
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json)
Hash identifier: HDeutxyxP91fwgV8hvTcKCXGJeNWbCqE/wAZIijRAtU=
Subject key identifier: EF:03:DA:16:3F:A8:77:6B:16:67:D2:A9:5E:B5:34:D7:DA:86:2E:0D
Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Certificate serial: 0C8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
Manifest number: 0C81
Signing time: Tue 22 Sep 2026 18:32:12 +0000
Manifest this update: Tue 22 Sep 2026 18:32:11 +0000
Manifest next update: Tue 29 Sep 2026 18:32:11 +0000
Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: IFcd3opw9wmlUQxcU1wQsR3tGf1z7n2R8flQi3NiYig=)
2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: HwE2Q0NQdpDz1uIc7O5V43S4b46xyejHY0vWphKjiw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Validity
Not Before: Sep 22 18:32:11 2026 GMT
Not After : Sep 29 18:32:11 2026 GMT
Subject: CN=6ab2c9ac-4ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:0e:ae:38:f4:0a:02:0b:06:b1:65:f9:d4:
7f:0f:91:05:cd:d5:f4:ed:52:0c:a6:a0:18:6d:98:
3e:b6:85:58:5d:2b:73:a4:37:c4:b9:a4:df:f3:0c:
46:b5:46:f1:22:86:3e:2e:e3:ae:5c:d9:39:07:0c:
70:90:4d:c6:6b:e4:84:58:7d:11:44:75:c8:33:db:
47:e2:05:28:84:50:ad:9e:71:2e:5e:eb:f1:b1:41:
b1:da:b1:e1:8b:c1:0e:20:01:dc:3c:b6:ba:93:cc:
54:ca:a4:f0:f6:bb:27:f1:59:5a:50:57:a0:d3:9a:
a5:20:62:61:08:ba:3e:75:98:b4:2a:d4:04:22:12:
c5:d5:a4:fe:1a:a1:1c:12:73:84:e0:75:d2:7f:cf:
1f:ee:b2:92:41:93:ea:2b:af:0b:f1:26:17:ad:fb:
72:f4:35:e3:e9:a2:2f:ea:9e:db:ac:46:91:b8:c8:
57:c0:ee:7b:e3:36:4c:76:58:2d:2c:0c:be:72:f7:
86:a5:d0:36:65:2c:39:a5:86:e2:cf:39:1c:cd:d0:
6f:84:17:17:0c:8b:dd:6d:80:91:6e:03:a3:a1:dc:
76:b5:e7:57:ca:95:db:6c:e0:ce:15:35:36:f4:b6:
fc:86:57:85:9d:26:b6:ab:f1:17:95:95:98:f2:a5:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:03:DA:16:3F:A8:77:6B:16:67:D2:A9:5E:B5:34:D7:DA:86:2E:0D
X509v3 Authority Key Identifier:
keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:2b:7c:74:03:9b:05:39:3c:d6:2c:f9:62:1b:7c:6f:f6:b5:
40:59:e0:7c:ed:f0:aa:86:9d:80:23:d9:ae:bb:b4:df:40:a0:
9b:34:df:70:4d:e8:be:5d:20:2e:e8:ce:e1:a3:75:48:1c:9c:
f9:61:c4:cb:a2:f4:36:89:bf:6b:8e:fd:99:c7:07:ff:18:7d:
63:90:bd:91:13:79:8d:af:e2:89:29:73:66:1f:24:6a:45:7a:
ef:3f:fc:2e:6e:1e:3b:2c:b7:6e:89:fc:f2:ac:f9:1a:b1:66:
6c:df:6b:3d:ee:04:9d:10:51:28:85:87:d5:e3:55:42:27:a1:
8f:d6:4b:93:58:4f:a9:a5:1d:cd:5b:62:60:0b:22:5a:c9:03:
d2:40:30:e6:c2:05:4d:c8:fe:13:11:16:96:73:b3:40:3d:e3:
fd:0f:d6:03:83:df:3f:78:59:50:20:21:ef:2d:ec:c1:af:aa:
2d:fb:a5:0f:26:e7:d9:29:e9:25:58:1f:73:8d:d9:2b:4b:42:
64:c4:c7:d6:5a:c7:63:0f:71:61:d9:a8:4e:0c:42:5e:fb:84:
75:37:7e:1d:ea:b6:19:00:83:cc:3d:da:b9:73:06:bb:91:9e:
79:f0:2f:7c:94:84:d3:11:ab:ee:ee:ba:45:7a:b8:bc:1e:13:
4a:aa:e5:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB
QTk1Q0EyRDMwHhcNMjYwOTIyMTgzMjExWhcNMjYwOTI5MTgzMjExWjAYMRYwFAYD
VQQDEw02YWIyYzlhYy00YWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDMOrjj0CgILBrFl+dR/D5EFzdX07VIMpqAYbZg+toVYXStzpDfEuaTf8wxG
tUbxIoY+LuOuXNk5BwxwkE3Ga+SEWH0RRHXIM9tH4gUohFCtnnEuXuvxsUGx2rHh
i8EOIAHcPLa6k8xUyqTw9rsn8VlaUFeg05qlIGJhCLo+dZi0KtQEIhLF1aT+GqEc
EnOE4HXSf88f7rKSQZPqK68L8SYXrfty9DXj6aIv6p7brEaRuMhXwO574zZMdlgt
LAy+cveGpdA2ZSw5pYbizzkczdBvhBcXDIvdbYCRbgOjodx2tedXypXbbODOFTU2
9Lb8hleFnSa2q/EXlZWY8qX6RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8D2hY/
qHdrFmfSqV61NNfahi4NMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC
MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK
RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhyt8dAObBTk81iz5Yht8b/a1QFngfO3wqoadgCPZrru030CgmzTfcE3ovl0g
LujO4aN1SByc+WHEy6L0Nom/a479mccH/xh9Y5C9kRN5ja/iiSlzZh8kakV67z/8
Lm4eOyy3bon88qz5GrFmbN9rPe4EnRBRKIWH1eNVQiehj9ZLk1hPqaUdzVtiYAsi
WskD0kAw5sIFTcj+ExEWlnOzQD3j/Q/WA4PfP3hZUCAh7y3swa+qLfulDybn2Snp
JVgfc43ZK0tCZMTH1lrHYw9xYdmoTgxCXvuEdTd+Heq2GQCDzD3auXMGu5GeefAv
fJSE0xGr7u66RXq4vB4TSqrlMg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:08:35 2026 by rpki-client