
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json)
Hash identifier: 7CMLYQOclXWqVJ64j0QCharrMNA/NJHjudX5I8OP2EA=
Subject key identifier: 71:D3:23:91:26:8C:13:30:12:5C:51:46:AA:66:7C:53:DA:A1:4F:A2
Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Certificate serial: 0C36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
Manifest number: 0C19
Signing time: Tue 12 May 2026 18:51:56 +0000
Manifest this update: Tue 12 May 2026 18:51:56 +0000
Manifest next update: Tue 19 May 2026 18:51:56 +0000
Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: UQztdMaJ0adhvia5MPGJfRbnVV9s9942/yc/PAXW2uo=)
2: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: 1aYucsJJizOrJGwERLeDG0d5XIi/bHOIooEKsMrUEo8=)
3: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: QfT2Eaqv5QPDrORQi1WneHGHYWsLdTVYS3iMbBaZBv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3126 (0xc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Validity
Not Before: May 12 18:51:56 2026 GMT
Not After : May 19 18:51:56 2026 GMT
Subject: CN=6a0376cc-b756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:97:e0:50:73:8c:95:2e:19:b4:b1:91:39:
9f:02:a2:7e:81:ce:7e:6c:99:d3:7a:6e:75:b8:6f:
6e:96:19:19:42:fc:75:af:f3:1e:30:8e:07:0f:80:
16:a3:92:bf:78:6a:30:00:a7:0f:77:aa:2c:cf:50:
77:bc:1b:94:be:7e:4d:9b:43:e0:23:96:dd:cd:01:
3c:d9:0b:4e:7c:76:c3:f8:ab:d1:01:8d:6e:c8:d1:
51:ab:00:d0:f3:1b:53:c9:47:80:57:da:32:fd:a0:
46:3e:ee:38:95:43:d6:41:52:65:b4:b7:03:10:ec:
12:d9:dc:04:68:04:9a:27:f8:4e:36:f1:ec:3c:2a:
c7:c0:a1:cb:70:ec:83:fc:dd:c5:04:fa:fe:6d:8b:
37:1e:14:23:13:09:3b:a8:13:0e:d1:f6:ef:41:6c:
17:82:6e:2a:b3:07:c3:68:a1:e0:5e:5d:1e:22:66:
50:d3:3b:05:1b:01:ce:ba:a7:01:e9:17:7a:15:34:
97:f5:40:2e:7a:67:d7:c9:56:82:7a:ec:96:97:95:
63:de:d7:fa:09:f6:de:99:06:12:ea:bc:08:9d:ff:
7e:c2:31:c4:cd:ed:b4:64:49:cb:6f:65:a1:b0:c5:
fc:e8:ba:15:0c:33:23:4a:e0:35:98:30:fe:d0:23:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:23:91:26:8C:13:30:12:5C:51:46:AA:66:7C:53:DA:A1:4F:A2
X509v3 Authority Key Identifier:
keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bc:cd:8d:1c:e7:6a:d2:33:83:3d:55:da:14:a1:c6:ed:9b:
ce:ff:b1:28:d6:8a:0e:b6:4d:1e:16:a1:6f:af:36:79:3c:f0:
3b:df:6e:90:11:76:75:c3:d2:05:83:2d:72:fb:26:ee:bb:36:
5d:57:b0:63:fc:34:a2:c9:9f:1e:31:ef:3c:ef:21:e9:71:5d:
9c:b6:b8:cb:cc:7f:0e:eb:f1:77:cb:8d:34:27:39:0f:ae:4b:
dc:13:4f:e3:22:82:40:31:8d:4b:2c:4c:ca:aa:67:89:1e:65:
05:56:6d:c2:ec:02:e5:93:a5:be:86:65:92:ca:49:4d:9d:2e:
32:af:b6:25:48:ae:74:11:12:7d:d8:9e:9c:a6:08:33:59:41:
46:66:54:a0:ea:ac:58:ae:3c:3b:bc:89:aa:f8:3b:88:e4:7d:
03:8f:9d:0c:cc:07:15:f7:90:8f:d9:d9:63:d6:fa:6e:35:f7:
40:22:65:22:76:14:b6:88:3b:be:bc:65:eb:d4:66:bb:d4:54:
5b:c6:6b:e4:18:e2:71:9b:dd:b2:81:0b:a6:19:49:68:d3:ca:
ae:86:bb:f7:b4:1d:f3:8a:9a:8d:f2:f1:0f:36:44:84:c6:a8:
06:1a:c1:91:25:a6:97:8a:a8:cf:2f:0d:ae:82:6d:e7:04:21:
51:fe:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:35 2026 by rpki-client