
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier: Rc2uBRQhZpyXDo/6IsiDWyfWvS2LRSxuz4QI/8agg6w=
Subject key identifier: F4:35:87:AD:87:A4:0C:72:44:44:29:96:DA:4F:08:F7:FB:61:2F:D8
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial: 0A9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number: 0A8A
Signing time: Tue 18 Aug 2026 19:53:56 +0000
Manifest this update: Tue 18 Aug 2026 19:53:56 +0000
Manifest next update: Tue 25 Aug 2026 19:53:56 +0000
Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: 895Imv7urUTUeF5GKEsV1QqaqppYrMeij/k/Q5cjPSA=)
2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Validity
Not Before: Aug 18 19:53:56 2026 GMT
Not After : Aug 25 19:53:56 2026 GMT
Subject: CN=6a84b854-aea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:95:d9:2b:4c:30:51:a4:4a:6d:fa:3a:1e:
d1:a5:b3:bc:1b:96:93:1e:df:34:27:10:d9:36:cd:
16:72:4e:76:a8:a8:17:3c:6f:89:b2:d0:d4:b7:32:
3d:5a:b7:c7:7b:e8:b1:6f:aa:f4:74:2a:5c:b3:ce:
75:e0:9f:01:5a:9f:0a:59:06:95:3a:6f:51:69:f0:
98:dd:68:7b:e4:15:ae:32:76:11:77:97:1b:bf:7d:
be:4d:d4:2b:9a:e1:91:01:a7:ff:b4:c2:e7:92:d8:
cd:e8:f2:d0:ae:3b:d1:ba:22:a2:53:5c:f2:c1:16:
e2:9f:bd:e2:01:07:e8:b8:06:59:0e:1b:97:d9:e1:
83:d5:2d:89:64:1a:ff:52:35:9f:31:19:89:56:9a:
14:a2:d9:fd:62:a6:14:2b:82:8c:04:b5:7a:4c:7c:
be:c2:90:11:6a:96:1d:4e:c6:67:d4:b5:c7:66:69:
fa:4d:31:97:5a:66:12:e0:3c:0d:a1:3c:cb:e5:84:
da:4c:cd:44:fa:6a:8e:aa:1e:6a:71:93:1e:c6:b4:
05:1e:07:6a:c2:92:fa:ef:f1:e5:a6:93:5b:de:ce:
b6:cd:63:96:a7:44:84:e9:67:e2:04:af:02:6e:19:
46:e0:d6:9f:d6:e9:31:4a:27:76:0c:6e:18:c5:58:
80:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:35:87:AD:87:A4:0C:72:44:44:29:96:DA:4F:08:F7:FB:61:2F:D8
X509v3 Authority Key Identifier:
keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6d:42:ce:0c:ec:ae:fd:ed:0b:e5:2c:a4:cd:e2:07:18:0b:
9f:c5:51:ef:28:ae:4c:5b:26:98:d1:bc:09:11:ab:83:43:7c:
d9:de:6a:88:d0:0f:f6:15:0b:3d:63:ce:65:e5:50:59:67:41:
06:c2:1c:4c:27:ed:5e:0a:26:ce:c6:57:ef:24:a0:3d:d4:9d:
b0:bc:81:35:86:c4:06:32:3c:66:12:a8:80:0a:51:b5:76:ae:
27:2b:de:10:60:83:b9:2e:27:81:d8:d3:74:dc:22:d6:2c:ce:
0f:ca:4d:bd:45:e7:ee:93:f0:83:bf:66:1b:3e:4e:59:93:a6:
9e:7e:ca:11:c5:f4:f1:de:e3:8b:a8:83:36:94:08:73:02:ea:
e7:cd:70:39:0a:c3:06:dc:4b:04:0d:64:9f:04:38:e0:ba:4d:
08:3f:0f:04:b0:9f:17:b8:06:e2:93:95:42:69:56:84:e5:f9:
c4:ec:88:6f:1a:a5:7f:f4:f4:49:92:d0:66:19:bd:48:68:4f:
d0:e0:70:62:e3:0e:01:98:7e:fc:2d:4f:61:0e:23:ff:31:59:
67:33:06:ac:da:af:80:ea:c0:40:79:3f:29:24:71:ae:39:6f:
bd:32:7c:0d:28:1e:36:d3:61:a6:a9:25:39:7e:51:5b:db:81:
aa:75:9a:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx
OTg5MTkzQTUwHhcNMjYwODE4MTk1MzU2WhcNMjYwODI1MTk1MzU2WjAYMRYwFAYD
VQQDEw02YTg0Yjg1NC1hZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu1qV2StMMFGkSm36Oh7RpbO8G5aTHt80JxDZNs0Wck52qKgXPG+JstDUtzI9
WrfHe+ixb6r0dCpcs8514J8BWp8KWQaVOm9RafCY3Wh75BWuMnYRd5cbv32+TdQr
muGRAaf/tMLnktjN6PLQrjvRuiKiU1zywRbin73iAQfouAZZDhuX2eGD1S2JZBr/
UjWfMRmJVpoUotn9YqYUK4KMBLV6THy+wpARapYdTsZn1LXHZmn6TTGXWmYS4DwN
oTzL5YTaTM1E+mqOqh5qcZMexrQFHgdqwpL67/HlppNb3s62zWOWp0SE6WfiBK8C
bhlG4Naf1ukxSid2DG4YxViA8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQ1h62H
pAxyREQpltpPCPf7YS/YMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC
RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3
czluNm9yNlhRb2daaVJrNlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAum1Czgzsrv3tC+UspM3iBxgLn8VR7yiuTFsmmNG8CRGrg0N82d5qiNAP9hUL
PWPOZeVQWWdBBsIcTCftXgomzsZX7ySgPdSdsLyBNYbEBjI8ZhKogApRtXauJyve
EGCDuS4ngdjTdNwi1izOD8pNvUXn7pPwg79mGz5OWZOmnn7KEcX08d7ji6iDNpQI
cwLq581wOQrDBtxLBA1knwQ44LpNCD8PBLCfF7gG4pOVQmlWhOX5xOyIbxqlf/T0
SZLQZhm9SGhP0OBwYuMOAZh+/C1PYQ4j/zFZZzMGrNqvgOrAQHk/KSRxrjlvvTJ8
DSgeNtNhpqklOX5RW9uBqnWamw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:58 2026 by rpki-client