
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: jVAqV9vcWf1+W4KV6bmckPLy58KJ1IKAkhFoQhG1q1Q=
Subject key identifier: 69:55:2E:09:71:21:3F:07:BC:E1:EB:80:4C:E1:AF:4C:3C:1B:6D:82
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 08C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 08BA
Signing time: Tue 18 Aug 2026 20:48:33 +0000
Manifest this update: Tue 18 Aug 2026 20:48:33 +0000
Manifest next update: Tue 25 Aug 2026 20:48:33 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: +4dXfzk+L6JLRXpmiRCiEol3b+F89DM11TCeEnLNbZg=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: 3luUYeTT67yCKVIevcEjzS34/Ev6QIZEGseKDtPOfG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Aug 18 20:48:33 2026 GMT
Not After : Aug 25 20:48:33 2026 GMT
Subject: CN=6a84c521-6332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:83:6d:6b:98:be:b0:96:e7:39:4a:2e:bd:57:
3e:36:93:b0:e3:97:85:70:f0:e0:ac:b0:d8:bc:44:
ee:19:28:f1:5a:1f:1d:0a:d6:aa:ec:a9:71:a0:77:
cc:6a:8d:9c:0e:26:47:be:8e:59:72:26:38:16:da:
32:5f:75:58:13:09:35:72:24:3c:1b:b0:57:08:a9:
88:72:ed:56:75:b1:8d:46:55:fb:b6:db:4d:56:66:
7d:44:32:26:db:83:f9:bd:dd:8b:95:0a:5d:56:c0:
2b:e6:38:e7:62:20:76:23:fc:62:5b:a4:8b:ee:d3:
5e:db:c3:f1:95:c9:95:5d:24:73:65:5c:95:cc:c9:
53:3c:7c:4e:48:54:8d:b8:48:bf:c7:6b:85:01:ef:
e5:80:33:7d:dc:51:22:28:51:60:1b:3d:c0:8a:62:
c0:ca:e3:d2:94:f1:29:31:4d:c2:8d:9b:1d:c5:32:
73:24:06:d2:c0:b7:e6:8e:63:82:3d:d8:5d:70:f1:
73:30:9f:92:2e:a9:3b:d7:a3:c2:8d:9f:44:1d:04:
f9:96:2f:18:4b:46:55:18:81:51:ee:c2:08:33:9a:
b0:e8:e3:82:0e:39:9b:9e:b2:ff:7d:e5:26:26:8a:
d1:d5:7a:58:8f:2c:42:c3:66:f5:f5:aa:45:0f:eb:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:55:2E:09:71:21:3F:07:BC:E1:EB:80:4C:E1:AF:4C:3C:1B:6D:82
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:40:7a:cb:5b:f0:5a:8d:3b:09:65:3f:1e:73:26:5c:f0:
68:e0:5d:0e:99:19:77:4e:4f:58:29:0b:e9:a7:93:ca:f6:47:
35:f5:ad:e7:d2:e9:cf:66:f2:20:6e:cc:3c:ab:ef:fe:54:df:
d1:d5:ec:80:06:57:fc:00:72:2a:41:91:85:37:12:c9:0b:0b:
2b:80:d5:2e:61:13:53:41:e5:d8:da:53:61:1b:27:71:05:ac:
e9:ad:a4:f3:4b:c4:0b:df:6c:bc:ac:6a:ad:76:0f:69:fb:ad:
d4:d9:66:49:03:47:ea:ad:79:aa:4d:1f:02:e9:86:00:77:f0:
af:84:49:16:d2:fc:bf:97:6e:19:20:bf:43:99:94:6e:15:8b:
44:15:29:67:89:15:19:8c:f2:92:c0:7a:70:9e:76:f8:d9:40:
b6:77:2f:e5:ef:2a:d1:de:4c:59:43:c3:fd:d4:ad:77:1a:70:
72:5e:ca:b9:93:2b:eb:2f:f4:a6:25:b6:e2:91:cf:c1:1d:e3:
6d:91:7c:d9:0a:fe:ff:71:2b:5b:d1:47:2b:23:25:9a:9a:17:
79:41:c5:fb:7b:ad:e3:d2:47:36:13:a4:6c:41:fe:a3:f7:45:
d3:34:8e:07:4c:65:02:d5:4e:ec:7c:ce:e5:49:d6:28:9d:c8:
cf:ce:7e:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAxQUYxMTAvBgNVBAUTKDk1NUFBMzM0RDYwNzdDMTdDMDJENkQ3Q0FERDIxNTk5
MTIxRTRFRkEwHhcNMjYwODE4MjA0ODMzWhcNMjYwODI1MjA0ODMzWjAYMRYwFAYD
VQQDEw02YTg0YzUyMS02MzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjoNta5i+sJbnOUouvVc+NpOw45eFcPDgrLDYvETuGSjxWh8dCtaq7KlxoHfM
ao2cDiZHvo5ZciY4FtoyX3VYEwk1ciQ8G7BXCKmIcu1WdbGNRlX7tttNVmZ9RDIm
24P5vd2LlQpdVsAr5jjnYiB2I/xiW6SL7tNe28PxlcmVXSRzZVyVzMlTPHxOSFSN
uEi/x2uFAe/lgDN93FEiKFFgGz3AimLAyuPSlPEpMU3CjZsdxTJzJAbSwLfmjmOC
PdhdcPFzMJ+SLqk716PCjZ9EHQT5li8YS0ZVGIFR7sIIM5qw6OOCDjmbnrL/feUm
JorR1XpYjyxCw2b19apFD+vi2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlVLglx
IT8HvOHrgEzhr0w8G22CMB8GA1UdIwQYMBaAFJVaozTWB3wXwC1tfK3SFZkSHk76
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDFBRi9DRDdFNzBEOEYx
N0QxMUVBQUIzOTI1NzhDNEY5QUUwMi9sVnFqTk5ZSGZCZkFMVzE4cmRJVm1SSWVU
dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xWcWpOTllIZkJmQUxXMThyZElWbVJJZVR2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDFBRi9DRDdFNzBEOEYxN0QxMUVBQUIzOTI1NzhDNEY5QUUwMi9sVnFqTk5ZSGZC
ZkFMVzE4cmRJVm1SSWVUdm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACqNAestb8FqNOwllPx5zJlzwaOBdDpkZd05PWCkL6aeTyvZHNfWt59Lpz2by
IG7MPKvv/lTf0dXsgAZX/AByKkGRhTcSyQsLK4DVLmETU0Hl2NpTYRsncQWs6a2k
80vEC99svKxqrXYPafut1NlmSQNH6q15qk0fAumGAHfwr4RJFtL8v5duGSC/Q5mU
bhWLRBUpZ4kVGYzyksB6cJ52+NlAtncv5e8q0d5MWUPD/dStdxpwcl7KuZMr6y/0
piW24pHPwR3jbZF82Qr+/3ErW9FHKyMlmpoXeUHF+3ut49JHNhOkbEH+o/dF0zSO
B0xlAtVO7HzO5UnWKJ3Iz85+/w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:16 2026 by rpki-client