
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier: S/HCswz014LpC6Fu3elqxcqQX+Mb1mPLCe4I/BXbrVA=
Subject key identifier: 86:EB:54:16:41:19:69:52:DE:11:BE:C5:DD:4B:69:A5:BF:5D:AF:1B
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial: 35A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number: 3568
Signing time: Tue 24 Mar 2026 14:15:37 +0000
Manifest this update: Tue 24 Mar 2026 14:15:36 +0000
Manifest next update: Tue 31 Mar 2026 14:15:36 +0000
Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: XPBn8XRC2r2JwlbZjOaHNaaJlkcoknYInmawCuY2zo0=)
2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: aMHBQ0J7YfPV7IMIB5NQWhqNvs3O4UzTOKWMInuGuiI=)
3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: mRRQUvKxyPfmPaRjVyhQzZiLqbyD63uPoSK3GiULemA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13737 (0x35a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Validity
Not Before: Mar 24 14:15:36 2026 GMT
Not After : Mar 31 14:15:36 2026 GMT
Subject: CN=69c29c89-4796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:94:82:80:0a:86:98:29:83:e1:8b:c7:34:
09:18:f7:62:83:63:f1:bc:c9:7f:24:bd:6a:0d:f2:
2c:ca:9c:80:7a:93:03:fe:4f:c9:94:05:b0:fe:c3:
8a:bd:be:fe:4f:7f:33:42:15:cb:3c:2d:18:e6:42:
8c:ff:80:21:0d:33:2e:12:f1:03:6b:a9:24:9d:d7:
15:1d:d1:22:03:3c:87:25:0a:01:a9:f0:3e:6b:83:
a3:95:d9:58:2e:7e:48:c2:39:70:98:d4:0d:4b:28:
2e:36:b5:82:89:c0:8a:7e:96:7b:9a:2f:5f:0f:44:
59:ca:25:89:fd:50:31:65:09:43:e0:84:3e:3f:42:
79:52:27:84:94:c8:fc:00:63:b6:4a:b9:cf:54:11:
1f:67:ed:da:bb:e2:61:7f:cb:fc:81:0f:08:54:ed:
ca:f5:66:9a:0b:59:9a:9c:98:fe:ca:f3:33:1b:b8:
6c:07:0b:74:6d:ba:6b:13:24:d9:85:80:1e:0b:56:
f9:52:1b:41:f9:e8:af:c0:33:0c:3a:51:b5:f3:5b:
28:67:d9:22:77:48:eb:bc:a8:ac:07:b7:10:3f:ca:
08:fa:79:ed:16:17:90:cd:d7:72:3e:34:b2:ab:aa:
7b:d6:7a:47:9c:0a:3f:ae:78:b8:f8:24:5f:4c:ff:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:54:16:41:19:69:52:DE:11:BE:C5:DD:4B:69:A5:BF:5D:AF:1B
X509v3 Authority Key Identifier:
keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:35:ef:61:e7:e1:6d:b9:a9:32:da:18:e8:31:0e:8f:1a:db:
af:80:28:8a:2d:ee:0c:19:2a:a8:79:cf:5f:9f:2e:18:29:76:
47:71:1a:7d:5e:f6:cc:7a:7a:b3:be:3e:04:58:ed:fb:fe:1d:
a7:54:71:04:b2:92:df:3d:e0:ed:ba:72:11:14:26:8e:ec:11:
84:0c:38:60:b6:d9:83:ea:6c:0e:87:ce:c4:03:d8:1a:74:43:
eb:8c:5e:96:ab:3f:d6:bd:d9:e2:c6:48:85:b4:af:08:c2:1b:
40:f7:80:95:b9:36:ef:eb:01:a6:db:b4:56:c1:ab:d1:1e:dd:
ad:90:94:90:24:96:31:dd:c9:d1:4c:36:c3:9a:68:e0:b9:ac:
c2:92:35:38:36:b6:fe:c8:97:a8:25:27:e8:ba:bb:47:da:9b:
20:d3:4f:05:9c:f2:75:ad:07:ba:2d:fb:36:46:13:ad:77:ce:
1e:36:0d:e1:65:42:5c:39:91:37:03:f4:ea:ee:57:b8:f1:8f:
e0:c2:70:22:a4:a6:22:69:cb:29:4c:12:03:a0:c1:2a:ba:4c:
b5:30:cc:cd:6a:b5:d6:7e:77:b4:35:71:b4:39:69:ec:4d:24:
07:ec:41:fa:60:4e:9d:26:95:59:94:7b:83:67:12:60:cb:5d:
d4:da:ff:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC
Mjg3MTI2QTEwHhcNMjYwMzI0MTQxNTM2WhcNMjYwMzMxMTQxNTM2WjAYMRYwFAYD
VQQDEw02OWMyOWM4OS00Nzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXGUgoAKhpgpg+GLxzQJGPdig2PxvMl/JL1qDfIsypyAepMD/k/JlAWw/sOK
vb7+T38zQhXLPC0Y5kKM/4AhDTMuEvEDa6kkndcVHdEiAzyHJQoBqfA+a4OjldlY
Ln5IwjlwmNQNSyguNrWCicCKfpZ7mi9fD0RZyiWJ/VAxZQlD4IQ+P0J5UieElMj8
AGO2SrnPVBEfZ+3au+Jhf8v8gQ8IVO3K9WaaC1manJj+yvMzG7hsBwt0bbprEyTZ
hYAeC1b5UhtB+eivwDMMOlG181soZ9kid0jrvKisB7cQP8oI+nntFheQzddyPjSy
q6p71npHnAo/rni4+CRfTP/r6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbrVBZB
GWlS3hG+xd1LaaW/Xa8bMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE
NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4
RXI0RjczM3hxQ3V5aHhKcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuDXvYefhbbmpMtoY6DEOjxrbr4Aoii3uDBkqqHnPX58uGCl2R3EafV72zHp6
s74+BFjt+/4dp1RxBLKS3z3g7bpyERQmjuwRhAw4YLbZg+psDofOxAPYGnRD64xe
lqs/1r3Z4sZIhbSvCMIbQPeAlbk27+sBptu0VsGr0R7drZCUkCSWMd3J0Uw2w5po
4LmswpI1ODa2/siXqCUn6Lq7R9qbINNPBZzyda0Hui37NkYTrXfOHjYN4WVCXDmR
NwP06u5XuPGP4MJwIqSmImnLKUwSA6DBKrpMtTDMzWq11n53tDVxtDlp7E0kB+xB
+mBOnSaVWZR7g2cSYMtd1Nr/Xw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:14 2026 by rpki-client