
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: GVKD3zbaOXfPj9kFvAPko9/7p95HZMGXnVfauS5ytIE=
Subject key identifier: DB:75:B0:E4:16:04:52:95:C1:E5:A6:E2:76:0B:E4:30:D4:96:E7:BE
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4A26
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 4A0C
Signing time: Tue 12 May 2026 14:50:42 +0000
Manifest this update: Tue 12 May 2026 14:50:41 +0000
Manifest next update: Tue 19 May 2026 14:50:41 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: D6DyAMCEmHy+xbuR8xG7H4pyO6r10ayKsCEmedeRK3k=)
2: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: R5q4mx+s9uEpcu2HtTPXgSdWbDKlsykJ60NOYm07C3w=)
3: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=)
4: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (hash: dc92CXSHVcK4zCYIrrv+NPWC93p6+eAno540R7w0xUo=)
5: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (hash: kRE596OuuyWoxbv8T1vR2OaR4I4quaciUDwMti2Nlmk=)
6: _KtbpyYSYFeOSNmqwBIRqzpaIwk.cer (hash: VxzHTIWHWE5e1kkdmrFBypeeSBudraax6wjaIcwT32Y=)
7: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: 9g0d999WloLZl2Y8eVT/3PQyV06kf0W47UHGLmFv+Vo=)
8: BvSy24SzhwK186kqeJJV2c_vPus.cer (hash: Cy51FJsOgmK/E7wlpy0E5rXUKLSOTbCvLcmr1LlMA0c=)
9: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
10: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18982 (0x4a26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: May 12 14:50:41 2026 GMT
Not After : May 19 14:50:41 2026 GMT
Subject: CN=6a033e42-85ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:24:16:4b:24:3b:a6:67:4f:b3:65:0f:9d:
d7:76:27:77:6f:a8:3a:31:10:23:6e:d4:b7:c3:61:
80:48:6a:38:ee:1e:41:7d:b1:9e:43:ba:4b:e9:e2:
25:07:09:49:09:c5:05:1e:6a:fa:39:be:27:1f:f3:
d2:5e:a9:c2:0f:cd:fe:d6:9a:1a:ed:1e:e8:c6:58:
35:cf:0f:e1:97:4d:53:85:af:1c:36:36:1c:c2:63:
a2:78:4f:d6:ee:e9:57:e1:2d:98:3e:2a:21:fc:f0:
94:54:58:a7:a6:ef:d4:a2:e7:f4:dc:35:ee:75:07:
67:63:08:ee:bc:d8:17:6c:f4:70:ea:98:35:c8:f8:
00:29:73:34:15:5e:f3:2c:71:83:86:f9:d3:a1:4f:
44:1c:46:d2:fa:83:bb:c7:aa:a2:74:12:1c:dc:b8:
25:87:14:06:9a:e6:42:34:13:2a:95:9a:21:2d:cc:
6c:88:ea:07:67:0b:96:e6:f4:56:a0:48:37:c0:13:
88:88:08:93:3d:0a:1a:a2:75:9b:53:8e:fa:73:f8:
0b:c3:f7:e1:e9:eb:fd:94:ed:d3:d2:67:cb:f1:e0:
39:c8:b8:35:6a:10:c4:e2:d7:07:a1:c2:ba:a0:5d:
36:26:41:14:3f:f6:5c:32:b5:f7:2b:aa:1e:24:12:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:B0:E4:16:04:52:95:C1:E5:A6:E2:76:0B:E4:30:D4:96:E7:BE
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:4f:c3:ac:a8:c8:6b:56:a1:76:f1:9d:47:81:b5:23:b8:45:
0c:22:45:46:af:9f:ab:00:e1:e1:f5:86:17:7f:3f:0a:47:2a:
5d:d9:3b:bb:9f:bb:c9:ac:89:8f:1a:cf:7b:c0:8c:80:01:6c:
24:01:28:30:de:8d:65:41:65:1a:98:37:0c:d6:f5:da:12:f9:
c8:00:8b:0a:3a:72:75:fb:9c:bc:d9:e5:c2:35:29:bc:08:49:
78:8e:19:72:ab:b5:80:0e:44:5c:78:06:98:ff:03:b8:e2:cf:
c7:33:9c:2f:14:72:80:ea:58:cd:30:2a:2e:4d:11:b5:b4:fa:
71:21:4f:e1:c2:87:2a:43:fb:8f:fb:07:f3:16:48:d0:02:bc:
b2:97:92:16:d6:d0:ee:15:b6:67:0e:eb:c9:dd:4f:e1:d4:cd:
73:a9:59:3d:53:e8:5a:a1:1d:95:2f:8a:d0:03:c7:d8:f2:7e:
a0:74:04:2b:73:3c:d8:77:b5:8b:18:44:28:10:00:c3:8a:06:
48:dc:68:1f:96:98:26:11:88:c1:13:d9:e5:c0:f8:03:fd:fb:
c8:97:4d:53:14:12:ce:a7:17:40:84:7b:1c:a6:90:10:ce:09:
c3:7c:8a:b3:ae:bb:f3:50:a7:ef:91:6b:87:52:bd:01:24:27:
83:30:38:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:41:32 2026 by rpki-client