
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
File: LFTOW3Q5yME3PII5T2B5FwVy9_0.mft (raw, json)
Hash identifier: LGwqNCw3/+rjXz3vqgdCJqzs5/8Ms5WYTJq1XY14nLY=
Subject key identifier: BC:1F:47:BF:58:FB:38:95:1D:36:34:4F:CB:39:7B:31:9F:8B:2F:79
Authority key identifier: 2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
Certificate issuer: /CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Certificate serial: 064A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
Manifest number: 0643
Signing time: Tue 12 May 2026 22:47:37 +0000
Manifest this update: Tue 12 May 2026 22:47:37 +0000
Manifest next update: Tue 19 May 2026 22:47:37 +0000
Files and hashes: 1: LFTOW3Q5yME3PII5T2B5FwVy9_0.crl (hash: XdkBmCf1YoBMW4r69IEvFiacYw9WIaDydpS1P857QLA=)
2: 26DDF9C4D59311EB9DBD350EC4F9AE02.roa (hash: bCL3Viem/kaeDI5fANKRqsR+6xed5OvLge1DHC5Yp+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl
rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1610 (0x64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC271, serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Validity
Not Before: May 12 22:47:37 2026 GMT
Not After : May 19 22:47:37 2026 GMT
Subject: CN=6a03ae09-ec6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:01:22:d9:c4:64:18:eb:96:67:3a:89:f9:
b3:59:58:9f:f0:59:50:4d:b4:17:1e:e7:72:aa:27:
2d:3c:42:c6:68:35:e4:bf:28:70:99:cf:5c:7b:6c:
e9:94:a3:c8:07:da:c4:1c:85:14:af:29:52:c6:fe:
70:39:c9:cf:a3:62:62:9b:b4:24:d2:0a:42:de:0c:
fc:ee:3b:45:01:24:83:46:d3:30:32:91:e8:61:44:
34:ec:c2:c7:f3:8d:31:3c:1c:45:4e:c5:33:4f:c0:
8d:0e:51:00:4f:92:d4:3c:3b:41:82:23:9a:c3:d8:
5e:45:07:a3:85:79:e8:6f:61:8e:a1:e0:3c:8f:2c:
1c:e8:c4:df:e1:68:e3:5c:c5:65:11:c1:fa:2a:fb:
6e:62:a3:b6:bb:5f:6a:2a:35:62:5e:c7:31:a9:54:
00:e9:5c:c4:7e:69:d7:08:09:58:43:27:f5:73:0a:
c3:8f:fb:70:31:56:3e:85:db:7b:44:26:2b:76:9f:
4a:ad:0b:7d:4f:88:1d:d1:56:a6:a2:09:96:8c:1c:
85:f2:56:dd:57:c6:38:ac:c8:f8:e8:53:73:10:0b:
0a:82:a2:a9:27:35:0b:4b:ae:d1:fb:0d:6d:0e:32:
20:7a:73:7a:9b:cc:e3:12:af:bc:5e:b0:df:a1:10:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:47:BF:58:FB:38:95:1D:36:34:4F:CB:39:7B:31:9F:8B:2F:79
X509v3 Authority Key Identifier:
keyid:2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:4a:37:66:c0:f4:7b:5e:0f:71:9a:22:b2:c7:04:0d:fb:
3f:40:bc:91:0c:21:5d:b6:33:ae:3c:04:6e:b8:c4:08:ee:6c:
bd:f3:7e:cf:69:17:a0:1b:55:ee:3d:2a:bb:ec:50:84:5b:4c:
b7:84:a2:c4:c1:59:e1:dc:92:11:86:45:8a:28:42:eb:4f:77:
18:e8:f1:ab:7f:76:e0:26:a8:f7:45:fe:2d:56:ad:14:b8:b1:
c3:33:54:50:be:55:11:3e:db:2b:c5:8d:3a:36:07:17:1d:7f:
80:a4:65:08:80:6a:b3:41:19:75:3d:40:4b:bd:d8:5f:93:e4:
39:49:bd:5f:cb:65:4c:2a:77:c6:ba:e4:8c:09:50:d4:75:54:
aa:71:34:9c:7f:91:0f:82:c8:ea:da:07:ce:8b:7c:93:db:70:
d0:52:95:a2:e1:7a:2d:e8:72:6e:ce:e3:b2:21:98:4f:6c:00:
77:74:1c:3f:0e:3a:cd:02:f1:71:54:61:b6:01:82:ac:4f:5b:
d2:57:48:ba:a2:46:41:9c:c6:77:0d:a6:32:d3:fe:4f:e0:a6:
a9:51:d7:db:f8:a7:c6:eb:db:c7:6b:2f:ff:03:c1:69:ca:77:
ac:06:03:58:2f:2a:8b:dc:d3:46:fd:84:27:06:a1:85:1e:ce:
60:d5:0a:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMyNzExMTAvBgNVBAUTKDJDNTRDRTVCNzQzOUM4QzEzNzNDODIzOTRGNjA3OTE3
MDU3MkY3RkQwHhcNMjYwNTEyMjI0NzM3WhcNMjYwNTE5MjI0NzM3WjAYMRYwFAYD
VQQDEw02YTAzYWUwOS1lYzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4gsBItnEZBjrlmc6ifmzWVif8FlQTbQXHudyqictPELGaDXkvyhwmc9ce2zp
lKPIB9rEHIUUrylSxv5wOcnPo2Jim7Qk0gpC3gz87jtFASSDRtMwMpHoYUQ07MLH
840xPBxFTsUzT8CNDlEAT5LUPDtBgiOaw9heRQejhXnob2GOoeA8jywc6MTf4Wjj
XMVlEcH6KvtuYqO2u19qKjViXscxqVQA6VzEfmnXCAlYQyf1cwrDj/twMVY+hdt7
RCYrdp9KrQt9T4gd0VamogmWjByF8lbdV8Y4rMj46FNzEAsKgqKpJzULS67R+w1t
DjIgenN6m8zjEq+8XrDfoRAv8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwfR79Y
+ziVHTY0T8s5ezGfiy95MB8GA1UdIwQYMBaAFCxUzlt0OcjBNzyCOU9geRcFcvf9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzI3MS83MjRCREFBMkQ1
OEUxMUVCQjc5RDM5ODRDNEY5QUUwMi9MRlRPVzNRNXlNRTNQSUk1VDJCNUZ3Vnk5
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xGVE9XM1E1eU1FM1BJSTVUMkI1RndWeTlfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzI3MS83MjRCREFBMkQ1OEUxMUVCQjc5RDM5ODRDNEY5QUUwMi9MRlRPVzNRNXlN
RTNQSUk1VDJCNUZ3Vnk5XzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI0hKN2bA9HteD3GaIrLHBA37P0C8kQwhXbYzrjwEbrjECO5svfN+z2kXoBtV
7j0qu+xQhFtMt4SixMFZ4dySEYZFiihC6093GOjxq3924Cao90X+LVatFLixwzNU
UL5VET7bK8WNOjYHFx1/gKRlCIBqs0EZdT1AS73YX5PkOUm9X8tlTCp3xrrkjAlQ
1HVUqnE0nH+RD4LI6toHzot8k9tw0FKVouF6Lehybs7jsiGYT2wAd3QcPw46zQLx
cVRhtgGCrE9b0ldIuqJGQZzGdw2mMtP+T+CmqVHX2/inxuvbx2sv/wPBacp3rAYD
WC8qi9zTRv2EJwahhR7OYNUK6Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:22:57 2026 by rpki-client