
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier: NNulnqG7T+FGUuQ5BL7BcUkhbJw1PzgmXj39SnVh09g=
Subject key identifier: 2E:2D:D0:61:90:9D:B2:12:03:32:8E:F0:C7:0F:68:15:F5:C9:A1:F2
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number: C7
Signing time: Mon 11 May 2026 07:01:07 +0000
Manifest this update: Mon 11 May 2026 07:01:06 +0000
Manifest next update: Mon 18 May 2026 07:01:06 +0000
Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: rsA3v09OAN1piCmn7SVE/ykZcp49b5ePJJGRWgiRYKU=)
2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: xXN9mX48NmFk2vcx7rwVXSG4y30L3OeYK6lw11JbwLA=)
3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: e1py/Dvzt5ULhjodeT2xOCGPBlZKvYaIHOb5jKyG0BQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Validity
Not Before: May 11 07:01:06 2026 GMT
Not After : May 18 07:01:06 2026 GMT
Subject: CN=6a017eb3-9a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:94:f2:36:cb:c8:2c:e2:86:cf:29:ea:32:
7b:78:f6:96:cc:96:bc:c4:7e:85:1e:9d:2a:e8:0e:
09:3d:7a:d2:bc:a8:fc:6a:95:f0:fd:a8:78:02:e8:
a2:f8:e0:97:af:11:3d:cc:00:74:b0:08:d0:b4:b9:
fb:e4:c9:df:15:7c:a7:a2:3c:89:21:fe:c9:bf:e2:
c6:b4:0c:e8:66:23:f4:79:93:e4:87:ec:54:7e:55:
80:4c:dd:a3:77:21:1a:75:2c:76:fa:ef:01:dd:77:
5b:10:cc:fa:5c:cc:15:07:24:1c:7e:59:4b:c4:55:
b9:6c:95:ff:da:25:36:d4:dd:7b:5a:e9:6f:3c:ba:
85:ab:60:a0:43:c1:06:3c:1e:95:4e:1a:7c:58:79:
ad:66:cd:ed:91:53:89:be:a9:26:85:f8:04:f0:34:
16:e7:82:07:0b:7e:8f:90:8a:77:d5:e3:8c:47:a8:
c0:55:d5:3a:a1:20:4a:2a:dd:e9:04:af:6d:e5:e6:
9e:51:7d:5e:b5:16:07:81:59:77:f6:93:e7:19:1a:
37:0d:9b:93:14:c5:73:bb:90:7f:a9:20:9c:06:c1:
a5:7b:d7:a2:d9:30:5b:f5:0d:95:dc:88:df:be:d6:
14:8c:0b:13:90:d7:00:e3:db:14:c2:da:bf:fb:7b:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:D0:61:90:9D:B2:12:03:32:8E:F0:C7:0F:68:15:F5:C9:A1:F2
X509v3 Authority Key Identifier:
keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a9:a1:d5:da:7a:59:f7:f8:19:2b:53:b8:6d:ee:6f:75:31:
da:85:f3:b6:4e:9f:00:0b:56:07:0b:e6:6b:a7:6b:aa:f8:00:
3e:67:19:f6:94:40:fb:81:f5:ef:0f:2e:ca:15:67:d3:7a:6f:
17:b2:80:f6:6b:2e:b3:4d:3d:d2:3e:39:44:84:5f:76:5c:bf:
83:be:75:d3:92:af:cb:eb:0f:cf:6c:94:8f:39:cb:34:06:54:
8d:00:48:f8:70:0e:56:07:87:df:70:dd:1b:47:1e:7b:b0:d6:
07:08:81:00:88:f8:cf:19:68:a2:80:20:cd:38:76:94:9b:42:
34:95:cc:e4:98:9d:e4:b1:14:03:57:a6:8e:2e:e0:44:f4:e1:
75:ec:0f:9b:56:09:c4:67:f2:d1:af:10:d6:2c:fc:e8:7e:d7:
d5:15:0f:18:a9:4a:24:25:a2:75:55:f3:7a:1c:6d:44:27:75:
79:15:d9:3c:60:83:76:a0:b7:2d:8a:b1:45:bd:14:e7:5b:57:
59:ac:57:4b:a8:bf:15:af:cb:6a:02:a5:43:a0:21:42:0d:f8:
20:7e:3c:fb:29:46:a7:81:fa:ae:62:0d:4d:d1:f3:69:0a:99:
08:51:ee:60:4b:cb:b3:91:59:4e:f1:7b:5a:45:10:8f:47:df:
bf:04:10:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0
NjZDQzRCMEEwHhcNMjYwNTExMDcwMTA2WhcNMjYwNTE4MDcwMTA2WjAYMRYwFAYD
VQQDEw02YTAxN2ViMy05YTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsUSU8jbLyCzihs8p6jJ7ePaWzJa8xH6FHp0q6A4JPXrSvKj8apXw/ah4Auii
+OCXrxE9zAB0sAjQtLn75MnfFXynojyJIf7Jv+LGtAzoZiP0eZPkh+xUflWATN2j
dyEadSx2+u8B3XdbEMz6XMwVByQcfllLxFW5bJX/2iU21N17WulvPLqFq2CgQ8EG
PB6VThp8WHmtZs3tkVOJvqkmhfgE8DQW54IHC36PkIp31eOMR6jAVdU6oSBKKt3p
BK9t5eaeUX1etRYHgVl39pPnGRo3DZuTFMVzu5B/qSCcBsGle9ei2TBb9Q2V3Ijf
vtYUjAsTkNcA49sUwtq/+3uuLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4t0GGQ
nbISAzKO8McPaBX1yaHyMB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx
RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzdBQi8yNjQ4NDU5MDIxRjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1
RkVxbThMWmtOc3BHYk1Td28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACamh1dp6Wff4GStTuG3ub3Ux2oXztk6fAAtWBwvma6drqvgAPmcZ9pRA+4H1
7w8uyhVn03pvF7KA9msus0090j45RIRfdly/g75105Kvy+sPz2yUjznLNAZUjQBI
+HAOVgeH33DdG0cee7DWBwiBAIj4zxloooAgzTh2lJtCNJXM5Jid5LEUA1emji7g
RPThdewPm1YJxGfy0a8Q1iz86H7X1RUPGKlKJCWidVXzehxtRCd1eRXZPGCDdqC3
LYqxRb0U51tXWaxXS6i/Fa/LagKlQ6AhQg34IH48+ylGp4H6rmINTdHzaQqZCFHu
YEvLs5FZTvF7WkUQj0ffvwQQDg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:22:53 2026 by rpki-client