
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier: AA0tRYH+b3kGw021vfwkg+P/XizrZEOoeJBEbWjlVEM=
Subject key identifier: 01:F4:BD:3B:5A:39:52:5C:B1:DE:00:89:87:83:EA:0F:47:36:F0:42
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial: 0AB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number: 0AA1
Signing time: Fri 02 Oct 2026 19:48:45 +0000
Manifest this update: Fri 02 Oct 2026 19:48:44 +0000
Manifest next update: Fri 09 Oct 2026 19:48:44 +0000
Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: TarHbjPhw512mgaDUS1B8ZNl631ASvFFFwdbx0Cd/Zo=)
2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2741 (0xab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Validity
Not Before: Oct 2 19:48:44 2026 GMT
Not After : Oct 9 19:48:44 2026 GMT
Subject: CN=6ac00a9d-0f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:41:7f:04:58:6e:70:45:a2:1b:9b:23:69:
7a:3a:56:fe:13:95:6d:94:80:7c:64:48:fc:0e:c6:
9f:91:9b:30:db:a6:11:e2:4f:24:35:3a:67:84:ad:
09:92:04:f5:08:3e:f5:0b:ca:a3:47:1a:bc:f9:dd:
03:1b:88:da:4a:3b:8f:9b:a6:dd:6b:ea:a9:1a:56:
f3:1b:4d:f7:58:0f:19:a0:c0:3f:84:c7:f1:02:3e:
51:02:9c:eb:8d:69:e0:a8:35:63:41:33:cc:b6:99:
ef:47:04:f5:e0:eb:a5:4b:4e:66:27:f9:d0:59:5a:
95:e6:7e:ff:ad:4a:ee:1b:2e:d5:30:96:37:56:78:
6c:44:15:20:c7:7c:7f:85:1a:94:dc:01:ea:26:be:
ba:89:e8:95:f3:96:ed:81:38:f9:08:56:3a:0c:46:
0f:5a:7f:df:ed:ca:64:c8:6e:e3:bc:c6:80:52:7e:
23:7e:ad:72:50:5d:05:dd:b4:4e:02:d8:bb:10:b6:
da:b5:ce:ef:bf:38:30:4a:18:ef:8c:ad:2c:b0:64:
23:a0:71:fb:65:89:d3:5c:21:30:31:66:7c:bf:50:
09:e1:de:3c:2b:66:2c:7d:ea:bc:ee:3a:18:8f:6c:
e3:d6:6e:f9:26:52:65:8f:c8:99:12:14:4a:b3:58:
cd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F4:BD:3B:5A:39:52:5C:B1:DE:00:89:87:83:EA:0F:47:36:F0:42
X509v3 Authority Key Identifier:
keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:b4:97:34:07:05:cd:0a:3a:15:2a:27:43:ee:94:8a:e1:7b:
39:80:4f:10:c2:70:0f:d6:f7:0a:c3:b4:f0:25:d6:d1:97:5b:
4f:49:97:b0:27:7c:53:68:9f:26:ec:93:d9:60:fd:32:03:b2:
56:21:2b:db:6d:3e:dc:d4:1b:5e:29:ec:9f:dc:73:17:1c:72:
f8:8f:64:57:64:8e:17:97:b4:9d:b9:ff:10:99:2b:49:97:f2:
a0:4d:a1:4e:be:23:88:21:c1:3c:55:98:3f:15:d1:9a:99:29:
03:0c:30:ba:d9:9c:d6:f4:6c:96:a3:56:9e:67:17:57:bc:5f:
7f:2b:14:16:0b:78:9f:6f:1a:ac:ef:4f:b7:4b:b1:cd:02:43:
b6:ec:81:f6:bf:2a:bd:5b:b3:70:49:a5:1c:7f:23:95:9c:d5:
30:88:52:0c:a6:4f:fb:93:5f:3e:2d:19:2d:38:c0:4e:02:7b:
9e:a7:6e:e0:b9:92:79:e6:fe:12:21:5a:34:4e:58:25:43:f5:
c6:14:30:0d:1d:9f:20:f9:05:02:9a:dc:73:2e:d6:ab:19:7b:
82:fb:f2:99:f4:91:f3:02:a5:8c:65:6b:81:5a:8f:f3:37:f5:
39:1f:c0:fb:a0:88:ca:51:80:0e:7d:7a:0c:c4:3d:43:6b:d8:
81:ce:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:05:36 2026 by rpki-client