
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json)
Hash identifier: WG/4vJ8yXPpiSMX9D7L0D7ZWV6dHCTBq5/tWRe8Cwu8=
Subject key identifier: A7:D1:06:A7:0E:96:7A:F2:C5:09:87:5E:36:F8:95:9D:30:BD:10:87
Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Certificate serial: 0C30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
Manifest number: 0C24
Signing time: Tue 24 Mar 2026 18:37:42 +0000
Manifest this update: Tue 24 Mar 2026 18:37:41 +0000
Manifest next update: Tue 31 Mar 2026 18:37:41 +0000
Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: lPP/8i0vyLWSnwaX9R6rpZPK2dkIryoXSv+NshSGzGQ=)
2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: HwE2Q0NQdpDz1uIc7O5V43S4b46xyejHY0vWphKjiw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Validity
Not Before: Mar 24 18:37:41 2026 GMT
Not After : Mar 31 18:37:41 2026 GMT
Subject: CN=69c2d9f6-edaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:c9:8a:75:9c:5b:e5:3b:a3:23:17:8f:1a:
7a:a0:0f:4e:1d:c5:61:87:07:99:3d:77:fc:a2:a5:
9e:db:87:25:2a:89:d7:84:ca:34:86:d4:ad:77:53:
9b:7c:5a:8d:5b:28:4a:a2:d8:cb:15:95:e0:c6:7b:
de:9e:b4:48:80:3d:96:fc:6c:91:e7:70:06:b2:72:
16:f1:31:93:ba:23:e6:4f:a0:60:59:72:23:5e:bc:
32:34:b4:39:75:d5:4f:73:6c:29:90:5f:cc:57:09:
bb:83:2c:5a:b9:c2:bf:3f:6a:df:14:0d:ba:45:c2:
94:6c:62:84:3e:47:2a:e9:be:b3:ff:34:2a:a3:41:
67:ed:31:0a:f6:1b:0c:e9:f8:01:f3:f8:c5:b2:e5:
14:93:2f:bc:73:19:54:1c:74:68:b1:f0:a2:51:e9:
3c:68:7f:42:7b:e9:6e:13:53:69:86:67:7e:0c:8a:
12:c9:5a:ea:b5:6d:97:a4:95:8e:b6:1a:52:ef:d8:
7d:18:5c:cf:f8:11:f9:69:d3:ff:c0:22:98:e3:f3:
aa:13:6c:76:da:ac:01:4b:2d:aa:02:60:85:14:9d:
60:59:10:0d:a2:8c:9c:96:fe:4a:87:94:5b:3f:78:
1e:d8:5c:31:bd:f7:09:d7:af:25:30:88:06:ba:c2:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:06:A7:0E:96:7A:F2:C5:09:87:5E:36:F8:95:9D:30:BD:10:87
X509v3 Authority Key Identifier:
keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:8f:00:1a:6a:16:dc:9b:d3:8f:db:9e:60:14:6f:ff:d1:2a:
2a:8a:9b:a0:57:0b:ec:da:8d:a0:c8:8a:4c:8a:20:74:23:b1:
32:8a:93:86:0b:88:3d:d4:d3:c4:72:82:74:7d:a9:49:a9:90:
80:b3:13:08:f1:4c:9d:2a:dd:00:07:c7:b5:5d:a7:0e:1a:49:
25:bf:9b:0d:c5:b3:d6:fc:1b:0b:30:71:45:b8:7c:09:98:63:
a2:db:d3:06:d7:ee:df:36:c9:e7:47:e8:45:2a:31:20:58:af:
7e:43:4d:38:88:46:3c:3f:1e:bb:21:9a:73:01:52:58:8f:45:
97:2f:98:c1:1d:b4:10:e8:da:a5:db:46:c1:c4:08:29:26:e7:
c2:e7:28:cf:e6:56:a5:6d:f4:95:6c:57:6d:ab:8f:44:98:83:
84:50:c7:7b:e3:62:7f:86:89:dc:9b:a4:a7:54:a8:ba:3b:4d:
9b:56:cd:f7:7a:f8:be:7c:b3:41:ad:89:a3:48:1e:95:f6:11:
88:65:62:c5:e2:4a:6e:f4:92:fa:aa:97:b6:10:05:20:e3:6c:
91:a0:97:17:6d:4c:99:36:59:90:aa:7d:fa:d5:a3:67:b7:aa:
ba:fd:4f:70:12:6a:ea:27:13:35:c6:0f:6a:14:3a:8c:ca:60:
48:44:68:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB
QTk1Q0EyRDMwHhcNMjYwMzI0MTgzNzQxWhcNMjYwMzMxMTgzNzQxWjAYMRYwFAYD
VQQDEw02OWMyZDlmNi1lZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4bbJinWcW+U7oyMXjxp6oA9OHcVhhweZPXf8oqWe24clKonXhMo0htStd1Ob
fFqNWyhKotjLFZXgxnvenrRIgD2W/GyR53AGsnIW8TGTuiPmT6BgWXIjXrwyNLQ5
ddVPc2wpkF/MVwm7gyxaucK/P2rfFA26RcKUbGKEPkcq6b6z/zQqo0Fn7TEK9hsM
6fgB8/jFsuUUky+8cxlUHHRosfCiUek8aH9Ce+luE1Nphmd+DIoSyVrqtW2XpJWO
thpS79h9GFzP+BH5adP/wCKY4/OqE2x22qwBSy2qAmCFFJ1gWRANooyclv5Kh5Rb
P3ge2FwxvfcJ168lMIgGusLQFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfRBqcO
lnryxQmHXjb4lZ0wvRCHMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC
MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK
RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEo8AGmoW3JvTj9ueYBRv/9EqKoqboFcL7NqNoMiKTIogdCOxMoqThguIPdTT
xHKCdH2pSamQgLMTCPFMnSrdAAfHtV2nDhpJJb+bDcWz1vwbCzBxRbh8CZhjotvT
Btfu3zbJ50foRSoxIFivfkNNOIhGPD8euyGacwFSWI9Fly+YwR20EOjapdtGwcQI
KSbnwucoz+ZWpW30lWxXbauPRJiDhFDHe+Nif4aJ3Jukp1SoujtNm1bN93r4vnyz
Qa2Jo0gelfYRiGVixeJKbvSS+qqXthAFIONskaCXF21MmTZZkKp9+tWjZ7equv1P
cBJq6icTNcYPahQ6jMpgSERoiA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:26 2026 by rpki-client