
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json)
Hash identifier: K7rxPrM4lDptGAfvflMc0tej8YGrjDIzS87rslYQIDo=
Subject key identifier: 4B:65:98:7E:36:93:1E:B5:C1:32:FD:E3:7E:3E:F2:61:70:5E:C3:FB
Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83
Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
Manifest number: 0221
Signing time: Sun 15 Nov 2026 03:04:16 +0000
Manifest this update: Sun 15 Nov 2026 03:04:16 +0000
Manifest next update: Sun 22 Nov 2026 03:04:16 +0000
Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: NTQKCra+RVHVEMIHWSmCHwE5ph2mnpzJAfUgr5f7BKk=)
2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: 341ByImzn/WsspGGEhwYJpQ72ArO+/p3lUbnRz/LSbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl
rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
Validity
Not Before: Nov 15 03:04:16 2026 GMT
Not After : Nov 22 03:04:16 2026 GMT
Subject: CN=6af92130-b8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:c3:82:66:d6:42:62:5e:fb:b2:44:33:17:
01:df:c5:15:87:c3:09:96:a4:1a:a3:a5:65:b2:a6:
71:d2:13:e1:50:1b:f7:7b:dd:ef:92:38:da:05:bb:
99:00:e2:6e:1e:9c:59:d7:82:bb:4b:a4:0d:bf:84:
e2:c6:2f:88:b8:e7:b0:a7:40:7a:e6:aa:8d:f9:18:
2a:c9:3e:83:ff:7c:32:d7:13:2b:89:2c:ff:27:b8:
45:b1:99:7a:99:8a:62:bd:79:1d:50:8a:76:59:33:
2e:29:a1:ab:42:93:9d:22:ac:ae:e4:10:52:2f:fe:
9a:1c:40:6b:b2:8d:1e:72:11:b9:99:6b:a7:5d:e2:
8e:35:33:57:fb:db:98:d6:cd:4b:bc:d5:e4:b7:95:
fa:1e:26:a7:38:0f:66:28:d5:17:80:8e:38:2f:a4:
9a:22:11:70:46:63:e5:f9:b5:55:69:1a:22:ec:59:
34:47:4d:c2:50:d3:e9:6b:90:1d:c4:db:22:c2:20:
f5:49:6c:85:a9:92:22:db:16:9c:9b:95:df:db:03:
ae:93:8d:f0:62:fa:af:89:79:a3:71:bb:18:84:5b:
c1:4d:cf:36:e5:1a:18:09:4b:75:8e:86:35:b3:c5:
d8:70:44:2c:5d:cf:4c:c3:bd:cd:c8:9c:d1:00:00:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:65:98:7E:36:93:1E:B5:C1:32:FD:E3:7E:3E:F2:61:70:5E:C3:FB
X509v3 Authority Key Identifier:
keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ef:d8:e0:25:22:be:6a:89:71:a0:91:5c:f8:39:53:83:36:
9c:20:5c:21:37:e7:2d:b5:94:6f:5d:e7:df:86:2c:01:84:e1:
f3:90:69:f9:5a:8d:09:f6:95:45:79:3b:ef:9c:10:a0:8b:8c:
3f:c5:bd:17:bd:66:0f:1f:46:f4:9c:eb:36:79:7c:fc:6a:58:
72:22:c7:18:15:d3:22:be:d3:ac:5e:5c:7e:f1:f2:82:ad:d3:
e8:7e:9a:a0:b3:8c:f0:02:13:31:60:0e:7c:b1:0d:f1:b7:c9:
95:30:4a:dc:92:45:b3:56:07:f3:65:46:6a:9f:33:4f:cf:59:
ef:69:eb:4d:aa:33:23:0b:f8:d0:82:e2:27:4d:42:8e:d1:6e:
c3:ad:f1:f2:0e:f4:36:98:bb:43:28:ab:0e:60:7f:4b:23:cd:
df:16:c4:61:65:77:70:c1:bc:98:99:ae:fb:53:c3:90:d8:84:
33:6b:fa:6f:99:44:ad:61:35:30:49:15:fc:62:e3:e4:f6:bc:
6f:15:22:68:48:25:cd:2c:23:3e:1d:71:65:7b:44:e0:4d:e5:
f1:2a:cd:cb:c3:98:11:9f:d9:55:9d:a5:c7:f6:c7:48:24:c1:
e7:3a:83:15:33:df:e8:85:61:e0:e2:ce:58:ae:79:1c:a0:7b:
03:c9:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:11:28 2026 by rpki-client