
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft
File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json)
Hash identifier: B9SEuCzskZCKopxh9DxGSSk/Yxwi2o7SOzA9rc5vo9A=
Subject key identifier: 91:75:5A:E4:83:20:F6:BE:8C:4E:1A:86:FE:44:F4:54:3F:D9:FB:E7
Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24
Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924
Certificate serial: 04E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft
Manifest number: 04D5
Signing time: Tue 12 May 2026 23:57:04 +0000
Manifest this update: Tue 12 May 2026 23:57:03 +0000
Manifest next update: Tue 19 May 2026 23:57:03 +0000
Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: xVLdBmFsC96qj8mgZH7S+c6CF3kh2SY1PlywfZh3RVk=)
2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: zzqL67oBfa7jh21a6YkB8pxmZp3PhnTtbMccXW5iB0o=)
3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: RIwVKjVZKrFHjQ/9a+o2G3hFBPmeu0/eXYz01rKe7M4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl
rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924
Validity
Not Before: May 12 23:57:03 2026 GMT
Not After : May 19 23:57:03 2026 GMT
Subject: CN=6a03be50-c94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:60:7f:a6:99:b7:46:fe:58:5d:c7:11:00:
9a:45:15:55:ba:84:d7:a5:d5:7a:2e:31:b9:ce:3d:
be:87:6b:96:3f:cf:5c:d6:dc:53:ea:5a:48:75:d0:
73:14:a8:0c:6c:8f:49:70:6e:16:c3:dc:d4:56:0a:
54:0a:39:5d:19:b3:db:c5:a2:74:a6:55:70:04:cb:
af:57:7f:5d:81:71:ed:9a:98:20:88:22:b1:c4:8c:
b2:77:b8:1b:e0:ba:af:66:db:d9:9b:8a:74:64:5c:
08:b4:eb:bf:07:13:ff:9c:ae:55:d8:76:09:16:f4:
44:24:18:13:96:15:97:47:f3:2a:c1:c5:b0:b1:1d:
42:ed:dc:a3:7f:ba:ab:11:1d:04:61:69:ce:ba:85:
5f:fe:ec:9b:af:57:58:73:4b:a1:1c:2b:31:70:9e:
4a:c8:ac:64:39:29:89:d5:96:60:0d:6d:4a:c4:07:
cb:62:00:37:62:92:3f:fb:3f:99:74:f2:34:c6:91:
bf:b8:66:96:15:35:91:72:a2:74:69:ae:1e:84:57:
f6:9a:a5:d1:ee:23:2f:ce:bc:15:7e:b8:f6:9c:ad:
43:d5:78:51:71:62:da:c8:d3:65:af:10:d7:70:42:
c0:38:2d:2a:cf:bc:fc:33:a2:f6:7d:f2:09:83:eb:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:5A:E4:83:20:F6:BE:8C:4E:1A:86:FE:44:F4:54:3F:D9:FB:E7
X509v3 Authority Key Identifier:
keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:76:8e:c6:c0:e8:00:c3:dd:cd:73:54:3f:75:7d:0e:84:f2:
f6:d4:71:19:29:8d:25:e2:c7:e6:eb:17:e1:6d:8a:f6:6b:4b:
0c:56:b7:37:9c:0c:94:e7:10:99:dd:28:7e:01:a5:34:7b:ad:
f2:88:ec:38:d1:73:a3:e1:98:dd:9b:8a:da:31:ee:4f:fa:03:
56:7c:ae:c8:65:58:aa:53:ea:8c:69:39:bc:1f:dd:d4:77:c2:
92:d1:95:75:80:dd:f7:d6:34:5f:2f:e7:aa:71:6c:57:df:6b:
a3:2e:7e:9e:c8:8b:f7:3d:26:26:a1:a5:89:be:b0:c8:4a:f5:
e5:1b:a4:f6:73:e4:f0:b1:65:34:7c:1d:3a:3e:8b:23:7e:ef:
36:1f:f4:cc:ff:6f:b2:b6:c6:8e:3e:e2:2a:07:8e:30:03:bd:
81:09:f1:8b:7a:81:ae:9b:48:81:21:c3:e6:b4:90:b1:77:d1:
e0:0b:7f:b4:03:3e:00:c8:9c:2f:bf:05:ee:8a:82:47:a5:63:
60:f7:0d:04:af:72:69:70:1c:b3:52:ef:28:17:ab:6b:04:7e:
d3:cb:e8:e0:f6:06:e0:75:7e:9b:b2:83:f7:25:19:59:22:e4:
1e:10:cb:62:ce:ad:60:13:e5:1c:b7:7b:6d:2a:88:e9:9a:b5:
72:6a:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:36 2026 by rpki-client