
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier: 97H0L9PzEmDGJ6DTeyme2nTBRv8eNxA1J9DoH1eDSXk=
Subject key identifier: 21:54:24:C7:2E:E9:B9:A4:60:73:8B:9D:AA:39:76:2B:DE:95:7F:BB
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number: ED
Signing time: Sun 25 Oct 2026 06:51:55 +0000
Manifest this update: Sun 25 Oct 2026 06:51:54 +0000
Manifest next update: Sun 01 Nov 2026 06:51:54 +0000
Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: +40FyVqvVm0HmyB9905Jg2YgzvS4TUSWg8N6J8uDh7o=)
2: AFD8C9F0A4E311F18DF958E06811F970.roa (hash: Lrk9LTcg/bv+vbM0honqqAUz9KhJdQc3X7h5xz+fH0E=)
3: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: Aiqr1BZcTds3P/iXTe2jF+OrDs76X3Zs65sOq3vVPbg=)
4: vm-m4NmypyOFpQCYpZK4hhgAvvg.asa (hash: DOI9hPKC1i4e0v5+qepnp8+dbckDpzsHh7vM8oGqjpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 06:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Validity
Not Before: Oct 25 06:51:54 2026 GMT
Not After : Nov 1 06:51:54 2026 GMT
Subject: CN=6adda70b-776f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:f8:ae:2c:84:4c:df:e7:2e:47:4f:af:a7:
30:c8:07:2c:16:de:97:e8:de:0f:a0:21:b1:f0:46:
41:2e:ea:9e:37:23:78:ba:49:6e:64:ac:be:20:0d:
1b:24:47:15:7b:5c:c3:4c:1f:ad:c6:fb:2f:a9:c5:
c2:f1:cf:bd:78:ae:2d:35:32:36:8d:2a:46:5e:04:
20:dd:e3:41:e6:ea:ec:48:de:e4:71:b1:d0:c8:9d:
11:dc:ba:e8:f3:25:1d:fb:96:bd:1c:98:5e:de:4d:
0f:24:da:0b:83:37:fd:b4:ab:74:bd:1d:ee:7b:84:
95:20:c5:56:a8:7e:fb:15:5d:55:c0:42:e1:17:7c:
b8:cf:12:97:bd:31:1a:e4:ca:1c:49:03:f5:a1:77:
a6:a1:2f:a4:ed:a5:32:fe:48:e3:c8:2e:8a:34:b7:
81:ef:04:83:b1:8c:12:27:0e:a0:9c:7c:69:8c:64:
95:b4:11:a3:4e:f6:ee:02:00:5a:05:f5:b3:24:41:
ba:cb:14:79:b4:d7:a5:ac:8d:73:5b:96:19:17:64:
8a:05:c6:bb:b0:e9:b5:ed:ea:0c:fa:ef:a3:ef:d7:
53:98:19:99:0a:d8:96:ce:db:e1:a3:44:48:7f:50:
d7:ee:60:47:db:19:09:8c:ea:ea:1f:dc:c9:93:ed:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:54:24:C7:2E:E9:B9:A4:60:73:8B:9D:AA:39:76:2B:DE:95:7F:BB
X509v3 Authority Key Identifier:
keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:f2:32:3f:88:b7:26:48:a1:21:ff:f3:7c:d0:ab:d1:4f:e7:
b8:c7:26:ba:b1:9e:95:fa:ca:73:4c:66:ce:0e:1f:88:92:db:
60:69:a1:ff:9f:33:8a:95:7c:d8:e1:dd:1c:c4:57:b7:13:d4:
a5:62:bb:d9:67:cc:f5:6e:4e:cf:05:3b:36:9d:07:2b:fc:f8:
41:e4:a8:49:32:36:fa:f7:b9:4f:7f:27:b5:a6:aa:92:93:ce:
15:8f:10:5c:63:d6:8e:31:10:9b:32:93:2b:3d:48:d5:14:23:
26:8b:5b:78:94:39:aa:73:a8:14:de:9c:63:49:17:81:86:98:
f2:64:6a:14:40:1d:fc:5e:2c:2e:08:43:9c:81:1c:3f:01:fc:
d1:1e:f3:57:b9:99:86:8a:08:4d:ea:5e:22:da:0e:c6:18:15:
68:51:ec:a6:88:d2:a0:ea:43:63:f6:19:6c:48:b6:bf:9e:7a:
f3:3a:6f:22:c6:a0:c8:39:e9:a9:8d:16:d9:0b:74:70:5e:f6:
e1:7f:df:0b:cd:8f:e2:d6:dc:86:d5:c2:ab:a8:d4:4d:34:12:
06:bf:33:dc:22:45:bd:19:2e:ff:1e:3b:59:cd:68:d4:65:16:
3a:db:3e:6c:6b:04:14:0c:da:40:40:04:44:03:fe:cd:24:3c:
31:69:1a:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg0MzIxMTAvBgNVBAUTKDk2RkMzRDFGODc5NUJFRTlFQUExRUI5NUQyOUE1OUM4
QTQwMjczRDMwHhcNMjYxMDI1MDY1MTU0WhcNMjYxMTAxMDY1MTU0WjAYMRYwFAYD
VQQDEw02YWRkYTcwYi03NzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtiL4riyETN/nLkdPr6cwyAcsFt6X6N4PoCGx8EZBLuqeNyN4ukluZKy+IA0b
JEcVe1zDTB+txvsvqcXC8c+9eK4tNTI2jSpGXgQg3eNB5ursSN7kcbHQyJ0R3Lro
8yUd+5a9HJhe3k0PJNoLgzf9tKt0vR3ue4SVIMVWqH77FV1VwELhF3y4zxKXvTEa
5MocSQP1oXemoS+k7aUy/kjjyC6KNLeB7wSDsYwSJw6gnHxpjGSVtBGjTvbuAgBa
BfWzJEG6yxR5tNelrI1zW5YZF2SKBca7sOm17eoM+u+j79dTmBmZCtiWztvho0RI
f1DX7mBH2xkJjOrqH9zJk+030wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFUJMcu
6bmkYHOLnao5divelX+7MB8GA1UdIwQYMBaAFJb8PR+Hlb7p6qHrldKaWcikAnPT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQzMi9GQjY4NUIxRTZD
NTAxMUYwODk5ODA3NEJDNEY5QUUwMi9sdnc5SDRlVnZ1bnFvZXVWMHBwWnlLUUNj
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODQzMi9GQjY4NUIxRTZDNTAxMUYwODk5ODA3NEJDNEY5QUUwMi9sdnc5SDRlVnZ1
bnFvZXVWMHBwWnlLUUNjOU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk/IyP4i3JkihIf/zfNCr0U/nuMcmurGelfrKc0xmzg4fiJLbYGmh/58zipV8
2OHdHMRXtxPUpWK72WfM9W5OzwU7Np0HK/z4QeSoSTI2+ve5T38ntaaqkpPOFY8Q
XGPWjjEQmzKTKz1I1RQjJotbeJQ5qnOoFN6cY0kXgYaY8mRqFEAd/F4sLghDnIEc
PwH80R7zV7mZhooITepeItoOxhgVaFHspojSoOpDY/YZbEi2v5568zpvIsagyDnp
qY0W2Qt0cF724X/fC82P4tbchtXCq6jUTTQSBr8z3CJFvRku/x47Wc1o1GUWOts+
bGsEFAzaQEAERAP+zSQ8MWkaVw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:25:39 2026 by rpki-client