
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json)
Hash identifier: 3Qu1CvDafg6Yjq+EjvIqr8EcNYYrHDhXTmois6QiCQI=
Subject key identifier: 7B:48:8B:22:92:C1:07:7C:0E:F1:5E:A7:D3:E1:E9:23:43:0E:C7:23
Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
Manifest number: 024C
Signing time: Thu 03 Sep 2026 02:33:26 +0000
Manifest this update: Thu 03 Sep 2026 02:33:25 +0000
Manifest next update: Thu 10 Sep 2026 02:33:25 +0000
Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: QB9ybrEsi+gLO2PhsXOlY500YuseXh+3uSWBDTbxZcY=)
2: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: R8Xz4AKde3EwsZ0bzyfq8h/88WRmzgM83oD7fGiwBo4=)
3: C4CA725C687011EFA523204EC4F9AE02.roa (hash: /6gHyezYVVDm5jshkHJrGHxxNK6YvRh1Udvso6+2LXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Validity
Not Before: Sep 3 02:33:25 2026 GMT
Not After : Sep 10 02:33:25 2026 GMT
Subject: CN=6a98dc76-1d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9d:07:1d:7a:6b:37:d7:f2:08:86:aa:99:47:
49:b1:0a:aa:44:88:f8:4e:0d:17:52:57:4f:d2:24:
a9:65:c0:dc:d7:68:fe:8f:44:50:ec:59:e3:ef:07:
e1:ef:da:59:89:48:be:ba:6b:8d:2e:d3:23:7e:87:
41:8f:92:4c:d3:c9:38:ab:95:6a:90:82:69:4f:e1:
31:43:86:4c:d5:ab:6b:e6:be:db:6d:14:66:9d:44:
1b:62:ea:d2:80:50:0d:ca:89:c6:f8:c5:4e:47:27:
ad:db:b4:bb:8f:83:0b:a0:38:5d:80:32:fd:49:58:
a8:ee:3c:7c:1b:c0:42:74:2b:69:ab:44:c2:cc:48:
9a:69:84:0c:40:e6:5b:00:71:0c:85:fb:6d:4a:2c:
e6:e8:6a:72:6a:4b:2f:bb:fa:18:bf:13:cb:b5:33:
ae:3a:fc:a4:87:3d:f7:93:9c:cd:46:c8:01:83:48:
6e:64:cf:3e:7a:3e:fb:95:59:b5:a9:a5:29:0f:c6:
bf:1a:d9:da:36:0e:5d:0e:59:2a:40:14:00:ff:f1:
9d:16:ff:3c:4f:fb:93:45:5c:21:86:c5:fb:ba:9e:
de:e6:1a:2e:76:98:ae:bc:91:48:d5:bb:38:3f:c5:
d7:40:a8:55:ee:5d:bf:21:2e:6f:8a:b6:24:34:43:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:8B:22:92:C1:07:7C:0E:F1:5E:A7:D3:E1:E9:23:43:0E:C7:23
X509v3 Authority Key Identifier:
keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:4e:ca:6a:2b:04:54:1f:30:a3:6d:ed:a6:0e:3d:d1:60:62:
10:df:33:cd:69:ef:08:20:3f:78:e2:fa:f1:d3:ab:b6:13:eb:
50:cf:a6:dd:2a:d8:45:02:7c:d2:64:ea:3f:87:d9:0f:92:a5:
b1:c9:04:33:69:1d:64:40:f8:44:d1:de:4e:a7:65:7b:d6:da:
43:75:72:9b:91:f3:4d:11:46:51:7e:dd:29:ec:17:ed:44:98:
4e:ad:eb:5a:2d:2a:64:b5:c2:48:51:6d:ed:4f:6d:3c:14:e5:
06:7e:37:c2:50:ce:a4:e9:26:bd:46:d1:e1:50:7b:ce:7e:6c:
2d:2e:25:c0:f2:0e:72:e8:13:e2:46:5f:be:c2:e3:3f:a0:92:
76:db:25:65:dd:61:41:26:4f:75:41:1c:6e:71:20:e8:15:20:
45:ec:34:2f:d0:bd:48:4a:1a:e4:29:c5:3a:88:f9:c5:80:77:
8c:29:75:3a:1b:79:b8:d9:5b:c0:00:a2:01:e2:c0:a1:59:fa:
c0:09:97:8f:31:2c:e8:59:3a:d3:16:22:7a:c5:99:2d:9a:b6:
10:96:2e:e1:ce:72:f1:b9:19:52:58:f9:10:59:3b:f6:0c:52:
9c:b1:38:85:f7:6e:42:7c:c3:72:81:26:1d:26:77:38:d5:e7:
a6:83:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:47:11 2026 by rpki-client