
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier: mWvfidkO9iOFiEDKSMn9I/TWmDzYefQ+yS+YOtYGLSY=
Subject key identifier: A6:6D:99:2D:47:02:ED:A9:9F:5A:AA:77:F9:B1:36:9B:68:0A:11:DC
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number: 7C
Signing time: Wed 25 Mar 2026 06:57:48 +0000
Manifest this update: Wed 25 Mar 2026 06:57:48 +0000
Manifest next update: Wed 01 Apr 2026 06:57:48 +0000
Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: 3dn3zUCoRsUlTsyItBh2R5gOLEB/KB1EMx/i4F6PK6k=)
2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: JklpsFyowHEwcOoj+ZilnkU1z0N39Fb72KxzXQYDJI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Validity
Not Before: Mar 25 06:57:48 2026 GMT
Not After : Apr 1 06:57:48 2026 GMT
Subject: CN=69c3876c-49c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:6c:49:fc:92:03:c3:bc:30:60:6e:19:c1:
7e:36:d0:15:a3:a5:92:15:86:35:2d:67:59:e0:17:
37:e4:78:30:bb:b1:f1:9b:ee:be:82:e1:75:bc:70:
c7:0b:85:d8:75:56:ac:c8:87:40:e7:f4:a5:94:a1:
53:67:51:4c:24:40:e1:1d:f8:3c:a5:6d:a7:f6:07:
cf:40:b2:f1:66:b7:70:2c:88:cb:d0:a7:f2:44:71:
87:45:d9:cd:2e:fd:56:9e:70:55:a6:a1:2e:7c:32:
e0:de:de:2b:cb:a7:e0:e1:56:66:16:21:95:06:08:
80:4e:66:7b:8e:a5:a9:04:1f:d7:8b:7e:c7:69:d9:
cd:89:da:29:a7:81:e0:6e:e8:c8:c6:79:fb:a8:70:
14:61:e3:19:c1:3e:d7:64:56:1b:46:f8:a5:3a:7d:
e2:95:4f:bd:82:2f:f8:df:a8:f0:07:d5:96:1e:4b:
61:0d:7d:5c:71:37:13:7c:2c:40:36:11:f0:f2:01:
d8:7b:34:1e:f7:68:4a:af:cf:ab:fe:59:fa:60:33:
58:72:f4:2c:ab:ab:bb:46:25:06:de:ea:66:4a:f4:
bb:62:df:b2:81:d4:09:44:e9:e1:88:de:bc:39:14:
9b:75:21:5e:90:49:79:29:1b:c1:97:76:23:d3:2e:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6D:99:2D:47:02:ED:A9:9F:5A:AA:77:F9:B1:36:9B:68:0A:11:DC
X509v3 Authority Key Identifier:
keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:12:1d:e1:55:04:d8:8d:b6:d0:dc:a2:18:4f:7f:fc:a2:0d:
c4:97:3f:1c:44:85:b5:d3:dd:65:f4:d3:65:a4:44:ab:2c:d0:
27:10:17:b5:b3:e5:e2:df:b0:94:76:86:f3:10:22:fa:b2:32:
b8:01:cb:e2:f2:ab:27:13:a2:7d:f9:52:e8:45:05:7e:5a:c7:
68:aa:f0:ef:ac:ec:51:75:be:2f:2e:ea:54:38:b7:a4:61:e2:
2f:7c:a8:b0:2a:76:28:99:06:ae:36:9d:a2:99:37:53:d2:45:
80:37:cd:91:34:35:e9:fa:d6:26:16:05:30:a1:65:4f:45:8d:
fc:65:4a:3b:d2:14:05:bf:fd:76:07:c8:95:07:76:76:52:0f:
ae:c0:c8:29:75:70:30:dc:e3:58:8e:01:a6:92:1e:ea:c2:ae:
7b:b5:a0:98:da:19:81:14:ab:91:04:32:f2:41:58:83:da:f6:
19:f8:b5:d3:85:25:d7:57:74:de:7e:ac:cd:5b:64:0c:35:06:
52:7a:c3:85:d1:bb:85:b4:8d:d4:e3:d9:a8:25:b0:ad:72:40:
2e:d7:f0:eb:6a:d7:3f:fe:9c:98:7f:78:13:4d:d4:e0:6b:87:
96:e0:16:d5:f4:61:48:b6:30:18:31:77:d0:2e:bf:e9:9a:23:
5a:5f:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:59 2026 by rpki-client