
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json)
Hash identifier: e/dGFxCnbKBJ9GdFPrMERKhF8rmNWKQvDubMgcm6VIE=
Subject key identifier: 3A:27:9B:E7:46:D1:F5:B7:97:B3:50:04:E2:09:57:88:4E:01:7B:A4
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial: 0790
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
Manifest number: 12C0
Signing time: Tue 18 Aug 2026 17:13:16 +0000
Manifest this update: Tue 18 Aug 2026 17:13:16 +0000
Manifest next update: Tue 25 Aug 2026 17:13:16 +0000
Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: bsDJ3wjyT+lc6yI7N0JK85/lr3o2XHpqWw8ZA1LO7OA=)
2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: Fr+3c6RpSKSYZINS3tB5kOz0vDzbNjiqKIyeQ9IGWSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3
Validity
Not Before: Aug 18 17:13:16 2026 GMT
Not After : Aug 25 17:13:16 2026 GMT
Subject: CN=6a8492ac-21dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:19:70:bf:c0:e2:af:85:07:72:91:93:43:
de:06:54:cc:48:92:da:c3:13:a5:27:4c:26:89:37:
25:97:02:3c:f4:59:07:7f:99:a1:aa:ed:be:24:25:
cb:b6:9d:bb:20:f6:0f:17:df:ee:44:1e:78:f9:d2:
2e:6c:02:a5:f4:83:89:39:c1:ce:af:5d:35:fe:24:
bd:6e:29:81:a6:c7:11:5a:b4:de:12:80:82:c1:ea:
ea:03:00:15:0d:da:4f:75:61:1c:aa:32:63:af:b8:
96:67:f9:93:1d:22:66:b0:89:cc:64:95:87:3d:c5:
8d:c2:c2:fb:bb:3d:8b:6d:02:e1:a1:db:c4:62:01:
f5:aa:93:5b:43:db:04:38:33:73:e6:e1:9d:6c:8b:
c5:5c:af:26:5a:9b:e6:18:a4:56:38:fb:45:2a:b5:
62:e8:fb:72:c5:f3:77:f9:fd:0f:32:25:36:bd:dc:
e9:6c:36:11:3d:64:d1:70:4c:b5:63:83:77:79:e1:
58:c5:57:3b:48:39:f4:17:f3:78:1b:7a:1a:5a:09:
c1:ea:77:91:78:d2:8e:4e:b5:41:d7:bd:75:8d:64:
e8:10:d3:c0:37:8a:58:9b:b5:ed:78:1c:cc:22:a5:
d0:af:61:16:99:a7:cc:fc:6d:90:fe:0a:aa:71:a6:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:27:9B:E7:46:D1:F5:B7:97:B3:50:04:E2:09:57:88:4E:01:7B:A4
X509v3 Authority Key Identifier:
keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:18:b0:58:5f:32:86:bb:fc:57:e0:c4:d4:ee:19:49:5c:ca:
26:4e:c1:6c:94:f2:20:e0:fd:6d:87:0a:0e:ed:05:29:aa:cf:
1b:5f:ec:1f:f6:43:09:61:5f:3f:ad:4f:dc:e6:7c:d2:30:05:
2d:d3:a3:86:7f:a7:73:7b:04:41:35:33:66:84:af:55:11:31:
81:2a:8d:01:dd:a0:15:16:4f:c0:72:78:86:a0:44:75:5c:24:
a8:c5:d6:b0:47:ec:0e:79:59:90:69:f9:dd:60:9a:ec:9a:88:
49:0e:fe:a5:10:8c:c7:cf:1d:0b:c0:d7:58:31:f5:52:d3:d5:
28:2a:f8:3a:5c:5e:9e:0f:c8:c2:69:0d:68:ca:57:9f:f5:98:
d5:66:a6:0a:76:ab:aa:82:0a:45:01:14:67:30:9d:c4:d5:21:
ec:95:c2:2c:23:f5:49:10:cf:9e:5f:fb:3f:52:3e:93:6e:57:
0e:fa:79:87:cc:05:45:97:a6:2d:98:e8:99:7b:a1:69:34:91:
7e:b2:ad:f1:2c:8b:43:ac:01:d8:c0:52:bd:07:09:7c:65:2e:
62:d9:5e:54:5d:c5:8a:5b:92:dc:85:81:07:73:74:b3:42:dd:
81:33:b0:25:3d:c6:38:ac:e4:13:87:05:96:5e:23:e8:73:c8:
21:f0:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:37 2026 by rpki-client