
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
File: lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json)
Hash identifier: fo6po7EyCJo+dplARslDYpiTHynw9y0kLDOalaqSPlw=
Subject key identifier: 20:8D:22:5A:71:66:57:F8:42:B0:C2:98:5E:D8:0C:29:80:11:F0:F3
Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Certificate serial: 06A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
Manifest number: 0697
Signing time: Wed 20 May 2026 22:28:53 +0000
Manifest this update: Wed 20 May 2026 22:28:53 +0000
Manifest next update: Wed 27 May 2026 22:28:53 +0000
Files and hashes: 1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: aUchue535x8BlOKzpTDmc2TS7dqH45NvnYb5Q6LyH2k=)
2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: 9cNeCzppQ/e103+t/5bNmmQB3XDS/R3mXfxCBYG3Y9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Validity
Not Before: May 20 22:28:53 2026 GMT
Not After : May 27 22:28:53 2026 GMT
Subject: CN=6a0e35a5-62e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:1c:99:e6:c4:0e:8e:9c:df:50:a5:16:45:
6e:ea:9c:ae:96:84:a5:d0:ed:86:4d:94:2b:a8:b0:
69:6e:d5:50:4e:cb:3c:a0:45:ac:fa:93:bd:ad:97:
cc:ef:6f:02:91:eb:0c:5e:e7:ca:a2:60:e3:45:dd:
41:e7:2b:75:59:44:41:0e:97:af:95:4e:52:b8:95:
76:33:6b:d8:88:67:ea:ad:bf:75:ed:09:a7:74:de:
69:ca:06:d2:36:f5:75:08:1b:c3:2e:8c:96:0d:23:
df:51:b1:69:ba:85:95:01:2b:0a:02:48:b7:84:4b:
f0:d7:3b:38:12:36:c9:69:28:fe:92:e8:b6:0c:8a:
ef:d4:be:d1:2c:84:29:25:c1:d1:90:0b:81:18:85:
f0:55:15:1a:93:d8:d2:20:14:08:f6:3e:d5:03:13:
2e:02:46:f7:c6:fc:26:70:ef:5f:0e:30:7a:2b:9c:
42:41:aa:ab:0a:9a:45:c0:5b:b1:10:56:7f:e7:24:
97:45:f9:d1:3a:c1:15:8f:70:c6:73:1d:3d:0f:47:
89:a9:a0:aa:b5:bb:b0:b1:9b:e0:29:60:11:57:22:
ac:e9:dd:e3:3b:15:fa:f6:1a:48:fc:41:fc:10:63:
e4:5f:cc:39:b1:46:ca:d6:20:1c:32:7e:0b:32:bc:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8D:22:5A:71:66:57:F8:42:B0:C2:98:5E:D8:0C:29:80:11:F0:F3
X509v3 Authority Key Identifier:
keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:86:99:44:67:5d:de:e2:0a:e4:76:d8:28:7e:5c:ec:ce:79:
51:58:02:ca:5f:48:ad:71:da:17:38:8d:d3:07:26:4e:9e:40:
e3:8d:18:15:3a:d0:2b:3d:4b:11:d5:d8:1d:0e:a9:e9:14:28:
b4:c0:35:52:2f:19:a2:3c:d7:c9:34:30:9b:00:3f:15:01:f9:
2e:25:f6:f1:e1:e1:6d:3f:9b:af:0a:35:fa:8b:06:bf:9e:93:
15:47:ca:25:d5:c6:fe:f2:50:d5:df:54:ea:96:8c:a7:e8:0f:
a6:6f:77:86:00:78:a3:a0:06:99:38:c5:be:a3:cb:07:4e:41:
b2:39:20:04:a4:50:1d:f7:f5:19:c8:a0:40:80:9c:5b:ca:dc:
c2:38:35:fa:0e:70:23:22:3b:f1:cd:9d:ad:f7:68:80:22:67:
fe:f3:c5:d7:59:0e:b6:2b:82:d5:af:c3:c4:8e:8c:11:07:17:
6c:e7:d5:c9:c4:c4:0e:75:4f:73:08:51:7b:5b:4d:dd:96:65:
94:1b:2d:4c:fa:02:9e:a7:6b:94:94:f2:b5:47:97:c1:f4:59:
e0:6d:fc:b0:e7:26:e5:f4:f2:86:70:f8:27:2b:7f:49:cf:d6:
b5:8a:a9:87:4c:91:9e:6c:cb:1e:68:64:7b:23:5a:99:f7:57:
3f:f8:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:10 2026 by rpki-client