
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json)
Hash identifier: zcjEsM9xhMtlWPNMY0L3pAPuKGLgaFNCic+i9ADc3xE=
Subject key identifier: B7:C6:57:AF:30:52:CD:21:AB:20:E7:2A:82:2E:4F:E5:42:16:EE:DB
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial: 0735
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
Manifest number: 126D
Signing time: Tue 24 Mar 2026 16:58:04 +0000
Manifest this update: Tue 24 Mar 2026 16:58:04 +0000
Manifest next update: Tue 31 Mar 2026 16:58:04 +0000
Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: sli4PUkMxbcoh4IgeyN04jeSdIOBIoUZpOFsyUPZoa4=)
2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: 9pRlrB5RoLMk5wWWkvR56OH2Np6x8D6L7F4S0ytR/PE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845 (0x735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3
Validity
Not Before: Mar 24 16:58:04 2026 GMT
Not After : Mar 31 16:58:04 2026 GMT
Subject: CN=69c2c29c-0cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:c0:a9:d2:ed:25:86:78:0c:1e:59:39:13:
df:17:92:f6:0d:4e:ab:d4:cd:6b:04:ec:37:2b:a3:
7a:91:0e:3e:a9:67:fa:ce:be:88:c1:f7:40:70:47:
bc:74:e5:ef:e8:c1:a2:c3:78:bb:7c:c5:2a:a9:31:
47:f0:7a:61:1b:77:2d:f4:f4:3c:5f:0b:18:c7:7a:
e5:51:2d:f4:09:75:95:42:4e:2b:bc:ee:f7:12:a7:
38:92:55:15:10:52:6d:ee:88:d8:49:ac:ea:07:85:
75:f8:75:04:31:6a:ce:89:be:9b:e4:02:2e:dd:ef:
7a:b5:38:ac:15:b9:0c:a2:85:59:6e:b1:c6:49:77:
63:66:d7:be:a1:ed:bc:2e:ba:5d:c0:e1:3e:1e:a6:
52:01:70:0d:2e:ee:7b:33:3e:0d:74:b1:95:27:4b:
48:48:28:da:f7:74:ef:c1:ad:2c:76:f9:5d:75:06:
56:bd:ed:6a:46:64:c7:03:6f:6f:57:4e:e8:d8:a1:
61:7c:07:ed:3a:01:d0:03:9f:37:dd:97:89:76:dd:
12:d3:08:af:24:8e:3e:1b:03:4b:d1:3f:82:4b:83:
5b:6f:f0:27:00:30:ce:76:34:c3:87:aa:ad:45:13:
16:d0:a4:28:b7:86:22:3b:a2:39:75:ed:64:a9:84:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:57:AF:30:52:CD:21:AB:20:E7:2A:82:2E:4F:E5:42:16:EE:DB
X509v3 Authority Key Identifier:
keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:7e:97:0a:45:b6:db:99:b1:f1:cd:d7:25:09:55:14:2d:48:
f3:8b:a9:00:a4:5c:f5:75:f9:84:51:55:90:ae:09:a2:2a:b6:
25:ac:f8:db:21:d8:49:d8:3a:1a:89:44:5a:7e:26:0b:0a:9e:
45:6e:b1:38:b1:39:36:06:28:6b:10:24:88:76:b5:8e:ed:69:
06:13:85:5b:53:dd:60:16:5d:43:d3:e5:8c:7b:a1:d9:dd:68:
b4:0c:5f:50:3b:1f:9c:4d:4a:02:01:e6:01:61:ea:08:d9:df:
46:8b:34:e0:6d:2e:38:3f:62:38:33:11:09:3d:e9:80:e8:c5:
37:de:91:42:13:66:cb:ab:54:9c:70:0e:23:a2:7e:47:3d:fc:
c0:fe:64:d0:e6:67:b1:49:cc:2f:1f:a6:df:cb:55:c1:c2:73:
e7:3c:7a:60:20:41:ce:72:f3:15:53:83:ff:90:d4:15:07:e6:
4f:92:87:6e:3f:f7:b0:9b:b1:0b:d8:ce:1a:79:e9:b5:1a:63:
83:5d:16:34:77:5b:8b:3f:fc:65:bf:5d:d9:69:9f:59:25:cd:
ba:89:86:84:4e:ec:e3:be:f0:73:1c:24:a2:bf:7a:91:41:09:
5e:fe:06:59:ef:da:47:fd:84:d8:da:88:36:5f:9b:bf:85:ef:
12:cf:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:34 2026 by rpki-client