
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json)
Hash identifier: qlF9KvPV1DE54cDiEFLq+Gof9BauCkMVE1UvrMZHT5I=
Subject key identifier: 2B:CF:DA:DE:DE:A6:0A:7A:C8:EC:01:DF:57:83:C4:A0:7F:5D:BB:57
Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF
Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
Manifest number: 0124
Signing time: Mon 11 May 2026 05:51:31 +0000
Manifest this update: Mon 11 May 2026 05:51:31 +0000
Manifest next update: Mon 18 May 2026 05:51:31 +0000
Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: Iap+HI2uvAf+NisUryJi8pt5czmHInGfvj+r+iuces4=)
2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: LStciIupeAadWR9QuICSlgD8xRoxfgRjYZY3eP+3Bmw=)
3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: BOtkUPQZlORXc9X/BH+HM6ZvBM7LsfqIm2Us935oA4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl
rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:51:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
Validity
Not Before: May 11 05:51:31 2026 GMT
Not After : May 18 05:51:31 2026 GMT
Subject: CN=6a016e63-bef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e0:70:a4:a4:fa:f3:62:ab:a4:c6:1b:9a:19:
62:55:f1:b0:58:d5:cb:37:ae:d5:e6:a0:9a:50:e5:
72:9e:dc:f0:fb:73:ac:e7:d1:d4:97:b2:78:92:aa:
33:96:e8:4e:0c:ef:5c:21:89:02:3c:93:53:c7:40:
0a:f9:e5:ae:61:4a:24:d4:71:ba:63:25:bf:f4:ee:
57:ab:6a:71:fc:d2:ac:fa:64:71:43:79:68:95:d7:
c6:4c:bb:6f:68:32:11:0c:b9:0e:05:93:c3:43:d0:
d4:db:d3:9a:0a:69:e6:82:a5:4a:fc:d8:3a:9b:88:
12:b1:e8:ca:93:e1:e3:b6:01:dd:b7:46:2d:0d:88:
bf:c5:a8:05:8a:d7:4d:56:a6:94:c5:5d:cb:e2:7e:
f3:92:7a:99:c8:e5:81:45:a9:a5:3e:e3:72:57:8e:
47:cc:df:13:85:86:60:d6:e5:5c:69:5b:e6:9e:64:
85:6d:2e:25:e7:07:45:19:1b:e4:f4:4d:f0:31:64:
68:26:7f:e0:17:2d:b0:6c:51:15:54:df:51:b0:86:
8f:47:cc:b8:96:be:48:fc:11:69:dc:d2:8f:2d:22:
a2:89:e8:d0:96:51:ed:30:19:f2:57:60:92:3d:e4:
1e:b0:36:75:80:a2:8e:4c:4a:29:8a:23:de:19:c7:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:DA:DE:DE:A6:0A:7A:C8:EC:01:DF:57:83:C4:A0:7F:5D:BB:57
X509v3 Authority Key Identifier:
keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1c:8e:5c:5b:95:0a:ac:77:21:7d:ad:a4:a1:f4:eb:41:d8:
96:97:0e:7e:2f:ea:1b:0f:b6:db:48:63:01:f3:66:87:61:57:
6c:aa:ad:f7:1b:97:25:e5:26:8e:12:95:5e:28:f0:6a:cc:52:
fc:84:40:17:70:35:9c:47:19:60:6e:e2:1a:bc:e1:6b:0f:d7:
84:b2:aa:13:ee:61:ad:eb:61:fc:25:05:45:00:5d:10:83:c1:
f6:aa:26:4e:8b:c0:52:8f:be:98:f6:0e:d6:6c:40:e5:36:88:
ae:c1:56:a8:48:11:06:3d:1b:67:7f:34:5f:aa:dc:0c:16:60:
4f:81:fa:66:54:9a:18:4d:70:16:84:3f:f0:c1:cc:93:ef:f4:
26:1b:2b:f5:86:b1:f4:3d:e1:c3:8e:6d:df:85:48:5e:bd:ca:
f1:2b:f3:6f:23:a3:7b:37:1b:82:ba:63:25:f2:9a:bd:65:5b:
c8:62:e1:96:e1:85:2f:eb:14:02:ef:19:c8:ae:d2:ca:eb:ae:
6c:96:04:74:48:6b:a5:10:8b:63:f0:f2:e3:a3:16:de:e1:4b:
89:95:08:2f:a2:60:57:7f:06:ee:1a:de:da:fe:2b:30:98:4e:
18:e0:c7:a7:7d:cf:bf:31:dc:47:31:a6:59:94:78:b0:c3:68:
35:67:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:22 2026 by rpki-client