
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json)
Hash identifier: xj2vaYQ/Y39BqMobBqDNvKT0jJrpYfcWrsfe1Mb+zP8=
Subject key identifier: 68:FB:D4:46:D1:34:88:C1:99:F5:A4:62:B3:20:EA:96:37:33:B3:9C
Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
Manifest number: 0194
Signing time: Wed 25 Mar 2026 03:38:25 +0000
Manifest this update: Wed 25 Mar 2026 03:38:24 +0000
Manifest next update: Wed 01 Apr 2026 03:38:24 +0000
Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: yvcZxXlcX2TsJ7Vj+bXOThVF+6u9Nh13m6/lM6x1Pic=)
2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: ZHeLDVTIHFJ7UjPrvmwH6xelh/2KaloiHRyyvC19Dlw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Validity
Not Before: Mar 25 03:38:24 2026 GMT
Not After : Apr 1 03:38:24 2026 GMT
Subject: CN=69c358b1-7626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:eb:ee:52:fd:e7:62:a2:61:c3:85:59:54:
cd:a0:da:df:8b:86:a4:23:81:c9:3d:78:90:0a:93:
24:90:50:df:10:64:69:ff:87:aa:d1:92:09:f7:29:
22:b6:54:79:f0:62:37:a3:b9:c7:79:06:d9:84:46:
d1:35:0b:d1:20:85:8c:f5:a5:c7:19:a2:c9:d2:49:
91:2a:8d:56:52:cd:94:03:7a:8e:96:b8:4a:56:e4:
d9:68:68:28:91:0c:93:1e:47:49:60:4c:f9:c3:28:
f9:a8:16:69:2d:0c:34:23:6c:38:00:8b:29:5d:ee:
38:22:ec:ad:7d:20:a5:8c:39:f9:ae:f0:ec:1d:40:
5a:50:cd:96:89:a4:82:1e:c4:2d:74:01:29:78:ea:
d2:51:d5:6c:db:4d:f0:5b:ef:b0:4e:81:a6:bf:77:
4b:f9:a8:8f:50:9f:61:20:04:29:23:33:28:5a:11:
92:b9:43:bb:75:a5:24:56:bb:21:6b:e6:71:16:06:
33:e6:cd:53:ea:d1:86:a4:6f:a4:54:c3:66:f2:dc:
f4:37:5d:82:46:4c:cc:ad:fd:8f:16:9d:c7:cf:56:
18:3b:57:4d:88:4b:4d:79:75:b6:14:34:dd:fb:1c:
45:30:03:41:07:8a:54:34:cd:3a:4d:dd:29:fc:09:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FB:D4:46:D1:34:88:C1:99:F5:A4:62:B3:20:EA:96:37:33:B3:9C
X509v3 Authority Key Identifier:
keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6a:34:de:9c:42:8d:cc:58:b3:8d:76:9a:e3:af:51:e9:cb:
ec:c7:ba:7d:18:16:a9:5f:c3:a8:02:a2:81:e5:65:51:ad:db:
83:54:d4:11:8e:cf:08:bc:23:1b:d4:d7:3c:e0:6f:82:0a:13:
03:11:a1:5d:ae:87:30:8e:a8:fe:72:30:b9:b4:19:70:51:a8:
82:df:fa:d5:4f:f5:84:71:d2:49:42:69:a2:c8:47:ce:1c:cb:
f8:c8:63:4b:15:ed:46:ef:ef:9d:15:aa:79:a2:ab:ca:3b:29:
4f:6f:1c:d6:70:cb:80:b7:79:92:e6:3a:4c:03:09:52:41:0d:
71:83:39:3d:b6:7c:96:45:83:e2:52:41:3e:67:e3:bf:14:6f:
de:11:89:ed:2b:c2:2b:0d:9b:60:29:75:2c:a6:03:dd:cd:dd:
ab:e9:0f:39:3c:01:9d:8b:9d:7c:40:93:7d:04:ce:e9:d7:1d:
cd:f2:ae:92:0a:a9:8b:88:c9:47:d1:53:0a:a3:b0:9d:34:db:
72:57:07:d0:9f:b3:71:40:25:e7:88:1a:eb:2d:c1:3d:ff:27:
c9:ed:35:7f:42:92:ca:ee:ca:44:ab:f3:16:a9:9c:1b:81:0c:
e6:d7:60:aa:30:d9:fd:3d:ec:4d:2e:11:21:66:b1:06:b8:a0:
75:98:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:18 2026 by rpki-client