
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
File: lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json)
Hash identifier: t6SUZdFzyQHQ//kfE8tUSPHANNsoLMz7lc1jDOglyKk=
Subject key identifier: 96:06:E1:C0:3C:16:3F:E0:47:25:91:12:BC:C1:63:3F:1A:05:E0:7A
Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Certificate serial: 06CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
Manifest number: 06C5
Signing time: Tue 18 Aug 2026 22:39:19 +0000
Manifest this update: Tue 18 Aug 2026 22:39:19 +0000
Manifest next update: Tue 25 Aug 2026 22:39:19 +0000
Files and hashes: 1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: uvR42fLv6D936D+BSgwUvYqJaY8V78Gx8Q7S27JnlkA=)
2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: 9cNeCzppQ/e103+t/5bNmmQB3XDS/R3mXfxCBYG3Y9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1742 (0x6ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Validity
Not Before: Aug 18 22:39:19 2026 GMT
Not After : Aug 25 22:39:19 2026 GMT
Subject: CN=6a84df17-b8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:37:a8:4f:68:1f:fd:3f:f1:4a:b8:3d:d0:
88:e0:20:23:83:44:c9:27:6a:47:de:63:f9:b6:f4:
c5:68:18:ae:f6:6f:de:cb:50:29:32:39:3c:b9:18:
79:be:1f:dc:2b:16:19:6b:85:53:1a:dc:26:2d:85:
46:3b:67:65:8c:fd:95:4e:9d:cd:35:56:da:7d:72:
76:a9:59:10:0c:c1:24:56:e9:ba:af:7e:47:cb:ce:
d8:25:17:73:f1:df:cf:8c:e0:53:d9:b0:29:3a:17:
35:9a:d2:6c:2c:cd:76:b6:0f:61:c3:39:b9:cc:4d:
76:a5:f3:90:09:b8:e6:53:0b:dd:ca:6d:1c:6b:9c:
51:8f:28:78:de:8c:9b:83:1d:78:af:68:1e:58:16:
59:e6:e1:95:98:03:a3:40:c6:ef:d6:65:61:4e:a3:
8d:50:79:3d:cb:d2:32:e7:20:94:8d:6e:30:a4:1a:
c2:28:ed:93:0e:3a:78:e5:c2:4a:28:43:0f:92:1f:
8a:f0:d4:bd:d6:9f:ab:c0:be:5c:95:ae:00:24:89:
a0:a0:34:45:48:9b:06:44:84:82:6c:9e:74:84:87:
47:ee:07:82:0f:b2:8a:28:15:06:4c:51:7b:b1:b0:
1e:f2:df:d8:44:5e:fa:c0:50:fd:75:83:e9:ff:ed:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:06:E1:C0:3C:16:3F:E0:47:25:91:12:BC:C1:63:3F:1A:05:E0:7A
X509v3 Authority Key Identifier:
keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ba:1b:e4:4e:09:95:c3:f7:27:d3:13:5e:86:e0:33:1e:84:
0b:f7:5c:c3:35:25:ec:72:a7:85:84:bb:ec:34:3d:f3:62:86:
21:c6:0b:3b:fc:54:68:df:59:72:0e:c9:7c:19:57:a3:ae:1b:
48:c8:6b:a8:0e:33:49:df:ad:01:6a:ad:4e:57:fc:99:18:8e:
07:b3:6a:fd:b6:c6:68:28:7f:ae:22:c9:0d:b9:e4:19:26:03:
1b:4c:28:25:1b:17:4a:0b:c2:41:dd:84:9d:a6:fc:78:ed:ce:
2d:2a:26:34:71:7d:99:09:89:91:ed:61:c8:cd:86:4d:cf:b4:
99:e8:de:3c:e8:7f:5e:fc:03:db:06:e9:9c:33:e4:c9:43:03:
a4:6e:45:fb:5a:1d:d6:56:19:12:70:cf:8b:00:0f:f0:24:4d:
0c:11:39:a2:61:da:c3:2d:c7:50:ef:c3:90:10:7f:45:d7:f3:
65:cd:61:83:85:51:d6:f2:30:d0:ba:a2:ff:4f:bb:d7:c6:ca:
d8:85:22:40:4f:fb:6a:24:f5:40:a6:7e:f8:c7:bc:62:22:ab:
f4:e5:fa:cd:99:e0:df:9f:b1:11:e5:11:69:9f:9e:44:3f:0c:
52:cd:4f:c9:d7:f6:b4:6f:5a:42:a4:72:8e:e7:bc:8d:c8:d1:
69:4e:09:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:07 2026 by rpki-client