
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json)
Hash identifier: xjRWzKNgqMrUArdm3g+k3YS9SJ+Zv6lVeIJHy7Yf7Uo=
Subject key identifier: DE:7B:65:2A:5B:A9:96:09:A1:73:60:B3:23:21:65:85:3A:2C:E7:17
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial: 02F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
Manifest number: 02E7
Signing time: Wed 13 May 2026 01:26:19 +0000
Manifest this update: Wed 13 May 2026 01:26:18 +0000
Manifest next update: Wed 20 May 2026 01:26:18 +0000
Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: Xth5ArBxj1j9pDu1MeBEoAxtUYb1GGsem1d9QZ7IYNo=)
2: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: fau8zrxoL5+rKWWTOegWV7fze5dW+nWi1/hJ5SSwjv0=)
3: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: aefMK2H8VuJURMPwEnmuT8GCvTBNLWTHQiekOGLIEHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755 (0x2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Validity
Not Before: May 13 01:26:18 2026 GMT
Not After : May 20 01:26:18 2026 GMT
Subject: CN=6a03d33a-0348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:57:9d:b4:d1:66:72:41:0a:fc:30:e2:b4:15:
98:cf:e2:9c:74:ef:12:8e:ee:3d:ba:89:58:e8:ed:
34:fa:35:06:a2:2d:32:dd:5e:70:e9:45:df:39:56:
3f:00:e0:22:6b:96:3d:a1:fc:0d:19:10:13:18:cb:
ae:0b:98:f0:a7:22:50:43:c7:de:49:9f:30:f4:5a:
f6:89:43:40:c8:dc:66:27:e6:30:c8:82:ed:dc:de:
7d:27:e5:31:1f:09:fc:3e:0d:a0:04:78:63:94:3a:
17:98:64:25:6d:ec:01:e5:64:bc:4e:d8:0c:32:bc:
06:f7:dc:3d:39:38:ef:20:fd:76:50:c6:09:95:c3:
78:5f:ad:44:6a:ca:a4:fe:6c:14:d7:97:f4:f0:c1:
19:46:01:cc:1d:5d:62:f2:25:d5:4a:48:92:b1:51:
af:d9:98:99:59:3e:d9:a2:a6:1e:09:99:04:16:e0:
e0:35:22:1d:c7:2b:ca:62:18:a4:30:5d:c5:4c:f8:
94:bf:db:bb:74:62:68:18:0f:f9:38:9f:8b:5d:ca:
af:54:ed:b4:0b:99:2f:be:f0:5a:84:fb:3b:f2:5e:
e8:a9:6d:63:df:53:ab:b5:0f:e2:01:0d:e7:50:8d:
e7:e7:7f:b8:7b:7b:8b:63:e2:f5:03:ea:7b:3b:c7:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:65:2A:5B:A9:96:09:A1:73:60:B3:23:21:65:85:3A:2C:E7:17
X509v3 Authority Key Identifier:
keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:1c:97:ef:a6:ab:89:bd:70:3f:45:2e:20:b0:52:40:10:
82:99:f3:8d:b5:87:d2:5c:93:56:34:92:d9:d9:ae:a6:7b:57:
8f:7d:98:0e:48:6c:55:33:d1:53:95:09:f1:db:c8:b5:92:e7:
d1:b9:1e:1f:4c:d8:e6:bd:f3:28:86:5c:8e:45:2a:6f:0f:bb:
ab:06:d9:40:08:74:4c:2b:cf:3a:1f:09:51:f0:5f:92:98:e4:
9c:b5:25:a0:1c:70:03:39:1b:ec:32:98:50:a4:05:62:ad:0f:
cf:8a:b2:25:21:b4:4c:f3:c2:8c:ea:d6:5e:fb:17:93:a0:a2:
34:90:00:c0:1e:a8:27:31:a7:a0:39:97:30:ef:6e:6c:89:46:
a6:11:60:51:66:52:42:e9:06:c4:3c:ff:05:5a:36:be:f6:6a:
b8:cb:73:7d:8f:32:13:d2:7f:88:b3:dc:15:f0:55:0d:2d:b0:
8e:66:ea:6c:92:b4:89:ea:59:42:26:4f:34:fd:c7:06:66:a6:
84:59:22:40:9e:31:ef:2e:32:53:35:17:e4:f6:c8:42:ba:50:
60:95:39:a7:af:c9:e2:02:67:99:c0:88:8c:68:4f:c8:9d:39:
bd:7b:5f:c5:42:f7:2c:dc:00:1d:eb:a1:e7:6f:fa:3f:a9:6c:
01:56:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:51:18 2026 by rpki-client