
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json)
Hash identifier: GwbF49/phqGMb3KI6yywZ6zEZPJW1DavCcO7o60JuWk=
Subject key identifier: 35:16:99:1A:AF:C4:8C:FD:EE:CD:E5:7F:6E:1C:80:94:29:11:7C:87
Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Certificate serial: 15E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
Manifest number: 15D9
Signing time: Thu 24 Sep 2026 16:42:08 +0000
Manifest this update: Thu 24 Sep 2026 16:42:08 +0000
Manifest next update: Thu 01 Oct 2026 16:42:08 +0000
Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: CYTNu2PThCFypTp8muTNj4TPhgZihr6ByvwTF/J40IQ=)
2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: UmzGmppb257k2JbUqMz2WDLUUiEnpITDN/OCKDDsHYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl
rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5604 (0x15e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Validity
Not Before: Sep 24 16:42:08 2026 GMT
Not After : Oct 1 16:42:08 2026 GMT
Subject: CN=6ab552e0-cc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:e1:9d:20:d5:3f:83:9f:cb:fc:76:b5:b7:
d7:0b:1b:35:af:a0:9b:ff:43:36:c7:29:e0:d9:84:
9d:0d:6b:c6:a5:d8:f3:f9:87:30:71:e6:b8:eb:69:
1a:87:d4:c0:ff:b2:83:c8:5b:74:7d:1e:2e:f4:b6:
df:a5:56:37:18:ef:ae:f8:d5:30:36:50:d3:13:de:
6a:30:93:02:89:5e:92:e9:ef:83:0a:88:00:f9:67:
34:94:c6:a4:1b:50:3c:eb:27:58:80:dd:92:f8:ec:
a4:c1:86:7f:a7:bd:fb:62:2d:89:09:bc:04:32:f5:
a4:ae:b8:74:32:79:11:4c:98:ae:19:f1:38:8e:2c:
ab:c2:e4:c5:01:d9:a4:73:1e:a4:eb:dd:b7:59:56:
4e:22:ed:15:15:4b:d2:be:d6:98:4f:48:1f:25:ed:
8b:24:f2:3b:d1:1a:05:f3:15:1c:18:fb:b8:77:91:
eb:6f:5d:00:bd:71:f5:d1:b2:e7:c3:28:20:9c:59:
49:7f:ba:47:4d:9f:d7:67:77:30:09:11:16:b7:c0:
cc:99:f7:89:90:a6:20:e7:e1:8e:bb:d7:eb:fb:ec:
a7:9c:76:1f:22:4d:d2:2b:9d:b9:18:91:36:49:31:
89:13:49:57:ee:46:dd:23:05:07:18:46:97:e9:cc:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:99:1A:AF:C4:8C:FD:EE:CD:E5:7F:6E:1C:80:94:29:11:7C:87
X509v3 Authority Key Identifier:
keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:71:66:2a:45:a3:7b:29:b1:0d:d0:47:ca:6c:f8:b3:06:48:
37:1d:96:ae:3c:19:3a:ed:58:52:c0:bc:ea:32:a3:b2:76:42:
73:ac:f1:db:d5:76:7e:2a:54:a3:7f:45:27:b7:df:47:31:db:
82:2e:a5:75:a6:92:d4:36:51:11:aa:80:ef:e6:6b:d4:79:ce:
a4:bf:04:23:a4:d3:30:c4:69:ed:9a:2a:29:27:f4:63:88:f4:
f7:c3:fb:46:d0:32:5e:a4:7f:85:80:d5:c0:63:42:44:58:04:
a5:a4:36:9a:ff:cd:e8:e8:8f:e7:92:55:0b:1c:44:0b:7b:17:
de:9e:5b:ac:8e:c7:35:b8:38:6a:8a:d4:cc:1f:a8:47:d8:c1:
d7:49:04:62:c8:c8:e1:62:d6:29:f7:67:b0:5b:04:7e:25:c5:
e6:ed:ea:67:ec:66:0b:bf:ba:28:25:90:b1:73:d7:77:1b:35:
d7:c7:93:d8:4f:d4:fb:30:ac:24:62:dc:14:b1:f1:af:7b:97:
6b:0e:c8:e7:dd:0f:4d:33:56:23:d7:6b:53:de:fa:d8:96:bb:
6c:36:e7:cc:26:36:80:51:09:c2:4a:9c:5e:05:8c:75:d3:ad:
0b:c1:e0:0b:91:9c:17:b8:b3:76:fa:2c:98:dd:d6:34:83:86:
06:08:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:06:20 2026 by rpki-client