
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier: n08+KkVfVISu2uwjQoNzT8Hp51P7fEwUjxXkWUbYe8A=
Subject key identifier: CD:0A:74:AD:F7:2C:EA:37:AE:F7:B5:E0:54:E0:00:3E:F7:E7:47:4A
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number: 62
Signing time: Fri 17 Jul 2026 09:19:23 +0000
Manifest this update: Fri 17 Jul 2026 09:19:23 +0000
Manifest next update: Fri 24 Jul 2026 09:19:23 +0000
Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: iR5oMz+eFjcuN3YUqRod5PUvUuycG9vrjBnuQO6Bv8k=)
2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Validity
Not Before: Jul 17 09:19:23 2026 GMT
Not After : Jul 24 09:19:23 2026 GMT
Subject: CN=6a59f39b-8f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:22:39:36:ef:82:83:0a:1e:b3:d2:61:e9:
50:05:19:3b:a1:37:6d:96:ca:46:57:74:14:81:86:
24:0f:a2:b1:e9:4e:47:77:59:8d:a3:57:27:ca:d5:
fd:72:b1:c2:3d:dd:cf:f4:f1:ce:df:e7:33:9b:47:
bb:15:1b:df:ab:43:d9:12:e9:60:a9:d6:57:a9:b5:
8f:f4:fd:70:4a:4a:4f:3b:6b:a4:4b:e0:e1:34:6a:
2d:c4:8c:d8:f6:ea:6c:bb:90:13:bf:fc:3b:15:cf:
b5:9f:11:ca:e0:dc:f3:fb:de:dc:5f:19:3a:29:b5:
65:32:d2:4b:f3:d6:0d:85:9d:eb:28:b1:1d:e2:1b:
89:2e:19:92:fb:3b:47:83:3c:2b:10:31:de:ee:b5:
0f:81:a1:ed:40:b0:76:ac:e5:6a:62:60:16:50:0a:
e1:45:80:20:f0:d7:91:ae:85:9c:60:d8:6e:be:7b:
88:f1:1a:50:66:9b:72:ed:28:96:69:21:fd:f7:0c:
dc:0c:16:94:2e:9c:01:a3:b6:f4:34:34:9d:fd:77:
d0:1a:dc:28:cc:ed:c6:34:a6:02:25:2c:90:62:3a:
05:0a:c1:f0:e3:a6:02:8c:27:00:21:c1:8b:33:76:
ce:63:b1:ce:0c:b8:d7:c0:c4:a4:e2:3e:25:c3:ba:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0A:74:AD:F7:2C:EA:37:AE:F7:B5:E0:54:E0:00:3E:F7:E7:47:4A
X509v3 Authority Key Identifier:
keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:f4:99:96:01:b9:b2:85:38:8d:7d:90:26:8b:d4:13:f6:
39:81:09:6e:ee:c8:e7:37:4d:20:24:cd:97:21:41:d2:b8:a2:
9b:06:db:6d:dc:11:26:d0:b3:d5:6e:e9:89:d4:58:7d:d8:c0:
60:15:3b:4f:c4:f2:85:29:99:20:b2:dd:9c:76:aa:e6:cd:9a:
e3:a0:90:4f:d7:87:06:a0:9a:fd:36:4a:14:59:86:9e:2f:7c:
a0:cd:3f:58:4d:56:33:46:be:3c:ad:ab:f0:d0:67:00:85:c8:
6c:87:5f:ed:c8:f2:5a:b2:36:87:f1:f6:e6:a3:f1:da:5d:2a:
f2:e5:1b:bd:6d:20:de:75:2e:e4:6b:9b:b4:9b:5e:e6:99:25:
08:df:1e:af:fa:aa:30:53:48:c5:bf:d3:be:07:33:7e:03:81:
3c:06:75:1e:3e:9e:88:73:a2:e1:dc:07:71:90:47:34:39:55:
b3:8a:78:08:09:d0:cf:4c:11:28:70:dc:94:60:9d:05:71:53:
a4:bf:31:6d:4d:a2:dd:32:98:97:d5:27:dc:fb:c8:b3:60:a3:
eb:eb:18:a9:16:97:10:e7:ab:52:a3:7e:6e:28:24:b5:9f:5f:
15:1a:f8:23:c2:fd:72:19:f5:b2:dc:33:32:7f:f0:ce:eb:b7:
77:6a:5d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:57:17 2026 by rpki-client