
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json)
Hash identifier: BrrzW9N1r7uQhu9qOiQJ6R3fADnNFdfPd8Yw9f11viE=
Subject key identifier: F2:47:B5:1B:F2:EF:0C:A2:EB:6F:F5:D3:3E:38:CC:EF:06:0C:3F:6B
Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83
Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
Manifest number: 01AA
Signing time: Wed 25 Mar 2026 03:26:18 +0000
Manifest this update: Wed 25 Mar 2026 03:26:17 +0000
Manifest next update: Wed 01 Apr 2026 03:26:17 +0000
Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: VhloKGhYbFSJQAgMb/vA//b38t1Uigor04LlddGBQCc=)
2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: 341ByImzn/WsspGGEhwYJpQ72ArO+/p3lUbnRz/LSbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl
rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
Validity
Not Before: Mar 25 03:26:17 2026 GMT
Not After : Apr 1 03:26:17 2026 GMT
Subject: CN=69c355da-2093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:58:49:b5:db:9b:a7:db:bd:d5:b1:0b:30:
e9:86:9e:0d:00:c5:fd:21:81:13:6a:94:32:14:61:
5c:ef:1e:a1:50:50:80:62:12:f9:2c:c5:a7:de:51:
f1:27:df:59:9e:9d:8d:e3:a0:db:e4:79:72:1e:f9:
7f:f1:b0:ad:1e:04:d6:91:ac:57:64:85:5b:8d:a5:
de:66:1a:0a:ed:01:dc:77:c9:ce:e2:ce:e5:01:b0:
47:92:82:15:fe:40:98:44:1e:a5:d0:24:6e:e4:a8:
be:ec:5e:ca:c6:c5:1e:87:88:52:0e:b7:ac:2f:3a:
a1:b6:a8:e3:23:76:42:93:29:ae:bd:05:19:a1:96:
75:88:13:9b:13:b0:f3:94:c4:06:df:a0:3f:89:89:
1e:a1:93:a2:79:cf:6e:0b:1f:b2:62:d8:ee:6b:4a:
9e:29:81:7c:08:11:f6:89:97:55:62:f3:73:77:ef:
58:4b:96:69:4f:8e:54:03:f0:66:85:af:5e:78:6e:
55:0b:a8:11:ee:d1:f8:70:88:89:c0:97:37:1e:9e:
6d:24:77:88:02:c3:e8:43:c3:05:e8:2e:1f:9a:29:
d0:dd:41:45:aa:3d:94:4f:89:b8:3e:a7:55:f2:c9:
ab:12:48:47:00:ff:ff:3c:a1:77:d6:f2:0c:06:34:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:47:B5:1B:F2:EF:0C:A2:EB:6F:F5:D3:3E:38:CC:EF:06:0C:3F:6B
X509v3 Authority Key Identifier:
keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c8:76:2f:0d:00:4b:8e:d9:e1:65:5f:0b:1b:2c:78:85:a9:
2d:07:4a:bd:b3:5c:30:f5:2e:07:98:aa:8d:e0:98:e1:b7:ad:
0a:fe:e6:29:43:36:cb:e4:e9:88:f0:37:af:e4:d0:28:4a:4a:
2a:2a:8e:ab:3b:d2:fd:7b:ae:60:76:7b:ea:83:29:c3:13:c3:
7d:ad:00:cd:63:3d:91:11:85:56:74:ed:32:a8:05:70:f1:45:
27:a2:59:74:c5:e4:5d:cf:2c:9f:63:62:f4:51:a7:8c:f0:80:
b1:9d:1b:21:30:16:b1:5c:15:1d:34:9e:a9:a4:03:e5:4f:96:
dc:ab:34:1d:cd:7c:ce:67:54:05:5b:12:e6:de:97:0e:b6:10:
e9:08:f0:ee:a8:e6:97:b2:e7:76:c2:81:9a:43:86:37:37:14:
51:d5:2a:0c:c5:8b:63:2a:ad:ef:91:91:dd:f0:86:73:fa:70:
f2:54:15:c9:19:42:6a:cf:ba:3b:90:1b:91:3a:40:79:6d:3d:
9a:60:da:2f:fd:86:9f:8c:6c:46:f5:6d:d9:0e:69:01:41:62:
26:dd:69:b0:6b:3e:01:63:b3:08:3e:04:2f:70:34:2e:8b:d8:
15:19:01:40:0e:95:82:d5:07:18:a7:21:86:48:ee:1c:25:6e:
19:7c:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:25 2026 by rpki-client