
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier: 8w8fcroPpRSNL/TgO2LvN/1AW98KY+Za7AyD7Sp6nIs=
Subject key identifier: 47:81:CC:3C:D8:FA:E7:9B:56:7D:6D:BE:87:DC:C6:8D:B6:2F:A9:A5
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial: 078F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number: 077C
Signing time: Tue 24 Mar 2026 21:21:54 +0000
Manifest this update: Tue 24 Mar 2026 21:21:53 +0000
Manifest next update: Tue 31 Mar 2026 21:21:53 +0000
Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: rzJY8D3mlwmXpYS0s5RMeH5RDRn48h3Fc1E79OmdEg4=)
2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Validity
Not Before: Mar 24 21:21:53 2026 GMT
Not After : Mar 31 21:21:53 2026 GMT
Subject: CN=69c30072-21f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:66:83:7a:50:d3:f0:fd:89:00:00:16:96:
a2:aa:2e:e5:0d:17:4e:00:9c:d2:90:64:2e:45:90:
63:d4:1a:f5:0e:75:ea:cb:be:b5:e8:ce:d9:78:d8:
9a:ab:a8:15:50:7c:2a:b8:1b:46:7b:fa:08:dd:fa:
e0:44:f8:12:bb:85:14:b9:9c:82:e5:a1:98:66:ab:
f1:cb:5f:24:d7:4a:c1:05:f4:1d:50:1a:9a:54:e6:
58:ed:1b:e9:2a:e3:b4:49:5e:ae:fe:49:d2:a7:51:
87:8a:58:eb:8d:74:41:64:89:5a:88:14:6d:14:4a:
02:34:ce:fe:ec:42:29:5f:21:a6:da:bf:90:d6:ea:
e1:57:6e:f5:bc:94:ee:28:b0:bc:98:7f:38:8c:42:
45:c9:fa:36:a9:4a:b3:1a:cc:bf:46:3c:7e:02:02:
ae:8c:d9:0a:d6:fc:70:29:a1:cf:35:f1:76:c1:c8:
e0:75:66:30:d4:88:fb:51:dd:68:e0:c5:f9:d3:88:
ae:64:c5:19:2e:19:4b:b4:9e:3c:9b:79:8a:48:1e:
59:2c:21:b4:03:63:7c:a7:2c:3f:bd:bf:10:24:3b:
59:f6:05:b5:08:e0:0c:77:66:d6:36:f0:ab:7a:67:
b0:42:3c:14:2e:df:4c:69:4f:c1:fa:20:45:20:13:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:81:CC:3C:D8:FA:E7:9B:56:7D:6D:BE:87:DC:C6:8D:B6:2F:A9:A5
X509v3 Authority Key Identifier:
keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e2:b8:40:a7:c8:4e:46:40:47:4f:f2:4b:54:ff:3b:e9:ab:
1f:f6:5e:e4:9b:56:c3:63:8d:2e:1d:1c:53:e6:e1:98:7b:fb:
ca:f8:97:97:0b:02:1f:fd:56:68:f9:0d:08:cb:1c:8e:78:a2:
95:99:9d:cf:34:55:80:4a:69:72:e3:50:1e:46:41:3e:42:04:
50:35:f9:74:3f:6c:0a:3e:23:bd:e6:9c:d4:5b:a9:8c:26:52:
05:9f:eb:2c:25:6e:a3:34:b2:2d:b6:a8:21:66:57:40:11:83:
3a:ff:b4:df:e8:71:fd:de:49:aa:2b:a3:d3:fe:7f:6a:ff:83:
bd:85:b7:68:2f:5c:96:b0:ce:29:47:5d:c8:83:f0:ba:d5:e3:
cb:37:00:07:94:60:63:6e:73:22:69:f0:a6:fd:cb:37:e6:b0:
1c:38:92:84:1b:31:e2:9f:42:be:c4:03:0c:ff:0a:32:89:2c:
ed:55:44:78:bc:c6:ef:b8:8d:c5:97:1c:9f:b7:de:99:70:09:
48:ee:41:04:1e:b4:31:9d:f4:57:82:ba:20:ba:5a:ad:b6:97:
af:db:dc:53:79:5b:fb:06:9d:61:b3:76:c1:c7:ce:49:24:46:
e3:f4:38:8a:e4:f7:0f:c8:ab:b1:22:a8:3e:56:06:f6:d2:18:
6b:79:26:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD
NzQ0ODk1QzIwHhcNMjYwMzI0MjEyMTUzWhcNMjYwMzMxMjEyMTUzWjAYMRYwFAYD
VQQDEw02OWMzMDA3Mi0yMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0MFmg3pQ0/D9iQAAFpaiqi7lDRdOAJzSkGQuRZBj1Br1DnXqy7616M7ZeNia
q6gVUHwquBtGe/oI3frgRPgSu4UUuZyC5aGYZqvxy18k10rBBfQdUBqaVOZY7Rvp
KuO0SV6u/knSp1GHiljrjXRBZIlaiBRtFEoCNM7+7EIpXyGm2r+Q1urhV271vJTu
KLC8mH84jEJFyfo2qUqzGsy/Rjx+AgKujNkK1vxwKaHPNfF2wcjgdWYw1Ij7Ud1o
4MX504iuZMUZLhlLtJ48m3mKSB5ZLCG0A2N8pyw/vb8QJDtZ9gW1COAMd2bWNvCr
emewQjwULt9MaU/B+iBFIBNpmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeBzDzY
+uebVn1tvofcxo22L6mlMB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2
MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf
QzZvR1dwTDJVX1hIUklsY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoeK4QKfITkZAR0/yS1T/O+mrH/Ze5JtWw2ONLh0cU+bhmHv7yviXlwsCH/1W
aPkNCMscjniilZmdzzRVgEppcuNQHkZBPkIEUDX5dD9sCj4jveac1FupjCZSBZ/r
LCVuozSyLbaoIWZXQBGDOv+03+hx/d5Jqiuj0/5/av+DvYW3aC9clrDOKUddyIPw
utXjyzcAB5RgY25zImnwpv3LN+awHDiShBsx4p9CvsQDDP8KMoks7VVEeLzG77iN
xZccn7femXAJSO5BBB60MZ30V4K6ILparbaXr9vcU3lb+wadYbN2wcfOSSRG4/Q4
iuT3D8irsSKoPlYG9tIYa3kmJA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:25 2026 by rpki-client