79:f9:61:f8:
91:d3:eb:2c:88:bc:2b:4f:28:7f:73:86:b1:54:4a:
ec:3e:0d:e2:af:5e:b5:8c:5e:ed:d8:82:58:08:f9:
b7:68:6a:2d:32:c0:cb:0e:6e:5d:ae:d1:1c:5a:d7:
ba:99:7c:de:31:a6:d8:ac:df:47:40:dc:83:25:bf:
06:62:70:bd:6e:d8:dd:4a:e6:05:18:27:c2:42:9f:
e0:b3:69:56:41:37:f5:c1:93:f3:73:3e:34:3b:9c:
db:f4:1d:06:75:dd:9d:fa:c5:1e:a6:7a:dc:03:d3:
77:55:c8:c7:65:89:3f:a4:eb:f5:5e:46:19:7c:8f:
55:b9:3d:0e:88:18:80:0e:7b:3e:b5:98:fc:4f:f0:
64:a6:45:0c:46:b7:bf:c7:09:28:a6:fa:a1:37:f6:
9d:5e:6b:98:fd:15:71:65:8b:5b:d8:fa:c3:c7:3a:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AA:6C:8E:C1:66:28:22:2F:F5:4C:7C:37:8F:42:FA:51:5A:64:5D
X509v3 Authority Key Identifier:
keyid:2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:52:13:2d:51:eb:44:5b:7d:75:39:18:12:47:41:29:7e:63:
69:7e:07:9d:fb:96:60:9f:e2:be:91:c8:cd:87:68:9e:45:74:
a1:09:50:bf:b3:15:10:43:e6:ad:1f:c5:f5:0e:55:73:08:e6:
b1:25:69:b5:b7:18:4f:c2:e8:d8:aa:a8:6a:36:0c:d3:6f:9c:
20:96:af:96:89:23:07:2b:54:12:a7:30:9f:d6:d4:6f:d2:6b:
83:e0:22:7d:c9:95:8d:c2:99:99:b5:62:c4:f6:81:5a:5d:22:
a3:7a:09:3c:7f:3b:90:7c:d9:b5:5e:fd:7a:7e:c9:80:21:2d:
44:c5:d4:23:79:8b:b4:11:5b:9c:66:e4:96:5f:1b:c5:ec:91:
6c:d0:e4:6d:1a:a0:4a:e4:09:1e:3f:ff:8a:a9:eb:2e:77:d4:
bf:5f:85:01:da:49:97:6a:26:99:57:b4:d4:b0:b6:1b:66:cc:
46:27:14:dd:03:54:14:19:3f:35:1a:0f:0d:70:69:d6:60:1c:
8f:16:35:b9:cd:5e:35:3c:89:4d:02:6b:3c:e8:4a:15:e2:86:
bd:d2:35:6e:c5:4f:f6:c6:05:0e:6c:de:8b:57:28:ad:2b:a1:
3e:d4:93:c5:74:c4:ff:7e:5e:21:59:98:3d:fb:94:2e:c2:46:
db:99:20:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:17 2026 by rpki-client