
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
File: LJql-YLItE-ibfCM6iQx15qsN1U.mft (raw, json)
Hash identifier: GZ0wkGQxGAWfceBJJZxYT0JRX5rV1znqzQTS1enMk+c=
Subject key identifier: 72:91:DF:0E:3B:DA:43:20:F6:95:D6:43:D1:23:A6:A4:37:2F:82:59
Authority key identifier: 2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55
Certificate issuer: /CN=A91A4ACD/serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
Manifest number: 2D
Signing time: Thu 19 Feb 2026 06:56:10 +0000
Manifest this update: Thu 19 Feb 2026 06:56:09 +0000
Manifest next update: Thu 26 Feb 2026 06:56:09 +0000
Files and hashes: 1: LJql-YLItE-ibfCM6iQx15qsN1U.crl (hash: CljiFkI+SMbqzVkir0FD2I/md0coFEZ04geN9mza9vM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl
rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ACD, serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755
Validity
Not Before: Feb 19 06:56:09 2026 GMT
Not After : Feb 26 06:56:09 2026 GMT
Subject: CN=6996b40a-9f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:3b:78:c3:82:ac:e2:46:1c:aa:9c:8b:d8:
f2:b8:f2:9c:98:19:72:7c:22:c8:8d:b3:15:a0:c6:
8e:5d:d1:a6:5a:3c:70:63:9c:5c:c5:83:73:76:40:
0f:07:12:b7:69:60:43:0d:65:19:fd:b8:59:8e:a4:
b9:ea:54:f7:78:c6:72:7e:d9:26:cd:bb:4b:2c:bb:
fc:9d:7f:9e:23:cc:22:3b:5f:2c:28:0d:89:85:d7:
4d:92:0d:1b:76:4c:da:1b:e8:59:e4:82:d5:d0:a8:
37:68:f9:d8:2e:8a:4b:0f:16:3d:44:9d:4c:ed:3a:
27:27:47:59:f4:4e:55:4c:a5:c4:e6:84:5b:80:be:
44:3b:0c:51:69:c5:59:1d:e7:31:fe:29:71:da:ff:
47:9d:d1:34:22:1c:ff:a9:bb:df:d1:29:bd:ef:19:
24:e1:1e:b8:eb:88:be:c5:b5:2f:c8:2a:4b:66:05:
48:95:dd:23:d6:bb:c0:94:51:54:47:92:87:7e:53:
0c:53:59:45:c8:ac:a7:21:89:17:ef:98:e8:c7:3d:
63:27:04:0d:8f:64:e0:cf:2a:59:db:a5:20:d9:93:
a2:2b:43:0c:f8:54:a1:d5:5e:2d:ef:b8:e5:aa:d3:
01:61:eb:94:8c:6d:fb:dc:61:8a:f3:c7:5b:bb:3e:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:DF:0E:3B:DA:43:20:F6:95:D6:43:D1:23:A6:A4:37:2F:82:59
X509v3 Authority Key Identifier:
keyid:2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:28:81:2c:bc:3d:7c:01:ca:f0:88:ab:23:21:8c:e4:3b:1d:
50:b7:b4:82:87:0a:5d:96:a3:39:d6:9a:f1:84:bd:23:a1:37:
9e:26:19:61:fb:8b:61:81:84:46:ff:24:29:ae:41:bd:70:e2:
04:32:99:21:bd:98:d4:95:d1:dc:af:74:6e:6f:df:4b:14:9c:
34:60:f0:9a:f1:e8:53:04:3c:4f:34:82:f5:e8:fc:ae:42:85:
5b:2f:32:57:56:fb:4c:14:7f:e6:c9:0d:7e:d2:6e:f5:ed:21:
17:eb:9a:57:b1:24:ac:d9:f0:46:cf:28:b5:c9:93:04:06:37:
fe:05:88:03:64:e8:33:73:36:e1:fc:ed:61:4c:22:54:f7:28:
e8:b7:8f:d3:2e:de:56:0b:5e:5c:34:53:c3:99:81:61:e8:b3:
c3:dc:ce:48:d9:6f:c5:f2:4c:a6:75:01:8a:64:49:18:bf:4d:
3f:50:a0:22:22:2d:78:54:50:cc:32:49:df:97:fb:4e:f0:d9:
81:ad:cc:a1:9e:b5:29:20:8e:5e:05:7c:de:90:45:fb:4f:ca:
3c:ab:79:d7:45:ea:15:25:97:11:05:dc:9a:cb:70:d2:1a:83:
7a:c2:25:1c:32:99:b0:46:29:00:08:5e:5c:89:99:27:61:63:
01:42:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:44 2026 by rpki-client