
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier: AZbD7I69Zwtiih+mfqyCpqGuH98+860mPhSEtWuQ+Qc=
Subject key identifier: DD:0E:3D:5B:66:8B:D7:E8:4F:AA:F2:FA:71:78:72:73:E4:BF:5B:8A
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 0A75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number: 0A41
Signing time: Wed 28 Oct 2026 19:57:15 +0000
Manifest this update: Wed 28 Oct 2026 19:57:15 +0000
Manifest next update: Wed 04 Nov 2026 19:57:15 +0000
Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: M6GZXdoxPx344+qAqGOI7RyjemHPlP5INFZB5g0pTVw=)
2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: TwfOtqELROfwbdGW94mJ46Jldk9YfuE63pysMVGHVgU=)
3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: qA6m0DYMiRUmJ031ZSlgBYMv/3TYzZQxA8v1f3tCGXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 19:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2677 (0xa75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Oct 28 19:57:15 2026 GMT
Not After : Nov 4 19:57:15 2026 GMT
Subject: CN=6ae2539b-cf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:6d:4f:20:88:f3:f2:fc:40:65:45:bd:d7:
2f:74:4b:87:68:d8:14:5d:50:35:59:8d:ed:49:91:
f2:e0:a5:c3:ff:ee:37:da:23:fd:e2:73:e1:09:2b:
2e:60:c3:9d:b0:31:cc:16:37:c7:97:5e:91:2f:ad:
15:9f:d2:58:80:51:d5:85:fd:c8:6b:78:f9:31:09:
61:69:ec:b4:15:89:5c:6a:be:02:af:6f:99:7b:60:
de:a7:07:e7:bd:6b:cc:1e:5b:9b:25:b5:69:0d:07:
db:07:49:cb:34:15:ca:73:fd:ef:a5:13:4c:46:4d:
8e:64:a8:7d:b7:9b:e4:1e:81:ef:29:f1:b6:c5:1e:
e4:d8:15:5f:d8:12:7f:a4:11:1e:cd:a2:89:62:22:
77:8d:a7:bf:d9:b5:c9:69:42:31:08:b8:9f:bc:ca:
01:6c:24:4c:0e:de:90:14:28:59:74:16:c2:ee:14:
52:3a:ed:d2:0a:ed:ee:30:92:83:6c:87:aa:51:fa:
93:74:ba:9a:7e:d1:39:6e:44:4a:33:fa:c9:3d:46:
d6:7d:f7:9e:78:57:11:10:0c:d7:15:af:e3:7e:48:
c1:de:09:24:df:56:4c:9d:53:13:8b:92:92:11:d3:
5b:d8:25:1d:e7:d1:ed:e9:7f:c7:81:9f:97:0a:00:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0E:3D:5B:66:8B:D7:E8:4F:AA:F2:FA:71:78:72:73:E4:BF:5B:8A
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:61:e5:bd:42:6c:40:6a:df:55:a0:37:2b:c6:80:da:35:21:
d7:5d:4e:1e:97:19:a6:79:2d:86:8f:02:7f:32:a9:7a:bb:d1:
7b:3c:c7:7f:dd:bd:44:f7:73:c2:f1:22:c9:f7:68:fe:88:e8:
ac:ab:64:24:cc:50:97:a2:18:39:68:de:09:27:84:a5:b9:ec:
78:76:2c:71:c9:53:19:c4:6f:e7:0a:0c:19:c3:2f:1c:7b:2b:
5c:8f:4f:c6:25:4c:01:77:0b:a4:fe:17:1b:2c:fd:f0:4f:5d:
c7:39:4b:30:d5:5e:e7:70:5c:71:68:99:ea:12:84:29:f1:9d:
13:53:5b:45:b8:25:9b:10:3b:ac:31:42:ba:d2:29:ba:5e:f6:
40:53:2d:88:f7:10:f3:84:d4:89:60:44:fd:4c:cf:dc:7d:e0:
e8:ac:38:a3:17:05:ab:be:b6:88:8e:e5:e9:d4:d9:16:93:c5:
58:63:30:60:55:de:97:90:a1:2d:9e:b4:81:ea:0b:cd:5c:4c:
5f:c0:44:c5:77:c7:71:82:0c:7e:aa:08:53:d0:22:df:42:ba:
70:1e:f4:65:a8:d8:89:93:ba:58:50:18:21:79:22:38:6b:15:
1f:c4:6d:9c:49:ee:43:57:17:ba:be:40:52:53:1a:a0:59:7e:
96:a3:15:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz
NDg0MjVCMTcwHhcNMjYxMDI4MTk1NzE1WhcNMjYxMTA0MTk1NzE1WjAYMRYwFAYD
VQQDEw02YWUyNTM5Yi1jZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtB5tTyCI8/L8QGVFvdcvdEuHaNgUXVA1WY3tSZHy4KXD/+432iP94nPhCSsu
YMOdsDHMFjfHl16RL60Vn9JYgFHVhf3Ia3j5MQlhaey0FYlcar4Cr2+Ze2Depwfn
vWvMHlubJbVpDQfbB0nLNBXKc/3vpRNMRk2OZKh9t5vkHoHvKfG2xR7k2BVf2BJ/
pBEezaKJYiJ3jae/2bXJaUIxCLifvMoBbCRMDt6QFChZdBbC7hRSOu3SCu3uMJKD
bIeqUfqTdLqaftE5bkRKM/rJPUbWffeeeFcREAzXFa/jfkjB3gkk31ZMnVMTi5KS
EdNb2CUd59Ht6X/HgZ+XCgDG9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0OPVtm
i9foT6ry+nF4cnPkv1uKMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5
ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a
MTlNNG8tb0M5OFUwaENXeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV2HlvUJsQGrfVaA3K8aA2jUh111OHpcZpnktho8CfzKpervRezzHf929RPdz
wvEiyfdo/ojorKtkJMxQl6IYOWjeCSeEpbnseHYscclTGcRv5woMGcMvHHsrXI9P
xiVMAXcLpP4XGyz98E9dxzlLMNVe53BccWiZ6hKEKfGdE1NbRbglmxA7rDFCutIp
ul72QFMtiPcQ84TUiWBE/UzP3H3g6Kw4oxcFq762iI7l6dTZFpPFWGMwYFXel5Ch
LZ60geoLzVxMX8BExXfHcYIMfqoIU9Ai30K6cB70ZajYiZO6WFAYIXkiOGsVH8Rt
nEnuQ1cXur5AUlMaoFl+lqMVRQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 17:39:27 2026 by rpki-client