
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json)
Hash identifier: fp9eJNRVggtUhXtEnaurKctfgbUohJUg6OajRcYmwao=
Subject key identifier: 04:E8:42:46:0F:A1:E3:F6:E8:7D:84:84:A9:4A:63:43:96:EE:47:5F
Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Certificate serial: 08CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
Manifest number: 08C2
Signing time: Tue 12 May 2026 20:29:26 +0000
Manifest this update: Tue 12 May 2026 20:29:26 +0000
Manifest next update: Tue 19 May 2026 20:29:26 +0000
Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: eGqNoYa/YhOUxJjA0cO88iQZMRhW9ezD2iB34E1DNes=)
2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: ZvW50NxBS75UluAXlHVMuxFqxEWVEP7STBY/nxFqOto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Validity
Not Before: May 12 20:29:26 2026 GMT
Not After : May 19 20:29:26 2026 GMT
Subject: CN=6a038da6-8ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:74:84:50:e8:35:5f:ca:d8:cb:76:ea:45:
4e:2d:5c:eb:77:90:f8:ec:33:1f:d1:19:ea:62:99:
9d:df:e0:18:88:5c:7c:8b:57:d2:77:ff:3c:c7:aa:
72:33:f5:db:02:1d:e7:be:c9:ae:da:3f:37:c7:5b:
ac:88:8a:45:46:db:17:1d:1d:c2:8b:04:8a:e9:0d:
fe:77:33:e3:a4:fc:72:26:15:5f:50:dd:1f:7c:66:
0f:96:34:bd:e0:fd:ee:9e:04:49:c7:3c:13:57:78:
86:47:c8:91:97:1e:e9:62:cc:33:1c:54:b4:6a:2b:
8b:a5:ec:f9:dd:c9:b5:43:da:a0:69:c8:cb:99:e9:
58:11:ff:f9:6d:aa:9f:a3:2f:ce:80:38:0a:a1:5d:
ee:39:0b:77:91:07:9f:ef:7d:cb:7a:ca:e9:0c:1d:
5c:f5:4b:bf:76:70:e0:bf:be:7a:bd:e0:bf:8d:6b:
43:b8:51:9b:1b:ca:eb:ed:9b:d3:bd:09:1f:15:62:
68:a6:12:61:a4:79:ef:29:8a:92:30:7e:e4:5c:7c:
16:98:5a:ed:63:7f:1b:52:37:70:08:0c:11:86:35:
c2:6e:24:be:df:b1:5c:a9:e6:ae:54:74:34:38:32:
0f:5f:ee:d8:bb:70:87:a1:2d:16:1a:bc:46:42:8b:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E8:42:46:0F:A1:E3:F6:E8:7D:84:84:A9:4A:63:43:96:EE:47:5F
X509v3 Authority Key Identifier:
keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:d6:5d:a5:a9:f1:c5:0c:4f:22:e9:4a:de:94:91:ca:b1:ad:
0a:b5:d3:0b:9f:71:a2:cd:84:5e:cf:c2:b3:da:d5:56:85:1d:
2d:a0:0e:1f:fe:44:6f:48:62:3b:a3:46:ee:11:8c:eb:bc:f0:
ac:e4:ca:60:90:6c:08:cd:6e:cc:cd:a6:c8:68:e9:db:5f:f9:
56:ef:a7:c5:83:34:9d:49:b5:d4:03:45:b8:90:19:1c:24:43:
00:af:f8:10:37:3e:5c:77:98:49:2d:e5:43:5b:4f:7c:ea:dd:
33:c7:54:ba:8b:7b:77:fb:cf:68:92:93:46:f4:e0:c1:31:c2:
09:64:a8:1a:18:76:f9:6d:4e:e7:59:44:01:9e:8c:0b:5f:83:
f9:35:c0:cf:12:56:a0:21:6a:b3:1f:8b:ef:77:d4:53:e2:90:
46:bb:b0:b1:3e:fb:c8:fb:ed:c9:75:9d:39:b3:6a:b0:11:6e:
11:42:a6:f3:d1:51:03:f6:61:44:56:c0:81:82:7e:7e:07:92:
6c:5d:ca:88:54:a8:a2:bb:96:34:3a:8d:f6:22:b2:09:10:6c:
7b:6b:35:01:3d:7d:e0:82:2c:57:82:47:04:da:d2:54:42:6b:
41:98:b9:cb:e3:40:74:f1:1a:ac:37:b4:23:d0:ce:66:86:79:
ef:d2:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:28:53 2026 by rpki-client