
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
File: LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json)
Hash identifier: 7K3YiCaUlx393hemusTEcWqrw/yYgectS6JAoaQe3sI=
Subject key identifier: 45:CD:17:AD:98:04:94:01:8D:94:19:3D:25:60:04:ED:89:07:EB:24
Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
Certificate issuer: /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
Manifest number: 013C
Signing time: Tue 12 May 2026 19:13:22 +0000
Manifest this update: Tue 12 May 2026 19:13:21 +0000
Manifest next update: Tue 19 May 2026 19:13:21 +0000
Files and hashes: 1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: oSIPjJsqLRl2W1ax179JIO3x8ToW9ArkHB1x5bkMPCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Validity
Not Before: May 12 19:13:21 2026 GMT
Not After : May 19 19:13:21 2026 GMT
Subject: CN=6a037bd1-7e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:28:79:7e:bb:72:48:b9:70:ad:86:51:4c:
a1:ff:a5:92:ca:10:93:a1:d4:5f:ce:c7:c1:b1:24:
c1:31:be:5c:8c:be:ab:e3:4f:1a:d0:c9:29:96:2a:
01:7c:7f:2c:ac:6f:a3:83:46:a9:a8:93:76:2b:4f:
ad:b3:0d:00:ff:98:6f:36:22:6b:4d:56:e2:95:ea:
74:8f:1c:fc:86:58:21:31:5e:97:8d:86:75:6c:9b:
d3:8f:f5:b7:52:b9:56:ef:bd:b7:a5:5a:1c:37:e6:
0e:19:d6:96:8a:c4:dc:18:9b:6c:80:63:16:fb:f5:
b2:86:76:6e:9f:3c:d6:90:72:87:58:59:8c:4f:98:
f7:61:37:7d:bd:15:b0:7d:be:41:f6:b6:bb:75:65:
c0:eb:99:3a:54:c7:d5:49:3f:df:c2:aa:12:73:d7:
91:c8:16:93:9c:ee:b1:e3:9c:1b:65:8d:fc:d7:89:
94:c4:ee:cb:b9:3d:d5:c7:5f:07:81:ca:4b:bc:1c:
3a:51:a2:32:82:fa:66:9b:d0:78:74:e8:fb:92:4f:
08:71:a1:0d:33:57:dc:9c:01:50:f9:00:65:5d:a6:
7a:84:8f:ec:b3:b8:da:87:46:38:4a:26:7f:68:7b:
86:38:e8:b7:8d:99:86:c8:47:9b:42:79:78:04:c1:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CD:17:AD:98:04:94:01:8D:94:19:3D:25:60:04:ED:89:07:EB:24
X509v3 Authority Key Identifier:
keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:41:8a:4f:61:0f:26:54:7b:d5:e5:83:c5:8a:8d:bd:f3:e7:
ed:ed:0b:63:94:fa:36:3c:09:6c:71:8f:b7:d6:8c:8b:e0:b9:
da:55:ab:3f:97:fd:17:b5:d9:15:d3:22:10:9d:d9:66:f5:83:
b7:11:6d:7c:0b:9b:59:af:44:99:46:5a:f9:a4:34:4f:99:d9:
a6:ee:d9:86:89:eb:9e:31:de:fa:4d:8d:fe:d9:ba:39:0b:20:
a9:b2:bc:fd:fe:74:0a:0a:1e:0f:da:4f:84:74:ba:1d:23:94:
28:27:f2:54:e3:bc:c9:0a:4a:75:92:cf:ab:30:05:7a:53:c9:
46:2d:e9:75:1e:9e:ce:60:fd:21:ef:67:0d:04:04:46:b3:e1:
b6:8c:32:1d:51:ae:6c:da:41:49:15:19:54:e4:bd:f5:41:48:
5f:f0:b7:14:29:5d:6b:81:64:25:84:92:9c:31:23:37:24:ae:
58:b1:ca:23:fa:e5:a9:0a:20:5b:d0:ea:77:08:ef:41:ae:1c:
64:b4:a1:e7:23:72:8a:37:96:fb:d0:6f:4b:62:c0:ed:5c:cc:
b0:f1:fc:ce:37:25:0e:db:c3:6c:53:52:cd:5f:0c:ad:f5:ca:
3e:32:f6:65:3a:b4:dd:f4:b9:bb:85:f6:38:7f:e4:d4:f1:21:
11:ca:ef:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDQTExMTAvBgNVBAUTKDJDN0I1RDg0NzIwMDNDRjM0MzZBQ0ZFNUI2MUU4OUVD
OEIxQUQ4QUIwHhcNMjYwNTEyMTkxMzIxWhcNMjYwNTE5MTkxMzIxWjAYMRYwFAYD
VQQDEw02YTAzN2JkMS03ZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxl4oeX67cki5cK2GUUyh/6WSyhCTodRfzsfBsSTBMb5cjL6r408a0MkplioB
fH8srG+jg0apqJN2K0+tsw0A/5hvNiJrTVbilep0jxz8hlghMV6XjYZ1bJvTj/W3
UrlW7723pVocN+YOGdaWisTcGJtsgGMW+/WyhnZunzzWkHKHWFmMT5j3YTd9vRWw
fb5B9ra7dWXA65k6VMfVST/fwqoSc9eRyBaTnO6x45wbZY3814mUxO7LuT3Vx18H
gcpLvBw6UaIygvpmm9B4dOj7kk8IcaENM1fcnAFQ+QBlXaZ6hI/ss7jah0Y4SiZ/
aHuGOOi3jZmGyEebQnl4BMGgSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXNF62Y
BJQBjZQZPSVgBO2JB+skMB8GA1UdIwQYMBaAFCx7XYRyADzzQ2rP5bYeieyLGtir
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS80RTExRjRENjcx
OTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQTkRhc19sdGg2SjdJc2Ey
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xIdGRoSElBUFBORGFzX2x0aDZKN0lzYTJLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MENBMS80RTExRjRENjcxOTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQ
TkRhc19sdGg2SjdJc2EyS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABUGKT2EPJlR71eWDxYqNvfPn7e0LY5T6NjwJbHGPt9aMi+C52lWrP5f9F7XZ
FdMiEJ3ZZvWDtxFtfAubWa9EmUZa+aQ0T5nZpu7ZhonrnjHe+k2N/tm6OQsgqbK8
/f50CgoeD9pPhHS6HSOUKCfyVOO8yQpKdZLPqzAFelPJRi3pdR6ezmD9Ie9nDQQE
RrPhtowyHVGubNpBSRUZVOS99UFIX/C3FClda4FkJYSSnDEjNySuWLHKI/rlqQog
W9DqdwjvQa4cZLSh5yNyijeW+9BvS2LA7VzMsPH8zjclDtvDbFNSzV8MrfXKPjL2
ZTq03fS5u4X2OH/k1PEhEcrvSw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:38:44 2026 by rpki-client