
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
File: LZqjsNhdis2WNSgFXHSHpmkEyHk.mft (raw, json)
Hash identifier: UQJzP+8PIOdRpmJn8g/Lw82UKDOHOk7+wTly1ybcAS4=
Subject key identifier: EC:ED:3C:20:81:BD:BA:59:24:9C:EA:C9:97:2F:DC:D0:FF:11:50:8F
Authority key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
Certificate issuer: /CN=A91CD883/serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
Manifest number: 0D
Signing time: Mon 11 May 2026 09:16:51 +0000
Manifest this update: Mon 11 May 2026 09:16:51 +0000
Manifest next update: Mon 18 May 2026 09:16:51 +0000
Files and hashes: 1: LZqjsNhdis2WNSgFXHSHpmkEyHk.crl (hash: ZVx2lqwNQ6+WoneaRjbnqugZm/EvsbBw/OnKzbo4vMU=)
2: FFF0486A3D7C11F1AE97A9BABA833773.roa (hash: 8PBVOn5rHRwK4EpJUtLvYRy9A1Nxp+wwyWqks95ix4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Validity
Not Before: May 11 09:16:51 2026 GMT
Not After : May 18 09:16:51 2026 GMT
Subject: CN=6a019e83-61f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:6b:c2:14:94:f7:f8:fe:e1:c0:58:e6:63:
d4:33:a7:39:a2:f0:ea:48:96:01:e7:43:fb:b1:60:
6d:0e:5d:ad:7d:df:53:39:65:c4:38:cf:0d:29:dd:
a9:85:07:7d:ba:0e:98:c2:14:d7:88:3a:8a:39:0f:
d1:e4:98:5f:cb:dd:5d:e7:a8:2d:76:ca:73:7b:dd:
a5:b0:b2:64:49:17:52:7b:2a:7f:38:82:61:91:39:
9b:82:0c:93:b6:d3:e3:9c:c8:2e:75:7c:d0:74:ec:
4b:18:37:88:d2:4d:5d:a1:6d:63:ea:ae:8a:d6:e0:
02:5e:21:2c:90:b2:03:0d:64:23:eb:67:f3:3a:9e:
36:78:2e:11:82:dd:c1:7f:cb:92:56:a8:dd:31:20:
e6:cb:f7:82:0d:12:ac:85:1b:6d:f4:74:1a:67:00:
19:61:a8:f1:80:88:64:8e:73:1e:f7:a8:b6:a6:97:
f7:0f:33:7d:a2:da:b0:aa:e5:59:e1:bb:4f:e4:1a:
1b:b1:fd:68:a1:de:5e:3a:b6:3c:3d:08:ce:20:dc:
49:14:ac:39:16:d2:3c:f0:32:d9:a7:35:35:41:ce:
ea:4e:c8:6e:2c:84:64:93:58:0f:f9:ac:77:73:1b:
99:07:08:1b:0d:2f:04:c8:67:13:1b:18:c8:e5:2f:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:ED:3C:20:81:BD:BA:59:24:9C:EA:C9:97:2F:DC:D0:FF:11:50:8F
X509v3 Authority Key Identifier:
keyid:2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:a3:24:c6:c7:f4:ad:fa:0a:ea:74:0d:90:2c:ec:d5:56:d2:
cd:5f:e6:d7:5f:79:f8:0e:d8:b6:34:7a:15:ea:9a:ba:2b:ca:
11:01:0f:99:d0:1a:e8:b3:9b:f6:86:67:9a:c0:4e:e8:93:95:
fc:2c:27:43:e1:a7:b2:6e:04:40:ad:e4:c9:4c:cd:fe:4a:13:
f1:f2:89:84:8a:29:a6:e9:e0:8a:21:83:3c:4d:97:8b:9c:06:
d6:16:3d:b1:6b:b4:00:bb:ee:23:fd:4a:f6:7a:e7:2c:cf:cc:
2a:82:ec:08:07:cd:d5:36:e1:28:7a:98:14:b7:35:b1:29:3d:
77:f2:9d:05:be:d8:a5:04:30:15:01:3c:99:09:e0:4c:2e:69:
5a:a4:71:ac:2b:ee:99:ef:f4:e2:f2:2f:32:c4:5d:48:de:12:
7d:41:3e:eb:19:0e:2c:75:27:3c:c3:8a:8a:c5:d9:e2:6f:a0:
b7:3e:28:28:68:1d:f9:45:68:45:76:fe:ee:3d:6b:f1:3c:82:
2a:68:a4:51:8c:e3:41:e7:7b:59:ba:4c:8e:45:47:70:a9:f7:
24:44:ec:f9:eb:69:90:e2:f3:b8:be:ad:ce:f3:32:a3:f0:18:
e0:d6:c8:1f:02:15:e1:e3:8b:59:79:27:e7:e3:d2:4f:03:c2:
e2:bd:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:11 2026 by rpki-client