
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
File: laNNlXWF4FXwNo5HTaPR-bvPqN8.mft (raw, json)
Hash identifier: K8mb4ZCZVV4GAcqi8dN+TCVw1YiB2e/LWTubPu+vvZo=
Subject key identifier: 37:A0:63:E3:52:C9:75:96:2C:19:00:72:37:2B:B5:C4:3A:34:18:F4
Authority key identifier: 95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
Certificate issuer: /CN=A91D2B56/serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
Manifest number: 3D
Signing time: Wed 19 Aug 2026 09:14:09 +0000
Manifest this update: Wed 19 Aug 2026 09:14:08 +0000
Manifest next update: Wed 26 Aug 2026 09:14:08 +0000
Files and hashes: 1: laNNlXWF4FXwNo5HTaPR-bvPqN8.crl (hash: c4Pw49/oFgZE8l+lHLt5uAUXOFFc/tmgYf+XXhNqe3w=)
2: 04EDE6343E2B11F1B4A6C6E4B6833773.roa (hash: iVmvGDCFN84Pkf1vGvrKze2zsX7JLtz20kszTrEJLI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B56, serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Validity
Not Before: Aug 19 09:14:08 2026 GMT
Not After : Aug 26 09:14:08 2026 GMT
Subject: CN=6a8573e1-c9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:8d:b3:b2:68:8a:93:52:79:60:30:5a:7b:
31:48:29:65:64:75:68:e5:1c:c8:a6:86:97:ed:a1:
1b:34:44:45:1b:f0:08:e4:8c:c1:1b:dc:72:b5:98:
67:47:52:a1:db:a8:b0:1d:55:47:11:8f:b1:a6:80:
e3:85:0f:15:d6:63:39:44:6b:68:8b:bd:db:f1:52:
3f:af:34:3f:dd:eb:68:ee:d6:bf:ab:e9:ea:31:c4:
97:1b:2d:1f:20:66:aa:3f:dc:29:4c:bc:e9:17:42:
cc:1c:99:a0:60:5b:67:6c:f0:fd:53:84:d7:b7:92:
99:43:5f:b5:90:b2:45:fa:d8:91:de:7c:d5:db:29:
56:11:49:44:e0:94:d8:79:82:ef:64:e2:e7:87:63:
9d:c2:bb:99:8e:6a:c6:15:79:5d:45:e1:0e:32:ab:
74:5a:7a:d6:ad:ae:c8:d4:24:be:fa:8a:8e:38:5d:
3a:6f:b0:79:eb:b2:77:3f:18:49:47:06:86:2e:ef:
25:59:d7:26:06:63:5e:02:b2:7a:e3:7a:d3:f2:0d:
14:42:91:cf:fc:33:bf:e5:88:00:cb:0f:7b:ab:a0:
38:37:94:22:a5:75:21:8d:66:fa:9f:e6:de:63:62:
e0:eb:71:24:57:4c:3a:4c:79:19:ab:24:bb:77:d7:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:63:E3:52:C9:75:96:2C:19:00:72:37:2B:B5:C4:3A:34:18:F4
X509v3 Authority Key Identifier:
keyid:95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:d7:d1:e6:dd:23:3c:eb:9d:3d:c1:df:f8:c2:18:ee:55:c7:
af:72:e9:b6:14:54:f9:16:a7:11:17:01:c4:c9:30:ed:4a:85:
c8:ac:22:ad:07:76:6f:e4:35:2b:bc:b3:57:a3:f9:43:1a:73:
5d:b7:3f:d8:63:ed:59:45:e5:d3:c6:49:21:33:96:77:d5:93:
2c:69:e3:ca:46:71:48:13:21:6b:56:7d:7b:82:ca:bf:f8:e1:
12:75:16:55:33:94:20:bf:0c:21:46:e1:e4:37:92:1b:7e:52:
ad:ba:8c:22:a8:7a:bf:84:ab:0c:f7:ce:fa:3e:ed:b2:b3:e2:
57:e4:28:7c:3b:ff:62:1f:4c:28:26:9e:3d:47:ec:e2:0a:82:
2d:aa:0d:4b:16:af:b1:26:e8:a8:8e:02:9b:1c:9c:5d:38:88:
1c:9a:c3:99:36:f2:89:bf:e7:de:28:9c:20:1b:2e:8f:52:35:
d6:cb:61:4a:f3:d8:fd:ae:33:05:d9:ea:71:bc:b4:7f:28:47:
9a:7d:ce:c1:c0:ec:01:63:71:6a:8b:11:ec:46:ac:ae:1b:b1:
06:4e:8f:5d:b8:23:8b:24:76:43:4b:bd:38:b3:9a:5c:1f:ae:
7a:f6:41:ad:a0:45:71:1f:b3:b7:9d:ff:2f:f9:9c:da:15:7a:
cf:3e:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:26 2026 by rpki-client