
$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json)
Hash identifier: 5BbzDAURqfCREiXja6tLswqQpfXvafv1pmZMbZZ0vYo=
Subject key identifier: 2C:F0:06:1C:E2:8C:81:72:4E:F5:9E:8D:6B:7A:CD:59:8E:2F:A6:74
Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C
Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C
Certificate serial: 06EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
Manifest number: 06DB
Signing time: Tue 12 May 2026 22:23:37 +0000
Manifest this update: Tue 12 May 2026 22:23:37 +0000
Manifest next update: Tue 19 May 2026 22:23:37 +0000
Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: ttnunqSzu70yhGfJsYeygkaKOAZmbq21sAeC94QSQ5k=)
2: 4583B07E48C211F18ECCF553C1833773.roa (hash: HXn9pXyBFWHF7SjZX831+7rjZgjC80CCq9UKB/aEJtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl
rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C
Validity
Not Before: May 12 22:23:37 2026 GMT
Not After : May 19 22:23:37 2026 GMT
Subject: CN=6a03a869-5c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:0a:c8:28:ce:75:13:b7:a6:13:3d:8d:47:
04:95:6b:b8:fd:8c:84:a6:53:b9:c0:b4:8d:30:6a:
f6:26:14:f1:b5:6d:45:ee:ac:5b:b5:f6:59:4a:e9:
73:e9:32:a9:0d:d1:01:3c:58:b2:64:9b:11:79:aa:
17:c3:38:93:3a:7b:94:e7:39:20:c4:03:4a:e5:d5:
f7:3b:b1:73:a4:d7:01:d9:c2:ab:b6:85:e3:18:42:
36:4b:49:da:2b:91:ee:ff:d8:21:fe:da:0a:91:eb:
50:30:e3:b4:86:eb:f6:dd:8f:01:03:d0:1a:88:ef:
35:1f:20:70:f2:e4:0e:ee:b3:3f:0b:81:e7:fc:91:
19:6f:b5:2a:de:59:9e:46:38:aa:cd:d4:e0:b8:12:
b8:f7:fd:98:02:02:b4:8a:33:74:58:85:0b:6c:99:
97:e9:e5:41:98:c1:e5:59:2f:95:3e:78:48:48:5b:
e6:c4:bf:fb:47:46:19:d4:af:5b:f9:45:94:ab:de:
3b:dd:f5:84:cf:35:42:d5:65:ff:e6:4e:0b:a8:5e:
e9:0a:af:00:c2:b1:08:53:77:7c:90:39:36:9c:70:
16:d7:39:9f:9a:eb:7a:9d:ed:61:e3:8d:2c:db:72:
00:92:2c:5e:32:5b:a7:c3:b2:7b:b6:2d:84:d3:99:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:06:1C:E2:8C:81:72:4E:F5:9E:8D:6B:7A:CD:59:8E:2F:A6:74
X509v3 Authority Key Identifier:
keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b9:52:f8:a7:13:22:b0:e1:88:fa:fa:9c:13:a7:35:ec:b5:
5f:de:fd:2b:f1:c3:c2:5c:42:13:00:32:f1:4b:39:46:9d:dd:
7f:a3:f5:7a:ba:f7:ac:4a:e7:c3:a1:b0:79:36:08:fc:af:a3:
72:51:91:83:d6:92:c7:08:5c:05:02:00:16:34:e7:fd:90:64:
5b:57:64:6b:e7:09:9c:e6:87:91:64:80:1e:33:68:fc:a3:5b:
8e:3d:39:dc:17:a0:8b:1a:c7:40:64:82:b7:f6:c7:b4:bb:61:
11:fe:00:7e:c0:5e:f3:c6:27:04:b6:16:7e:9b:25:34:8c:bc:
39:fa:3d:d1:ae:55:e2:d3:72:32:35:13:31:93:52:9a:91:4e:
e3:d2:67:e1:e6:15:f7:2f:4b:8a:73:57:b0:2c:d4:89:7b:7d:
2d:cd:38:0f:8a:79:4c:3c:8c:ac:05:f7:a5:dd:16:9d:e8:c0:
ed:7b:e1:be:ed:79:aa:4f:05:96:28:ec:a0:e3:d7:81:0c:ef:
61:a0:12:8e:b8:9c:1a:90:c1:10:99:62:ab:9c:27:e1:a7:e3:
a7:21:e6:af:47:04:e0:e8:65:f7:92:7c:c7:08:08:85:20:e2:
26:fb:7b:06:a9:1a:94:b6:a2:b3:49:21:b6:71:cf:20:71:16:
2a:54:fa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:41:25 2026 by rpki-client