
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier: wMkMxVv23lWGVgakk882j/ViteSBGuly4hjOQ+eNCvo=
Subject key identifier: B7:2D:BE:87:28:12:A3:03:53:1C:D0:92:EC:AB:2E:54:6F:CF:A1:97
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number: EB
Signing time: Wed 25 Mar 2026 05:36:18 +0000
Manifest this update: Wed 25 Mar 2026 05:36:18 +0000
Manifest next update: Wed 01 Apr 2026 05:36:18 +0000
Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: 12hGOU+sX0liHGHk2gVpJhcSgasLYiA/iGhRDdGDWa4=)
2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: SlpOf782RmBcU6vc9OruiEeR0DjviJjgOX1TVRThoh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Validity
Not Before: Mar 25 05:36:18 2026 GMT
Not After : Apr 1 05:36:18 2026 GMT
Subject: CN=69c37452-2cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:90:1b:10:e9:8c:5e:f5:60:d6:3d:c3:d2:
07:13:f0:f0:7d:0c:fe:f1:78:bb:dd:18:c2:55:0e:
7f:3e:63:56:f6:d2:5e:0d:6d:a6:e6:a2:57:d7:ac:
f9:22:fb:8f:85:dc:30:64:c2:2a:2b:9a:97:9d:6b:
dd:21:ad:8f:9e:ba:1b:d0:8f:f2:f4:8a:cf:5f:15:
25:68:73:76:09:c5:98:c0:91:20:53:aa:2a:41:37:
ea:11:9a:a8:ad:90:e1:8e:f8:1d:fb:e3:99:db:a2:
d9:65:48:e0:0e:d8:df:56:3a:2c:aa:82:24:37:eb:
16:69:37:ec:85:58:40:67:67:6b:b3:cf:e6:4a:71:
57:e8:8e:7a:4a:1d:7c:e6:d6:cd:87:51:5f:aa:c7:
9b:07:6b:6d:7e:0a:74:d0:bf:4c:70:84:0e:4e:db:
15:1a:8d:ba:43:87:42:72:a1:1a:00:a9:bd:b5:5e:
b4:3d:ff:01:d8:7c:52:b4:b4:ea:74:ee:cf:eb:d3:
53:1c:76:d3:18:9e:a8:f8:70:e4:f2:9d:43:54:92:
86:ab:11:36:76:5c:b4:37:9a:43:ce:d9:76:61:f4:
79:17:bd:2c:99:02:86:7d:6e:25:d9:d0:56:61:d5:
92:72:c3:e2:35:ee:94:0f:f4:29:98:eb:34:ba:f4:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:BE:87:28:12:A3:03:53:1C:D0:92:EC:AB:2E:54:6F:CF:A1:97
X509v3 Authority Key Identifier:
keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:ec:67:a0:9e:50:c3:1b:a3:bb:d2:25:3b:90:ab:40:0e:
af:97:8d:e8:8e:8f:ce:44:a5:12:02:4f:7e:9b:a9:aa:99:36:
43:f3:3b:0f:b0:b8:24:ef:ba:18:85:8b:84:e8:bc:ad:7e:fd:
3d:a0:e6:e3:82:90:35:bd:ec:cd:48:3c:0f:95:38:a7:af:ff:
53:a1:5f:48:ad:18:9c:30:46:3b:d5:ae:89:83:b0:ea:a9:f9:
10:87:bf:97:97:91:ba:f4:42:95:ba:46:38:ce:04:e5:e5:17:
9d:22:b8:c1:6a:eb:4a:c0:57:62:40:de:89:4d:28:2d:e3:70:
34:8f:3d:aa:70:99:0c:db:09:ee:1c:c2:a9:82:89:51:8c:43:
3c:b0:32:fa:8f:e1:a1:4b:67:19:4d:bf:47:9f:dc:64:b5:7d:
c6:84:85:16:b7:1c:5f:21:88:af:c2:fd:33:d6:43:6e:91:f1:
9a:54:66:55:45:06:bc:77:66:bc:10:96:5e:70:a6:af:66:6b:
20:5e:92:07:2b:dc:68:08:1f:fa:5f:3d:f3:f5:0f:a4:53:66:
7b:ef:70:73:61:1a:b7:1a:55:a6:34:93:93:46:70:f9:6b:4d:
40:73:b1:e0:ac:6b:c7:8c:fb:8b:8d:ae:7f:da:aa:9e:a9:ff:
32:ee:d0:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB
OTNCNUExRDMwHhcNMjYwMzI1MDUzNjE4WhcNMjYwNDAxMDUzNjE4WjAYMRYwFAYD
VQQDEw02OWMzNzQ1Mi0yY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7aQGxDpjF71YNY9w9IHE/DwfQz+8Xi73RjCVQ5/PmNW9tJeDW2m5qJX16z5
IvuPhdwwZMIqK5qXnWvdIa2Pnrob0I/y9IrPXxUlaHN2CcWYwJEgU6oqQTfqEZqo
rZDhjvgd++OZ26LZZUjgDtjfVjosqoIkN+sWaTfshVhAZ2drs8/mSnFX6I56Sh18
5tbNh1FfqsebB2ttfgp00L9McIQOTtsVGo26Q4dCcqEaAKm9tV60Pf8B2HxStLTq
dO7P69NTHHbTGJ6o+HDk8p1DVJKGqxE2dly0N5pDztl2YfR5F70smQKGfW4l2dBW
YdWScsPiNe6UD/QpmOs0uvSyBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLctvoco
EqMDUxzQkuyrLlRvz6GXMB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy
MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjIwNy9BQ0IwNjg1RUMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2
Z1hqLW44WS1PQUdwTzFvZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVCPsZ6CeUMMbo7vSJTuQq0AOr5eN6I6PzkSlEgJPfpupqpk2Q/M7D7C4JO+6
GIWLhOi8rX79PaDm44KQNb3szUg8D5U4p6//U6FfSK0YnDBGO9WuiYOw6qn5EIe/
l5eRuvRClbpGOM4E5eUXnSK4wWrrSsBXYkDeiU0oLeNwNI89qnCZDNsJ7hzCqYKJ
UYxDPLAy+o/hoUtnGU2/R5/cZLV9xoSFFrccXyGIr8L9M9ZDbpHxmlRmVUUGvHdm
vBCWXnCmr2ZrIF6SByvcaAgf+l898/UPpFNme+9wc2EatxpVpjSTk0Zw+WtNQHOx
4Kxrx4z7i42uf9qqnqn/Mu7QOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:54 2026 by rpki-client