
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
File: LZqjsNhdis2WNSgFXHSHpmkEyHk.mft (raw, json)
Hash identifier: WzCtPRGlGZTFky8kqooqTeOok8+OrKLu1kCHW77JFLQ=
Subject key identifier: AF:26:53:9D:FC:7E:03:C6:15:F9:DB:AE:07:84:F1:3E:8E:BB:C4:A9
Authority key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
Certificate issuer: /CN=A91CD883/serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
Manifest number: 50
Signing time: Wed 23 Sep 2026 08:00:10 +0000
Manifest this update: Wed 23 Sep 2026 08:00:10 +0000
Manifest next update: Wed 30 Sep 2026 08:00:10 +0000
Files and hashes: 1: LZqjsNhdis2WNSgFXHSHpmkEyHk.crl (hash: 8kbJHM90mFbaVeTIE0FDV3++QUQJP+uBCYMJaI+9k58=)
2: FFF0486A3D7C11F1AE97A9BABA833773.roa (hash: 8PBVOn5rHRwK4EpJUtLvYRy9A1Nxp+wwyWqks95ix4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Validity
Not Before: Sep 23 08:00:10 2026 GMT
Not After : Sep 30 08:00:10 2026 GMT
Subject: CN=6ab3870a-8661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:34:71:e2:df:de:92:11:14:0c:8e:75:a4:
b3:1c:39:ec:c2:3b:e1:c3:09:3c:05:ff:76:0f:38:
c4:61:e4:73:53:da:16:da:83:19:00:42:e9:df:95:
b6:30:8d:f7:32:26:ca:f2:1f:2b:dc:1c:90:d4:cc:
0c:76:52:c3:9c:c2:b1:e0:8f:7f:32:0d:1b:f4:cf:
5a:45:6e:e2:ce:e9:6c:35:3a:18:ee:0e:8b:04:04:
6e:59:ff:a0:ed:57:01:46:bf:6c:1b:f1:6f:62:84:
d0:7f:d2:c4:8c:92:4a:b3:3d:5a:79:1b:c7:63:02:
98:1d:46:9b:21:b1:a5:d7:96:6a:e9:72:de:60:be:
b2:6f:88:0e:92:eb:ae:d6:15:9e:ab:26:f0:67:ba:
4b:68:be:24:fa:1b:6e:83:15:fc:1f:e3:f9:74:7a:
cb:fa:92:c7:03:ee:60:97:6c:88:97:f4:58:30:38:
9a:7d:f5:82:fc:a2:3e:36:63:94:a1:e0:45:38:dc:
91:96:b3:ab:ee:1e:ab:3a:75:48:bb:d6:4a:d8:42:
8c:ab:47:37:d5:69:3b:52:d1:9f:d2:0f:cc:0d:7a:
0d:02:0d:70:d7:24:ac:50:d2:2c:c7:32:b4:57:f3:
f3:99:ce:9b:79:9c:b1:12:9e:6e:40:80:81:38:17:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:26:53:9D:FC:7E:03:C6:15:F9:DB:AE:07:84:F1:3E:8E:BB:C4:A9
X509v3 Authority Key Identifier:
keyid:2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:4c:9b:00:58:84:54:3d:13:b9:32:55:fc:a0:14:e8:6b:
41:80:57:3b:57:9c:0f:91:b5:c6:f5:6f:5f:c7:88:84:95:a5:
35:1a:ac:0f:99:9d:e2:eb:d4:c3:72:3b:ff:1b:d6:46:2b:b3:
97:9f:ae:cc:23:29:ea:2e:eb:2c:03:d1:4f:93:64:3f:6e:1f:
20:3a:d0:ce:8f:74:b8:f9:8d:f9:e0:d1:14:17:cb:e7:14:34:
3c:d4:bb:eb:59:a0:4b:d7:38:3d:f3:d1:3f:3c:ae:df:76:dc:
1a:df:2f:8f:c4:7e:a0:17:c7:76:1a:fa:35:da:d1:8c:a3:85:
15:67:f7:bd:75:f0:03:44:87:86:0c:05:60:ef:c3:5a:7f:4f:
50:1a:94:08:5f:c7:d7:32:b5:a5:26:28:68:95:76:dc:bb:2e:
2c:96:35:d7:90:82:eb:14:a8:73:c6:7f:88:e9:73:77:6d:ff:
e9:28:f1:c5:60:6e:c6:a6:14:49:5c:38:21:55:c0:5c:fd:43:
4d:65:88:4b:10:77:df:70:1f:d3:60:e6:4b:b7:3a:d6:98:da:
e3:c8:d4:d9:aa:5b:08:a0:46:04:0a:0a:c9:c3:fe:2a:a3:f1:
1d:e1:15:9a:77:54:d5:d3:d0:5e:36:2b:e0:05:3c:58:7e:75:
dc:45:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:38:02 2026 by rpki-client