
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json)
Hash identifier: QZxGS/HmxkmGMtCIzLkPlGU79rd1pntyKy2t9Go82m4=
Subject key identifier: 66:B6:0A:AA:CC:76:3E:CD:3F:16:76:4C:66:8C:D5:DA:A9:AB:EE:F1
Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
Manifest number: 01D2
Signing time: Wed 25 Mar 2026 02:55:42 +0000
Manifest this update: Wed 25 Mar 2026 02:55:42 +0000
Manifest next update: Wed 01 Apr 2026 02:55:42 +0000
Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: mlaI6AFz39MZEt2aockue9SLihnmeICZl/LKW12SMEE=)
2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: UORe/0TZF8IoRoAarwALcIbpOxjo7QBKBArFHjwhFB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Validity
Not Before: Mar 25 02:55:42 2026 GMT
Not After : Apr 1 02:55:42 2026 GMT
Subject: CN=69c34eae-9555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:b3:78:9e:c6:65:ac:1a:74:8a:f7:05:11:
ad:1d:f4:bb:05:ff:07:02:73:f5:dc:0f:0a:8f:14:
5b:b7:5d:83:68:d4:73:7f:d1:4a:92:79:42:c2:4a:
ee:fe:9e:39:35:0b:5a:a9:f2:33:85:4e:55:64:fe:
8f:87:0b:72:be:09:fb:a6:93:03:a1:35:04:db:89:
62:11:b4:c6:2c:b2:13:3d:37:5b:1e:2d:d4:a7:9f:
cb:4a:1a:ef:f1:cc:fe:73:32:93:70:61:65:88:b1:
63:c7:ec:ba:6d:9a:1e:f9:26:9c:b0:e1:dc:fa:e2:
df:ca:a5:3e:d4:45:13:6f:5c:51:63:c4:0e:cd:7c:
1b:d5:dd:e1:fa:1f:16:bc:cb:90:7d:60:b7:5b:68:
0c:d8:ad:df:19:b7:29:65:95:9e:18:a9:88:3a:48:
d9:85:27:13:1f:5b:26:51:d1:ea:e9:82:1d:78:5b:
6c:90:d5:a2:90:78:da:f0:17:8c:01:7e:c0:19:f0:
d8:0b:d7:70:59:87:bb:60:12:93:bc:46:25:b1:ea:
4a:8b:92:46:df:2f:c4:77:dc:1b:9e:7b:bf:51:68:
ae:40:f4:20:3a:3b:86:3f:4f:6a:78:5b:ec:4e:33:
ac:ef:ef:ee:cc:df:f0:09:d7:c7:48:84:cb:d0:cd:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:0A:AA:CC:76:3E:CD:3F:16:76:4C:66:8C:D5:DA:A9:AB:EE:F1
X509v3 Authority Key Identifier:
keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:63:e2:e9:dc:22:f8:3f:d7:d8:2b:d2:ac:48:b2:36:ef:07:
eb:85:de:af:41:15:95:67:0e:ee:e6:04:26:a1:2f:ca:ab:7a:
2b:c0:29:47:41:24:f5:59:29:ac:d7:a8:83:0a:4b:7e:e5:fa:
4c:d2:e1:04:8e:06:9d:a8:8f:77:80:b0:65:78:43:fd:80:6e:
7a:84:0a:36:e2:d1:fe:01:79:db:f9:1d:9b:00:d3:b4:de:eb:
6d:b2:33:af:5f:e3:60:1d:db:64:a2:18:b8:43:d6:e2:fa:31:
ef:b7:b8:43:c6:8a:b6:20:25:1c:b5:d3:ca:0e:1a:f9:c4:de:
bf:fa:93:eb:b1:99:5b:74:2f:af:7e:7c:db:2f:e1:bc:82:82:
63:10:1b:f4:e1:6e:51:ca:c8:af:3f:d6:53:57:35:ce:51:03:
ea:3f:64:ba:47:ad:f1:3d:b0:3d:c7:5c:5b:38:9d:7a:82:92:
59:05:82:de:dc:c0:ea:41:75:3c:e9:75:b0:bc:0e:64:d6:c8:
78:41:98:1b:2d:0a:ae:b8:e9:0d:a3:62:12:e3:a4:fe:5e:86:
f7:84:32:3d:a7:89:57:cb:09:d0:62:7f:68:2d:5f:df:a0:ad:
1c:e9:90:de:52:69:86:dd:fd:e5:37:ca:3f:78:b1:7a:5a:4e:
09:84:a7:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw
QzA2OUMzMkIwHhcNMjYwMzI1MDI1NTQyWhcNMjYwNDAxMDI1NTQyWjAYMRYwFAYD
VQQDEw02OWMzNGVhZS05NTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApRuzeJ7GZawadIr3BRGtHfS7Bf8HAnP13A8KjxRbt12DaNRzf9FKknlCwkru
/p45NQtaqfIzhU5VZP6Phwtyvgn7ppMDoTUE24liEbTGLLITPTdbHi3Up5/LShrv
8cz+czKTcGFliLFjx+y6bZoe+SacsOHc+uLfyqU+1EUTb1xRY8QOzXwb1d3h+h8W
vMuQfWC3W2gM2K3fGbcpZZWeGKmIOkjZhScTH1smUdHq6YIdeFtskNWikHja8BeM
AX7AGfDYC9dwWYe7YBKTvEYlsepKi5JG3y/Ed9wbnnu/UWiuQPQgOjuGP09qeFvs
TjOs7+/uzN/wCdfHSITL0M0hAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGa2CqrM
dj7NPxZ2TGaM1dqpq+7xMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx
QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE
VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw2Pi6dwi+D/X2CvSrEiyNu8H64Xer0EVlWcO7uYEJqEvyqt6K8ApR0Ek9Vkp
rNeogwpLfuX6TNLhBI4GnaiPd4CwZXhD/YBueoQKNuLR/gF52/kdmwDTtN7rbbIz
r1/jYB3bZKIYuEPW4vox77e4Q8aKtiAlHLXTyg4a+cTev/qT67GZW3Qvr3582y/h
vIKCYxAb9OFuUcrIrz/WU1c1zlED6j9kuket8T2wPcdcWzideoKSWQWC3tzA6kF1
POl1sLwOZNbIeEGYGy0KrrjpDaNiEuOk/l6G94QyPaeJV8sJ0GJ/aC1f36CtHOmQ
3lJpht395TfKP3ixelpOCYSnzA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:21:20 2026 by rpki-client