
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier: Lj2TMbf7lj/yuiBMftK0nClm8lqDK5waje30QcoST8Q=
Subject key identifier: A0:66:DF:05:0B:E7:BD:3A:87:B8:B3:E0:E3:E5:C9:EC:48:32:41:56
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number: C7
Signing time: Wed 25 Mar 2026 06:14:56 +0000
Manifest this update: Wed 25 Mar 2026 06:14:56 +0000
Manifest next update: Wed 01 Apr 2026 06:14:56 +0000
Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: jPuVTgKahOo5ZKC4lvKHrAaq8NlVdBB/KPRp9HLAttg=)
2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: pFar0hkjv8MeCYoT9TzhPZtPV3p3brER3074/liih+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Validity
Not Before: Mar 25 06:14:56 2026 GMT
Not After : Apr 1 06:14:56 2026 GMT
Subject: CN=69c37d60-e314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:ea:8b:89:d5:ac:40:31:fa:40:ff:f1:b0:
c3:d5:12:33:7f:98:a1:d1:84:1d:a8:f5:f0:6a:9d:
c2:a0:8c:60:3f:34:2b:63:f4:af:f1:4f:20:01:2d:
ae:14:9b:d3:28:64:f2:26:99:78:d9:aa:be:1b:54:
74:0b:dd:32:37:ff:08:f0:1d:ce:e6:e1:18:5c:17:
dc:7c:9a:29:7d:7c:94:62:2c:91:19:60:d5:18:a6:
1d:7e:85:0b:cf:60:87:2a:1d:71:f2:40:0f:70:17:
54:ed:65:9d:3f:54:a1:fe:ea:8d:61:6a:62:c2:7f:
f6:ad:67:6b:6e:5b:af:56:39:f8:0f:fe:65:c6:4a:
e2:f6:4b:94:5a:ec:1a:03:ff:b8:c4:e5:27:08:b7:
c9:aa:fc:dc:35:21:aa:7a:fb:df:c3:32:46:05:dd:
dd:9a:1b:56:0e:b8:59:7c:4c:0b:df:1a:03:c9:6e:
63:98:ff:d5:80:19:aa:3a:4e:03:53:68:9f:66:a9:
23:29:4d:e0:3e:15:73:44:bc:a2:7e:84:92:98:5c:
a3:fc:69:7f:2f:36:41:59:dc:ed:10:c9:d9:6a:c6:
7c:49:58:e2:a2:f9:42:ef:ac:4f:cb:e4:dc:a3:49:
0e:57:2b:08:b6:0b:54:c7:66:19:cc:3a:05:f6:b2:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:66:DF:05:0B:E7:BD:3A:87:B8:B3:E0:E3:E5:C9:EC:48:32:41:56
X509v3 Authority Key Identifier:
keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:d4:44:42:30:0d:98:eb:33:39:cd:c2:0a:82:42:99:87:ba:
41:d7:5f:21:86:04:9d:18:e1:1d:df:1b:2c:af:15:78:51:cf:
59:09:ea:2b:5c:e7:0c:2b:21:72:07:4e:23:4e:fd:bb:d2:24:
2f:a8:38:17:1b:ae:d1:4d:1d:3a:6b:ec:d6:17:5c:1a:9e:ab:
86:c1:ed:cf:2c:5f:be:8d:aa:4f:1f:9e:10:2a:ea:0b:a6:09:
4c:da:83:f5:5d:14:e7:c1:1c:68:6d:ea:ff:a5:66:59:d7:ed:
51:04:38:8e:7d:87:7b:d0:8d:49:d4:c3:8c:c8:34:bd:b7:46:
31:f3:e5:10:53:b3:0a:4f:0d:f1:29:90:b3:1f:c5:8b:9e:1d:
c6:58:47:98:f7:ad:43:34:49:8c:ca:1a:d1:58:45:12:50:0a:
ef:bb:43:82:98:aa:51:33:e6:d0:4d:40:49:8e:a8:2f:00:2e:
80:ab:a3:6c:ad:fe:7a:e6:20:39:9b:a5:02:e6:b0:67:6f:d2:
28:8c:1e:7f:b5:52:9c:8b:bc:1b:a2:67:c7:01:9e:fc:e4:9d:
1c:2c:a2:9c:44:b9:50:34:58:84:e4:f2:c3:ed:eb:5c:55:a1:
69:c0:b8:70:fe:29:8f:d5:0c:ea:ff:7c:2a:83:b0:c5:dc:93:
8c:51:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:32:08 2026 by rpki-client