
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json)
Hash identifier: 4OX9ZR2Y0Ss5tzKqUNxVrz9F/5o3j3M6rPJwtTQjBks=
Subject key identifier: 1C:8C:35:D2:FC:FD:BC:BB:E7:46:31:90:C3:59:E6:EF:3B:20:2C:78
Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
Manifest number: 0154
Signing time: Sun 05 Apr 2026 04:30:56 +0000
Manifest this update: Sun 05 Apr 2026 04:30:55 +0000
Manifest next update: Sun 12 Apr 2026 04:30:55 +0000
Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: 8j3qpFVeL4bvniAiPjsfAjk/uMHWX972uRQMcA51lqw=)
2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: F8ec6PAokFr2Tj50TlNBDnhUPWfBRTXaePI7bYNRmK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Validity
Not Before: Apr 5 04:30:55 2026 GMT
Not After : Apr 12 04:30:55 2026 GMT
Subject: CN=69d1e580-2038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:5a:e0:80:24:d9:b8:c4:f3:bd:7e:a6:04:
e1:9b:9f:e7:a8:ea:36:70:65:a9:82:eb:13:70:57:
47:e9:64:01:55:b5:ab:44:b2:c5:af:63:c1:4e:cd:
be:20:04:d6:e2:f5:14:fc:f2:f4:21:4b:54:80:ce:
bd:6b:31:c9:11:1a:a2:f9:3e:fd:9f:8f:f0:20:5f:
9f:05:7e:82:3d:9d:76:a5:dc:cc:06:2e:f9:7f:6e:
02:20:50:97:c3:67:4d:ac:09:ba:31:7b:4e:3a:a8:
c7:bc:49:08:26:23:e2:9d:33:c8:f3:68:bd:70:5e:
e1:ad:7b:f7:50:e0:dd:ff:63:af:92:3c:89:ce:1b:
a9:92:9e:c3:57:60:90:42:58:12:d8:88:27:86:28:
67:a0:9c:c8:1e:b3:07:02:e9:47:f1:87:ce:76:aa:
d8:b1:b0:dd:a3:46:ff:73:76:ec:6c:6d:b4:eb:dc:
29:cd:03:78:81:a3:c5:96:3f:47:d6:0e:f7:52:d3:
73:ca:e6:d8:e5:12:30:77:da:d1:34:20:85:3e:7c:
86:d8:f2:70:e1:bc:6d:a9:44:62:cd:15:5b:d8:7a:
6d:ce:05:82:29:bc:14:61:84:02:84:1f:ca:f9:74:
1d:1b:04:9b:23:a8:7d:ca:83:2a:f0:31:ea:95:91:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:35:D2:FC:FD:BC:BB:E7:46:31:90:C3:59:E6:EF:3B:20:2C:78
X509v3 Authority Key Identifier:
keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6e:f6:f2:ba:ec:a3:22:64:17:a4:88:78:0d:a5:84:a5:91:
68:3d:95:32:76:28:7b:57:61:3d:d7:32:8d:db:53:1d:61:ce:
2a:46:e7:72:64:0d:ac:4e:a9:ed:ad:15:3e:07:27:1b:a2:32:
84:6e:ba:89:d9:86:93:84:65:8a:df:d6:23:82:be:56:1e:89:
9f:37:e6:9b:68:64:a8:8c:4b:55:6a:a0:fb:4e:27:c6:1a:99:
55:10:4e:49:a9:94:29:fa:02:2a:74:a6:0d:da:05:77:b9:d6:
33:99:8f:ad:e4:a1:b2:1a:4f:fd:4d:7a:58:9f:6c:dd:99:4c:
89:f0:b2:dd:6f:a9:4e:08:c9:98:54:77:c8:97:5e:2e:b5:14:
27:17:db:cb:bc:e2:6c:2f:c4:d0:a6:78:2a:b7:ea:13:71:90:
da:66:66:ad:27:d4:f3:23:f0:14:46:cf:11:19:70:b9:17:c4:
6a:52:66:19:36:8a:35:47:91:96:64:8f:36:e5:64:1c:93:b3:
4d:d2:9f:4c:35:95:fc:cd:57:75:a2:6b:3a:f6:86:44:c1:eb:
7e:9f:f6:df:a5:07:9c:6a:05:ab:54:dc:9e:47:32:4c:c0:20:
ca:29:6b:c6:b1:df:4a:e1:92:39:d3:f5:18:31:eb:26:92:7c:
9b:6e:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:15 2026 by rpki-client