
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier: znyc4M4EjZQQz3VjxkKj7k9IClTYqHHwnguNyLi7/2c=
Subject key identifier: E6:D6:F9:63:E2:3F:12:4B:CD:46:E7:C4:AD:E2:1C:84:B0:BD:00:86
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number: 0248
Signing time: Tue 21 Jul 2026 03:43:11 +0000
Manifest this update: Tue 21 Jul 2026 03:43:10 +0000
Manifest next update: Tue 28 Jul 2026 03:43:10 +0000
Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: c+mMQP87QQO5xzHj/vG50Pbw2eAkw8+WwYi/smKtgmA=)
2: 95FE27F02D1511F19EAB6E70B3833773.roa (hash: hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=)
3: AD4C18D62D1511F19E800787B3833773.roa (hash: gF6FfjxDgiZ5qTPAnk0dNcAHblND2UNyNpInYeZ2Rc8=)
4: 3304B5BA43B311F19399644A98833773.roa (hash: bzOsUU4L5zybRan2RbEqjLxhGbEC4X30U/TXsNv87pc=)
5: 6445C13C2D1511F18C0F846BB3833773.roa (hash: PLgXnUtV5/qDMTfK+s5CXVumrPmYkILffVNAYNUoLk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Validity
Not Before: Jul 21 03:43:10 2026 GMT
Not After : Jul 28 03:43:10 2026 GMT
Subject: CN=6a5eeacf-e6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:d0:2b:91:c7:f8:4c:50:48:29:da:ca:89:
c8:1b:1a:46:bf:28:98:56:4b:88:16:26:3a:e9:1b:
2d:70:47:0e:13:64:fa:eb:5b:49:3e:8a:c5:3a:b2:
e8:0c:22:4d:e7:52:eb:65:af:e1:cb:2a:5e:c7:00:
ed:e8:a3:da:e4:56:3d:b2:36:cc:b8:ac:da:3d:a1:
ec:58:50:b5:82:b0:b1:91:b7:a8:ca:25:f2:b3:17:
f8:eb:17:e5:91:e8:3e:b0:79:b6:9b:78:43:d5:be:
e4:be:b1:af:28:23:db:54:d6:82:87:c4:b5:ec:d6:
c4:f7:03:64:d1:cc:66:07:2e:75:e3:40:39:f8:e0:
cf:b1:68:b3:c8:74:bb:57:88:ff:d3:af:40:5c:0d:
ae:e9:8d:b3:93:62:fc:e6:b0:a7:72:a9:7a:bc:c1:
e5:f6:c1:25:54:15:a6:29:eb:f3:1b:02:4a:e5:02:
ba:7e:81:91:f6:fc:78:2c:c2:20:ba:76:c4:bf:6d:
4c:c9:13:ff:e6:db:fe:18:c7:38:a4:41:60:1e:71:
0e:87:0d:ee:b8:39:02:e8:1d:9b:99:14:d4:20:3b:
3e:af:8e:8d:ba:8d:c2:bd:57:6c:2e:52:f0:75:97:
38:a8:02:69:6a:77:ef:e0:55:db:e6:78:66:f7:82:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D6:F9:63:E2:3F:12:4B:CD:46:E7:C4:AD:E2:1C:84:B0:BD:00:86
X509v3 Authority Key Identifier:
keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:2a:a3:e5:ec:eb:11:63:f6:08:35:60:f9:20:ef:99:e0:60:
62:a8:7f:a3:51:aa:e3:d7:00:51:27:a0:45:ca:c5:60:0d:90:
ae:60:18:cd:d9:e1:6f:68:0d:5f:40:7a:f7:7b:a2:d2:05:b7:
63:a3:77:0f:37:69:5e:05:0c:15:e9:5a:16:c6:ab:70:49:f6:
d9:7a:94:3b:5c:55:20:c0:d2:8f:2f:b5:35:bd:c6:0f:ac:a3:
bf:67:f8:dd:d6:68:92:23:6b:ab:b6:9b:35:a7:c9:40:2f:f7:
c1:60:c1:cd:1d:60:8b:5e:01:ca:63:4e:d4:ac:3e:74:c6:16:
9d:fc:1a:9e:89:33:d9:94:5d:fd:ea:73:30:cb:eb:f8:0c:39:
a6:b9:6c:98:a2:56:50:43:51:f9:d5:63:a4:34:14:f9:47:04:
fc:1b:4a:51:c1:8a:ee:e2:29:bc:20:cd:a9:aa:4e:ff:05:78:
9a:c5:0b:b5:b4:ad:81:c7:f9:e5:c5:cd:06:8e:55:61:18:6b:
c0:82:ca:8d:1e:cb:3d:c4:b8:07:ac:77:5e:6d:19:4d:cf:82:
c2:97:08:74:95:cb:8a:9d:60:90:f1:d6:36:9d:bd:56:bd:78:
8c:94:f5:35:b3:5a:5a:a2:f0:04:b7:dd:43:b8:75:4e:1f:d6:
79:88:61:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:49 2026 by rpki-client