
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
File: LnNx4gZThK0R1DN9DS7NH2bSGco.mft (raw, json)
Hash identifier: efQ2r7Red8FVnH/ezy1LZQNHo/TfQW/naFyHt3lqpsE=
Subject key identifier: 6F:86:55:E3:07:A3:CD:D5:E4:96:58:E5:78:58:6F:6D:3A:27:C8:4A
Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
Certificate issuer: /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Certificate serial: 0340
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
Manifest number: 0339
Signing time: Wed 19 Aug 2026 01:24:27 +0000
Manifest this update: Wed 19 Aug 2026 01:24:27 +0000
Manifest next update: Wed 26 Aug 2026 01:24:27 +0000
Files and hashes: 1: LnNx4gZThK0R1DN9DS7NH2bSGco.crl (hash: H+/B2xpYqb0w+858rho2GSOHASds2VCq9wAxeNBasG0=)
2: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (hash: M4qhU2Zwkz7gIyGByvUikqF53mhF5gT1cR8+NUKeRsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5753, serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Validity
Not Before: Aug 19 01:24:27 2026 GMT
Not After : Aug 26 01:24:27 2026 GMT
Subject: CN=6a8505cb-5d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2a:3f:26:82:91:a1:ff:72:b0:04:56:bd:0e:
8d:42:cf:f1:42:41:f6:89:36:42:f9:b2:9f:46:ea:
da:d5:e1:e9:37:0c:21:1e:a9:1e:51:01:d3:92:31:
ae:70:2d:7e:16:5a:ed:f4:15:91:11:e6:ac:3c:c9:
93:6c:00:93:9e:37:85:62:ab:c2:f8:b1:ce:81:86:
48:1f:77:35:01:d4:32:a6:26:8d:cd:85:fc:84:2f:
e4:10:11:77:fe:28:9e:be:59:c8:b9:8c:7c:4c:9f:
46:f5:1b:c7:fd:6b:12:bc:d6:94:73:b6:b9:cb:3a:
01:ee:31:70:37:24:32:1c:f6:4b:04:bc:f4:b7:d5:
4a:e3:10:f6:34:8c:be:16:c5:01:11:56:e2:69:8e:
f3:72:76:66:4b:d0:fa:31:89:07:48:3d:21:c6:4c:
7f:63:e2:58:81:76:20:b1:fe:e7:36:89:ec:36:78:
50:f7:60:16:94:56:2c:16:7e:f6:0b:7f:d4:68:b3:
f5:a3:20:c2:05:1e:c1:31:40:95:6b:9c:e8:02:30:
b9:24:fa:b4:2c:68:03:1d:a0:ff:6e:a6:62:66:7a:
cb:93:4f:03:8e:87:fb:07:7a:c2:31:08:a7:7b:32:
ce:c1:ba:8a:ea:7a:3b:37:aa:86:95:2d:e6:15:d7:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:86:55:E3:07:A3:CD:D5:E4:96:58:E5:78:58:6F:6D:3A:27:C8:4A
X509v3 Authority Key Identifier:
keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:66:2c:d0:70:a0:b2:f8:5f:0f:e4:01:2e:0d:2c:92:c3:56:
7a:7c:e0:e7:4b:20:35:35:49:3c:1d:98:c0:73:d2:67:91:fa:
76:29:08:7d:58:be:41:93:21:bd:29:1c:26:8e:42:d6:c8:ac:
56:04:50:c4:62:99:8a:b8:99:d7:c1:2c:a9:80:e1:6a:a4:ea:
83:51:ba:53:da:3c:b4:2a:85:13:9d:04:90:bf:0f:56:d4:22:
f6:a7:bf:63:84:4e:47:6b:a8:a5:6f:9d:df:a2:f6:74:4e:07:
3e:09:00:81:be:e3:24:4e:0c:aa:85:1f:5e:c8:00:67:8e:29:
9b:9d:78:16:7d:d7:cd:90:fc:50:48:b2:61:c6:29:be:19:ee:
2d:bf:62:24:6f:8d:50:1c:01:ff:54:4f:ab:20:1a:2c:97:08:
cb:ce:c7:26:7e:b8:71:87:ee:30:c4:65:cc:61:9f:c6:a4:c5:
ce:ae:14:7d:f7:da:e5:48:4a:9c:02:8a:00:48:8f:ef:69:3c:
53:48:28:96:52:a4:5d:00:88:f3:84:3a:37:9f:44:34:fb:eb:
c3:a6:40:fe:ad:69:1e:6d:33:b7:f9:aa:01:32:b6:53:53:4e:
5c:ad:7c:a2:1c:30:5f:05:ed:65:5f:88:c6:04:0a:2b:2e:75:
29:bd:bc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:56 2026 by rpki-client