
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json)
Hash identifier: WzVnb8XHenn+VKexttI54KHOeaOKan1Oo4xZrYcq118=
Subject key identifier: 3E:75:DC:55:68:2D:26:F9:6B:34:E5:A8:00:41:D5:4A:59:D4:83:A8
Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Certificate serial: 15B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
Manifest number: 15A8
Signing time: Sat 20 Jun 2026 16:41:05 +0000
Manifest this update: Sat 20 Jun 2026 16:41:05 +0000
Manifest next update: Sat 27 Jun 2026 16:41:05 +0000
Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: h9cCeE7JGCf2d3uATn1tPRRIyunglM/Nm6mpiiFwxqg=)
2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: UmzGmppb257k2JbUqMz2WDLUUiEnpITDN/OCKDDsHYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl
rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 16:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5555 (0x15b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Validity
Not Before: Jun 20 16:41:05 2026 GMT
Not After : Jun 27 16:41:05 2026 GMT
Subject: CN=6a36c2a1-32c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:9b:b3:ee:49:f0:98:fe:74:9e:a1:09:82:
9a:12:13:af:9a:72:23:d3:9d:1d:b5:0f:e2:45:8c:
b7:ee:a8:56:da:de:e5:08:5f:39:9a:2a:33:d6:c9:
44:8f:e2:0c:87:9b:3e:a1:ba:29:df:f9:35:bf:4b:
5d:5d:ca:d9:18:a6:72:b5:c1:e4:0d:49:db:65:cf:
8c:dd:ca:be:93:e3:aa:50:96:48:bb:71:f8:59:a4:
e8:80:94:90:fc:56:86:73:c5:51:64:75:d0:b2:f7:
3c:97:2d:70:80:30:73:19:14:82:84:b3:f5:26:d5:
5c:0e:58:d7:5a:3d:f6:b4:d2:fa:bc:4e:73:e0:18:
bf:2a:f8:0b:e4:0c:d0:fd:4b:f3:16:b7:6b:44:7e:
a5:09:7b:92:52:3a:79:cb:af:7d:09:6b:91:70:9c:
8b:31:58:56:b1:3c:8f:47:c8:cd:28:c2:7f:53:ad:
a0:0c:c7:93:34:49:1b:a9:1e:16:76:57:8a:0d:ca:
0a:a1:ea:6d:70:df:53:3b:17:11:14:83:4f:29:21:
be:a9:f3:8c:e0:f5:6e:93:7d:83:05:7b:d3:88:6d:
b9:95:d6:76:2a:62:7c:9f:97:6d:86:90:ba:32:15:
68:b0:b5:c7:fb:19:d8:41:dd:e2:f5:3c:0c:b6:a6:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:75:DC:55:68:2D:26:F9:6B:34:E5:A8:00:41:D5:4A:59:D4:83:A8
X509v3 Authority Key Identifier:
keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9e:03:ad:0c:0b:b2:7a:90:b2:c9:ae:de:8a:d2:95:d8:2d:
57:d1:53:6e:97:5f:6a:43:4d:68:54:5e:d7:ce:3c:e5:2f:4e:
2c:57:e9:59:ab:a2:6a:dc:5b:93:8d:d9:6f:3e:57:66:f0:32:
4f:1f:f8:a4:37:7f:bd:fe:69:7b:66:53:0f:8e:7e:1f:dd:0a:
53:e7:ae:c4:81:26:39:18:86:04:c0:cb:95:38:3c:f9:a8:fe:
4c:17:c1:4a:a4:e2:d1:a2:65:3b:f2:3c:81:29:35:ff:a8:bf:
ac:d0:e3:a3:85:3a:2f:29:f5:82:a1:b0:35:fd:c7:aa:01:0b:
3d:1a:0e:1c:8e:24:c4:ff:77:d5:96:36:7b:09:da:a6:32:b0:
e8:14:f6:3c:3c:a2:94:59:be:78:e7:94:07:fe:e2:49:e1:e4:
ca:38:d8:39:33:fe:77:af:78:9a:6a:5b:ec:69:eb:9b:67:df:
03:24:17:c0:fa:91:b8:7c:34:f0:6b:e5:8a:80:cb:2e:28:1f:
0f:8f:f9:f0:93:c8:22:25:ed:d7:51:70:50:c4:23:49:cf:2d:
d6:a2:c8:a2:ac:ce:d5:dc:05:6c:6e:9b:28:c3:1b:46:fd:00:
bb:50:f8:05:a4:54:f2:7e:af:87:22:95:1c:38:2f:8f:8c:5a:
40:05:43:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG
RDYwRTA0QUMwHhcNMjYwNjIwMTY0MTA1WhcNMjYwNjI3MTY0MTA1WjAYMRYwFAYD
VQQDEw02YTM2YzJhMS0zMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy1ebs+5J8Jj+dJ6hCYKaEhOvmnIj050dtQ/iRYy37qhW2t7lCF85mioz1slE
j+IMh5s+obop3/k1v0tdXcrZGKZytcHkDUnbZc+M3cq+k+OqUJZIu3H4WaTogJSQ
/FaGc8VRZHXQsvc8ly1wgDBzGRSChLP1JtVcDljXWj32tNL6vE5z4Bi/KvgL5AzQ
/UvzFrdrRH6lCXuSUjp5y699CWuRcJyLMVhWsTyPR8jNKMJ/U62gDMeTNEkbqR4W
dleKDcoKoeptcN9TOxcRFINPKSG+qfOM4PVuk32DBXvTiG25ldZ2KmJ8n5dthpC6
MhVosLXH+xnYQd3i9TwMtqbGhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD513FVo
LSb5azTlqABB1UpZ1IOoMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0
QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C
S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTk5Qi9ENzIyNEZGMjU0QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsx
WW5XNnoxZk50VnY5WU9CS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPZ4DrQwLsnqQssmu3orSldgtV9FTbpdfakNNaFRe18485S9OLFfpWauiatxb
k43Zbz5XZvAyTx/4pDd/vf5pe2ZTD45+H90KU+euxIEmORiGBMDLlTg8+aj+TBfB
SqTi0aJlO/I8gSk1/6i/rNDjo4U6Lyn1gqGwNf3HqgELPRoOHI4kxP931ZY2ewna
pjKw6BT2PDyilFm+eOeUB/7iSeHkyjjYOTP+d694mmpb7Gnrm2ffAyQXwPqRuHw0
8GvlioDLLigfD4/58JPIIiXt11FwUMQjSc8t1qLIoqzO1dwFbG6bKMMbRv0Au1D4
BaRU8n6vhyKVHDgvj4xaQAVDiQ==
-----END CERTIFICATE-----
Generated at Mon Jun 22 04:00:32 2026 by rpki-client