
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier: 3oATiJMn8skkhgYmYOwtI8tuUGJ+KJES2wiBfBMTois=
Subject key identifier: 74:80:90:A3:35:22:23:44:F2:11:6D:D9:2E:4C:77:12:FD:B8:90:E8
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number: 01A7
Signing time: Tue 21 Jul 2026 05:35:57 +0000
Manifest this update: Tue 21 Jul 2026 05:35:57 +0000
Manifest next update: Tue 28 Jul 2026 05:35:57 +0000
Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: fVbcHTSK5vLeCyBoGNurcSKv4HdpJbKBF4VppAKGytk=)
2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: 47l1ln9Nx13HUurVSbC4jY0jHYfX9Vb/9u1t5wwZQzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Validity
Not Before: Jul 21 05:35:57 2026 GMT
Not After : Jul 28 05:35:57 2026 GMT
Subject: CN=6a5f053d-a425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:a7:16:99:43:40:04:18:4e:68:4d:80:bd:
cd:07:5e:fb:e8:cf:ed:ab:cd:e0:43:70:60:e5:25:
8b:ed:0d:70:59:9f:23:6b:d0:2e:75:8c:2e:0c:ba:
7d:d0:88:75:ec:19:9f:78:e8:44:28:da:29:98:27:
52:47:1e:47:08:bf:56:76:5c:26:5d:ab:ac:d8:07:
a9:d6:18:35:75:3f:f8:68:ce:b5:50:fa:23:88:24:
21:ae:48:4b:7f:61:41:73:ee:0c:f8:4e:0d:d8:22:
55:98:dd:e5:f6:7b:09:dc:3d:e2:a3:29:1b:88:69:
8e:2a:db:9c:f2:76:77:55:7c:1f:28:08:66:98:5b:
8f:aa:b5:7e:ff:67:eb:a0:08:bb:4e:56:af:9f:84:
d4:86:3d:36:0c:fb:2c:f3:3f:57:9c:c3:f7:ff:33:
8f:ed:7a:ee:97:f9:4d:2f:87:f9:9b:0d:df:13:a7:
0d:19:e8:ce:76:cb:31:81:ee:71:c8:e6:b2:22:33:
aa:ca:56:4a:d8:aa:72:68:c5:a1:bf:50:ba:63:1d:
af:b8:98:0c:d5:1c:10:51:76:0f:fb:60:09:10:a7:
9c:af:6e:45:d9:84:74:50:62:ed:e2:4f:f0:c1:b6:
c0:b3:75:72:cf:0d:c8:9a:d3:0f:9c:b5:35:c9:87:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:90:A3:35:22:23:44:F2:11:6D:D9:2E:4C:77:12:FD:B8:90:E8
X509v3 Authority Key Identifier:
keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:9c:ea:d7:14:68:a8:d9:58:f8:39:8a:dd:be:a1:59:1a:65:
56:fd:4c:65:19:7f:ec:ca:45:b2:c8:f2:e7:c7:6c:68:2d:c8:
13:b2:63:98:37:35:5b:9e:81:a0:a6:aa:43:43:14:4e:ef:1a:
20:4c:c6:fe:3c:6d:c0:12:cd:fb:f0:d6:93:4e:08:c1:99:1d:
64:01:50:c0:dc:c6:68:9d:d2:4a:79:b7:06:41:f0:89:fa:41:
9e:75:32:e3:3a:24:67:8d:6e:fd:89:18:fb:94:0e:b3:cc:24:
a6:59:6b:1b:28:35:2e:65:1b:3b:9e:94:6e:9e:27:50:e4:8c:
7b:b1:86:f5:82:e1:29:66:42:23:c7:71:ab:38:e0:39:38:be:
21:a5:ae:ff:84:91:11:f5:51:db:8b:ac:10:b4:8b:c3:57:ae:
da:db:92:4d:46:2b:80:f5:23:d2:a6:e6:a7:c4:7c:d7:0b:fe:
43:7a:3f:9d:86:5b:4f:3b:20:f4:c4:b2:0a:1d:27:8c:15:d4:
c8:59:ef:13:72:db:5a:c2:22:f9:73:90:15:0b:60:f0:ea:3b:
ae:25:49:cb:80:85:a6:51:d9:bf:48:1f:15:17:bf:dc:ed:a7:
53:1d:81:fc:a6:21:bb:2b:8f:fc:87:03:51:6d:af:29:af:1d:
82:7d:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:06:19 2026 by rpki-client