
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
File: lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json)
Hash identifier: PGenCFclNL+4N7/hmfdeRl+QHzRSeTg5pq5hxsNi350=
Subject key identifier: 07:76:6D:CB:35:2F:02:B5:0D:D7:2F:EF:4A:67:D0:DE:BA:DC:C4:0B
Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Certificate serial: 06E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
Manifest number: 06DD
Signing time: Sun 04 Oct 2026 22:17:44 +0000
Manifest this update: Sun 04 Oct 2026 22:17:43 +0000
Manifest next update: Sun 11 Oct 2026 22:17:43 +0000
Files and hashes: 1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: X9qVzyS05bjRtVtuMy4oJwyuL81tiiQ6dPKkDy7s1VA=)
2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: 9cNeCzppQ/e103+t/5bNmmQB3XDS/R3mXfxCBYG3Y9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1766 (0x6e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Validity
Not Before: Oct 4 22:17:43 2026 GMT
Not After : Oct 11 22:17:43 2026 GMT
Subject: CN=6ac2d088-ab01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:bc:02:f7:0b:40:c1:29:70:8c:ea:f1:72:
4a:8a:ad:0f:0b:0c:b4:88:cb:dd:f4:f8:4e:58:18:
e3:fb:88:df:52:fc:ba:56:7c:9f:1c:2e:ca:14:eb:
66:23:cf:c0:c9:7b:49:c3:c2:cd:07:e8:0c:a4:2b:
8a:48:3f:2e:c8:cc:05:03:6b:07:7e:d3:6a:25:04:
4e:3d:92:7b:31:96:fa:25:67:53:ca:2d:9e:ef:b9:
c9:10:10:83:8a:15:14:d6:cc:dc:ba:80:d0:4b:2d:
28:0a:4e:99:94:a6:3a:41:72:ad:e2:36:7a:08:fb:
48:b1:b9:a6:a7:70:83:1a:30:ba:b8:ea:4f:c9:53:
2c:e9:b4:e1:8f:e7:f4:64:79:1d:1a:58:7a:2d:b0:
56:b1:9b:bb:c1:3b:c2:b7:a3:2f:fd:44:96:f9:e9:
f3:bb:a1:36:6c:00:30:5b:51:34:84:de:45:99:7a:
26:c8:2e:bc:16:bd:30:6b:09:c4:7b:8d:03:10:3b:
66:b2:ed:e1:31:cd:7f:47:0f:04:65:a6:4a:52:ee:
10:35:3d:da:18:71:df:c0:76:b5:42:08:c4:67:32:
f8:82:65:32:24:90:fc:17:af:90:00:d6:d6:ef:7b:
d0:6d:a3:32:e7:41:7c:43:7c:2b:48:2b:75:e3:88:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:6D:CB:35:2F:02:B5:0D:D7:2F:EF:4A:67:D0:DE:BA:DC:C4:0B
X509v3 Authority Key Identifier:
keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f2:db:0d:54:11:46:58:c6:e0:e9:3d:3c:97:99:2f:32:ff:
e6:c7:e1:76:85:d5:c4:5b:87:f2:c6:3e:a3:93:c8:cc:62:3c:
06:19:4a:4d:19:32:24:ac:6b:42:dc:e6:31:89:75:5f:f5:36:
5f:2a:8a:92:ba:da:8c:ae:fa:5e:db:c4:ee:7f:bd:d3:b2:7f:
72:7a:1f:6d:6b:09:89:98:fc:04:67:f3:08:60:73:ad:07:07:
52:2f:fd:ae:81:9b:85:cb:85:58:6c:be:50:12:0b:19:f2:e6:
7a:8c:33:f8:79:38:8b:6d:77:e3:b9:b8:ec:49:ca:2c:76:eb:
a7:2e:ba:99:2e:bd:40:e2:28:c5:f0:e4:1a:b3:76:ed:09:7f:
49:b6:78:da:a9:23:c4:e0:b5:4d:29:6c:1e:05:d5:6c:73:56:
6c:ca:ef:2a:ab:00:fd:87:2b:d5:44:95:9c:70:ec:7a:29:b1:
51:35:85:56:1a:d9:25:30:d5:d6:a2:5e:40:25:bf:93:6c:c0:
00:20:f7:53:ec:44:54:67:4a:7e:c1:d1:ed:46:bb:87:5a:bd:
ea:e4:20:32:c6:2f:23:77:d3:9b:33:4e:16:42:a3:b0:c6:d6:
12:25:cc:ea:e2:6a:00:f2:73:a0:11:1e:32:6c:0f:d6:aa:99:
d9:30:95:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:38 2026 by rpki-client