
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: rCT898MNw0XAcofo6fEcrmyujYYSnnkJcp8gXuyMo10=
Subject key identifier: FE:A3:3C:CF:42:54:4B:10:5E:06:09:8F:09:95:5C:9A:F6:D8:4D:93
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 0879
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 086F
Signing time: Tue 24 Mar 2026 20:24:09 +0000
Manifest this update: Tue 24 Mar 2026 20:24:09 +0000
Manifest next update: Tue 31 Mar 2026 20:24:09 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: oeZSOQQilRMocBJ6k6XfCKT7A+DNExp0DMAGSqU1LeY=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: 3luUYeTT67yCKVIevcEjzS34/Ev6QIZEGseKDtPOfG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169 (0x879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Mar 24 20:24:09 2026 GMT
Not After : Mar 31 20:24:09 2026 GMT
Subject: CN=69c2f2e9-cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:e2:2a:c5:2a:6f:65:9b:c2:62:11:78:05:
c5:ee:70:f7:1a:3b:f4:d4:10:13:ae:f3:94:70:ff:
cb:13:42:d7:b2:6f:a6:c8:28:c7:c5:ce:f9:61:ac:
96:19:93:25:21:b1:ae:01:6b:ab:30:99:3f:10:04:
ca:b9:1a:c3:1c:6f:3e:88:73:bf:83:f7:c7:20:2b:
9f:d6:0d:69:62:24:82:16:98:7b:0c:20:9b:59:70:
51:7f:0a:ad:8e:1c:0f:09:ef:37:5b:e6:d8:b3:23:
13:ef:71:d5:bb:fa:1c:d7:83:b9:96:eb:5f:b4:72:
4e:2a:90:4f:d0:f0:49:0b:dc:1d:39:54:98:01:f2:
ac:e4:34:12:aa:db:46:2d:45:b6:95:07:46:70:b7:
44:d3:37:71:73:77:47:63:6b:e1:d0:b1:17:a8:93:
ea:c0:3e:d0:5e:aa:52:ae:31:fa:c2:ee:7c:6a:30:
a8:53:d2:96:57:de:55:2e:3e:96:53:67:54:5d:82:
63:74:89:24:3a:27:3c:5b:9a:b5:44:a6:3b:22:f1:
cb:81:30:f0:7d:f0:c9:46:22:c2:64:c8:0b:b4:fb:
07:59:75:e7:7d:a7:1b:1f:f5:da:a0:61:04:f3:63:
69:5d:5d:09:11:40:63:3d:c8:b5:11:d5:d4:67:8e:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A3:3C:CF:42:54:4B:10:5E:06:09:8F:09:95:5C:9A:F6:D8:4D:93
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:ac:2c:9d:20:8c:2b:2f:62:af:33:6e:99:77:bc:50:de:18:
16:6a:a9:78:d0:b8:6d:22:e6:74:05:02:61:a4:8f:2b:c0:3e:
b9:4c:f3:f1:a8:39:90:38:e4:d3:d4:da:08:b9:1f:01:6b:06:
bb:07:42:3e:b9:85:a9:97:17:6b:65:c2:11:10:0b:b8:78:08:
18:c8:91:03:1b:b2:6f:b1:35:d0:bf:0a:56:54:e7:f0:e1:32:
54:86:78:18:54:bf:9f:65:8a:21:f2:a0:60:02:73:ed:60:32:
1b:3c:8c:61:71:18:b0:da:f8:02:09:78:25:69:44:65:1d:d2:
05:de:f2:a3:14:58:63:13:17:44:d2:78:66:e0:16:a1:c9:c7:
e1:a4:99:98:3f:1d:ac:e4:ec:85:8a:ab:8a:a2:f6:84:9b:17:
5a:03:cd:6b:b9:d9:01:e2:7a:bb:19:88:2a:24:10:10:d1:cc:
b9:ca:ba:c4:ae:ca:b3:67:45:f2:61:c9:1d:db:10:d7:ea:c0:
e7:0e:f3:06:52:58:14:92:1f:62:2e:ba:54:d0:95:f0:56:2c:
e8:fc:94:8d:bb:2b:a6:6d:8e:0c:cf:93:14:0b:ed:80:32:9d:
72:2c:5e:15:8e:50:a5:cd:3d:3a:da:b4:a2:a0:78:24:9e:f5:
4c:cf:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:29 2026 by rpki-client