
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
File: LnNx4gZThK0R1DN9DS7NH2bSGco.mft (raw, json)
Hash identifier: ESKBWPp5r2chMM97s8RuniX6B+Sz3T/xbSLo+rCYc2Y=
Subject key identifier: A9:FA:90:BC:C8:ED:EB:20:BA:62:42:46:B6:B7:53:06:06:76:96:58
Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
Certificate issuer: /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Certificate serial: 035C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
Manifest number: 0354
Signing time: Wed 07 Oct 2026 01:04:24 +0000
Manifest this update: Wed 07 Oct 2026 01:04:23 +0000
Manifest next update: Wed 14 Oct 2026 01:04:23 +0000
Files and hashes: 1: LnNx4gZThK0R1DN9DS7NH2bSGco.crl (hash: wqM7SQMj5PPRcInrGWG+t91C3OORBJR9kcAin1lu878=)
2: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (hash: rKcpywHUWZc0Yptxqltu8Zb4nVuOO7P8qnMgqqymIZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 860 (0x35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5753, serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Validity
Not Before: Oct 7 01:04:23 2026 GMT
Not After : Oct 14 01:04:23 2026 GMT
Subject: CN=6ac59a97-3258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:26:7a:46:71:d0:41:18:19:3f:70:23:ff:
2a:b6:3b:70:36:f9:98:94:17:68:d4:75:53:8b:a1:
c2:95:9f:1d:de:b6:55:3a:d0:12:76:23:b2:d0:48:
ae:18:a0:a8:fe:92:92:f6:b2:49:cf:82:f2:6c:6c:
29:79:c9:af:30:49:e4:bd:6b:a8:5a:59:d0:64:86:
19:6b:81:00:b3:89:c1:1c:f3:39:58:32:47:dc:62:
cf:77:60:7b:e0:6b:95:0a:27:e5:59:2c:b1:8f:b7:
b8:bc:5d:d5:74:be:d6:32:fb:55:0d:53:22:35:69:
a5:bd:eb:fd:22:b4:e8:03:83:b6:1d:fc:30:18:1c:
e2:95:61:d7:9d:3f:87:e8:a9:2f:4e:04:f4:e6:bd:
de:af:db:34:f3:3d:90:74:e6:cb:5a:b3:3b:6d:44:
5a:53:17:c6:f7:5b:d6:64:6c:6f:1b:91:0f:f2:1c:
60:71:d7:49:62:5e:65:27:4e:4b:33:e0:10:fc:0c:
4a:45:d6:0c:e3:e6:9d:cf:71:b8:40:cc:e3:86:25:
e6:5a:db:56:b3:5f:26:3a:3b:32:e3:36:54:6b:86:
3c:04:5a:70:76:71:2d:ca:b3:ff:97:b1:d2:5d:33:
21:ab:36:ea:92:21:6c:2f:47:14:f5:50:11:03:fb:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FA:90:BC:C8:ED:EB:20:BA:62:42:46:B6:B7:53:06:06:76:96:58
X509v3 Authority Key Identifier:
keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5a:6e:32:40:bd:17:be:32:33:f1:8b:8f:c2:56:a3:ca:38:
6a:d0:9e:bb:6b:7c:63:1e:fa:2e:c9:84:c7:43:83:c0:60:11:
36:19:05:0a:fe:ed:2e:9d:e0:ff:29:79:89:2e:d1:c4:c7:b3:
d4:cd:e3:f2:d2:2c:d7:07:22:fb:16:9e:58:4e:09:e5:fb:47:
3d:8f:f4:61:ff:55:40:b9:25:58:59:2c:6b:2e:d3:05:43:01:
ce:f3:bc:4d:c5:52:1f:8e:fb:c3:a0:14:e7:ea:3d:ad:4a:38:
08:28:46:9a:d3:69:94:4c:84:50:0d:bf:9f:fc:97:4f:8d:b0:
4c:91:38:c7:7e:75:62:1f:4e:96:13:c7:0d:fd:6a:b8:92:be:
ae:d5:fa:66:49:17:4d:a7:ee:91:25:67:ff:01:45:18:bd:4a:
fa:c9:7b:e5:25:c6:8e:5a:b0:b1:ba:83:98:17:bb:b9:e3:f6:
3e:89:1a:82:42:ca:21:69:f8:e7:30:eb:dd:39:d2:e1:cf:9f:
8b:aa:9e:9d:37:7f:f0:27:a4:ca:69:a8:3f:14:bb:95:6d:6b:
87:09:c4:8d:3e:19:4d:96:31:74:fc:5e:d2:32:09:04:78:ea:
7a:6f:1a:cf:ac:9d:26:58:95:67:b5:6b:8d:b8:20:d3:96:18:
bf:c8:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:08:43 2026 by rpki-client