
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier: MslCXdX0uJUq5c2pKxMESFWdFGvskbeW3ET6MeY67u8=
Subject key identifier: E5:AB:6A:3A:68:2F:90:36:BD:A8:33:E4:30:0F:5B:C4:A5:BC:FA:A1
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number: 91
Signing time: Sat 17 Oct 2026 08:12:01 +0000
Manifest this update: Sat 17 Oct 2026 08:12:01 +0000
Manifest next update: Sat 24 Oct 2026 08:12:01 +0000
Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: K7hWeyWvXCfz91WSUc6nby4nWkg1+EuGSRnGCckRt2o=)
2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 08:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Validity
Not Before: Oct 17 08:12:01 2026 GMT
Not After : Oct 24 08:12:01 2026 GMT
Subject: CN=6ad32dd1-4729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:65:c0:5f:de:31:26:8d:7d:e3:3b:a4:52:
2c:47:f5:9d:ab:7e:53:c8:f4:7e:55:30:61:be:10:
6c:f7:99:0b:22:20:13:e7:35:e4:f4:a5:6c:33:71:
77:79:dc:0f:f8:64:ed:14:81:2c:d3:17:72:d6:ac:
76:5f:c2:e7:11:e2:75:c4:05:73:0d:d2:bc:4c:d4:
b4:f7:f7:15:72:1a:2c:d0:1d:28:9f:cd:26:7c:fe:
b9:e5:77:6b:df:19:69:1b:68:a1:6a:d8:37:fc:a0:
9d:af:10:30:5c:5e:56:4a:3d:8b:c6:0b:bf:ee:80:
47:dd:6a:a3:0c:3f:2b:c4:0e:15:9e:49:29:43:b4:
0c:6b:e2:9e:76:80:18:34:6d:76:9a:70:3f:79:b8:
c4:6c:84:d3:84:bd:64:08:de:3f:e3:2f:ec:50:16:
ba:7b:22:11:61:e7:77:29:91:8a:d2:09:5b:f6:30:
b3:3c:32:6c:09:c8:7a:1b:a5:94:ec:03:6d:16:fa:
7f:12:14:df:7f:d8:08:04:42:fc:84:a4:63:63:e8:
14:01:a1:2a:59:cd:57:e2:0c:8f:ed:4b:a2:e5:97:
42:ff:87:ed:e8:ab:9d:cd:f2:cc:c4:0a:b9:7f:56:
9b:c8:b1:a4:2d:ec:c3:b8:b2:72:3d:a7:a9:e9:e8:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AB:6A:3A:68:2F:90:36:BD:A8:33:E4:30:0F:5B:C4:A5:BC:FA:A1
X509v3 Authority Key Identifier:
keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:bd:0e:32:ee:70:d9:fe:86:cf:33:6b:ac:1b:bb:a8:1a:21:
64:e6:2e:02:77:d4:3a:ce:a7:4b:68:d2:d0:77:8a:00:da:f6:
40:ce:a5:36:e1:5f:97:95:e3:d4:03:3d:22:74:a7:63:86:3e:
fe:f9:b4:56:c9:91:91:6a:c6:1e:87:10:59:48:8f:e2:dd:95:
2a:4b:d3:d1:98:0d:85:a3:12:47:f4:62:1b:c2:06:0d:6c:c0:
6c:fb:2c:d6:ac:d8:b8:59:64:69:01:25:53:da:5a:e7:a2:03:
32:20:06:79:c6:1b:57:e9:9b:de:dc:90:87:f4:86:ea:84:4b:
59:7f:d4:e9:0b:1a:71:81:9d:4c:d1:37:3d:c1:8c:56:ea:1f:
71:78:98:42:fb:c0:c3:9f:0a:28:e7:93:91:69:97:d5:bc:d6:
4d:c4:dd:36:06:a4:e6:88:6b:53:87:c1:22:df:f6:3a:f5:b7:
01:d4:d7:0d:27:4b:84:98:1b:3d:46:57:07:00:e7:95:33:22:
b0:9d:06:7a:ad:95:e3:63:3a:12:e3:57:49:d4:61:f0:85:b4:
4d:6e:9a:7e:70:c3:c5:b7:ab:24:06:9b:77:02:49:df:75:d4:
9c:69:e1:3e:79:4d:81:4d:9c:1e:5f:e4:b9:74:a9:81:0c:08:
0a:21:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:42:02 2026 by rpki-client