
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json)
Hash identifier: 0HqeN8LRyPR5BLWkMIZAJfX9Eky/jqCkkDGrl1XTFaM=
Subject key identifier: C1:52:3F:9D:6E:F3:20:35:68:FE:75:E3:CD:8D:E3:F7:C5:1F:51:EC
Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
Manifest number: 014E
Signing time: Wed 25 Mar 2026 04:23:46 +0000
Manifest this update: Wed 25 Mar 2026 04:23:46 +0000
Manifest next update: Wed 01 Apr 2026 04:23:46 +0000
Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: bJ1yjKjSodTHR+YsLhnM9gctyEpHG+qnFkCA4C5dDEE=)
2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: F8ec6PAokFr2Tj50TlNBDnhUPWfBRTXaePI7bYNRmK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Validity
Not Before: Mar 25 04:23:46 2026 GMT
Not After : Apr 1 04:23:46 2026 GMT
Subject: CN=69c36352-314f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:25:73:87:8b:bf:c4:73:1a:e9:86:2b:ad:
9e:14:05:ea:c7:ae:34:f8:7a:6c:e9:da:57:e2:ce:
ea:7d:ac:0e:0b:36:30:54:03:76:ed:70:bc:d5:7d:
81:ba:89:70:55:40:9f:54:19:76:3b:84:2d:08:e6:
ca:33:14:fb:c0:7a:3b:36:48:d1:b8:2d:d9:7e:30:
e2:0f:a6:a6:97:3d:a8:0c:41:f3:bc:6c:0d:f5:8c:
f9:a2:71:31:8c:d4:b5:fc:a5:1b:64:d7:65:5d:f6:
7f:32:38:da:df:9d:16:cd:7c:53:24:5e:07:db:56:
e3:cb:f6:59:02:9c:1d:4a:c8:75:22:46:19:ce:00:
23:4c:49:13:cd:78:d3:7b:4e:16:17:9a:da:6d:a3:
a7:7a:52:54:59:8d:01:d4:6e:94:05:35:70:d8:90:
bf:24:b7:7f:aa:dd:2e:c7:7a:c5:d6:ed:27:a5:ce:
65:64:3c:ca:b7:8e:8d:cb:72:4a:71:3a:0d:9f:23:
73:f2:0b:0e:2a:e6:20:58:49:c5:ca:f8:d0:9e:c0:
cc:8f:27:17:f7:d4:2b:d3:82:9e:e7:92:42:9d:6a:
48:9c:a3:c6:f6:10:70:27:68:14:56:db:6b:b4:d0:
74:b4:69:b3:12:a2:b6:e7:b8:9b:8e:4e:7f:86:86:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:52:3F:9D:6E:F3:20:35:68:FE:75:E3:CD:8D:E3:F7:C5:1F:51:EC
X509v3 Authority Key Identifier:
keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:9f:cc:2d:43:5e:ef:05:24:ce:0a:f6:6e:18:e4:84:e6:7c:
a9:97:ac:d5:6f:e3:22:9c:36:33:e4:17:88:65:11:08:cf:92:
e8:9f:58:40:51:aa:73:0b:f5:81:32:26:b9:9e:a4:3e:32:54:
48:ae:1e:b0:c7:97:68:c9:42:32:8a:67:12:1a:61:d0:63:59:
59:b1:25:cb:50:59:98:a9:e6:63:55:cf:9e:1e:6a:76:37:93:
ea:ba:9d:00:30:c2:4d:16:06:1c:94:f9:5b:41:43:02:92:66:
a9:79:3d:30:91:04:df:58:56:8a:23:ab:3e:66:05:41:b3:cf:
d6:56:f2:5e:aa:e4:eb:4e:83:12:78:d6:0b:b1:b4:77:1f:58:
0d:de:4a:15:52:bf:86:09:bc:33:49:31:c2:3b:93:94:52:04:
5f:8a:e2:eb:d2:3c:24:62:3a:13:b4:11:6a:ef:f4:4b:9c:47:
c6:37:18:7c:03:50:12:22:1f:4c:be:2c:0c:64:a3:9d:69:a7:
77:6e:59:92:63:57:a9:26:00:28:1e:9a:0b:6c:56:24:f7:36:
5f:16:f2:67:8c:64:03:48:c0:f8:07:8e:7a:c4:cb:0b:5f:67:
3d:46:21:e1:df:59:af:e1:a6:d4:bf:fb:44:38:b6:fc:e1:3d:
85:d8:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:05 2026 by rpki-client