
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json)
Hash identifier: +Pjxcm2/WEJRveKxH9DBDtQJoGuKnLpNASk/j4z25Jc=
Subject key identifier: E9:7C:77:D8:E0:BE:50:E1:FE:A1:7B:AD:0F:DE:16:89:FF:38:5F:3B
Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Certificate serial: 0C24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
Manifest number: 0C07
Signing time: Mon 06 Apr 2026 18:40:45 +0000
Manifest this update: Mon 06 Apr 2026 18:40:44 +0000
Manifest next update: Mon 13 Apr 2026 18:40:44 +0000
Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: r9ohNarkNxSKv+fnoBjDfTHXFyNUZnqd+OKyOe5SRVk=)
2: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: 1aYucsJJizOrJGwERLeDG0d5XIi/bHOIooEKsMrUEo8=)
3: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: QfT2Eaqv5QPDrORQi1WneHGHYWsLdTVYS3iMbBaZBv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 18:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Validity
Not Before: Apr 6 18:40:44 2026 GMT
Not After : Apr 13 18:40:44 2026 GMT
Subject: CN=69d3fe2d-f57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:70:82:7d:1d:72:82:44:ec:43:29:3e:8d:
92:37:e9:61:00:ba:76:f2:01:63:a7:86:12:cd:d5:
af:1c:40:75:aa:c6:29:17:d7:43:ac:47:d4:ac:92:
a5:59:db:6c:3f:82:09:57:3f:ec:fa:a2:b7:ce:5f:
8d:15:f7:a4:19:a2:52:7e:68:5b:57:27:7c:66:11:
a1:b4:d9:ca:c1:7e:a8:e8:da:26:c5:16:eb:7f:95:
52:ff:2e:b4:09:7e:9c:7a:b8:ef:85:ff:4f:1f:34:
ea:e3:d4:72:89:5a:8e:d5:10:77:68:6f:63:e2:15:
d9:b5:8e:8a:05:9f:23:be:d2:da:f2:57:ca:10:ea:
e7:b2:87:aa:7d:69:72:e4:8f:09:af:6d:b2:83:c4:
1f:9b:0b:95:51:6b:94:5c:81:d3:9b:82:68:3b:cf:
51:c7:c0:4b:c6:2f:7f:6d:88:81:87:60:fb:65:69:
51:e5:0e:79:2c:8a:ef:82:e6:d8:34:33:0a:16:4d:
03:1a:20:15:d7:97:79:97:54:94:0c:48:2e:5a:18:
a2:7d:27:39:cd:34:67:ff:38:1b:3c:ad:27:54:e0:
af:70:50:9f:78:09:dd:17:dd:b8:5e:be:53:47:f8:
7c:cd:34:b1:ff:eb:be:b0:a4:a1:85:9e:10:9c:af:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7C:77:D8:E0:BE:50:E1:FE:A1:7B:AD:0F:DE:16:89:FF:38:5F:3B
X509v3 Authority Key Identifier:
keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:09:d9:7f:fc:c1:85:0b:27:52:a7:9f:24:32:41:09:8c:43:
f2:a6:44:7a:f2:55:b0:1d:45:96:0a:fd:df:32:8b:ff:2d:bf:
af:59:2b:94:3d:2c:25:8a:7f:9f:d1:15:22:07:b1:73:66:e9:
b9:c5:b6:53:de:b2:0f:54:be:4c:b3:a2:7c:84:66:5e:d2:73:
ec:53:d8:02:9a:31:00:c0:91:b4:41:87:20:6a:61:07:c6:74:
5a:e3:49:2f:48:ec:da:0a:f8:81:2b:7d:63:1f:d1:8b:35:1e:
ac:da:4e:85:ca:90:53:eb:6b:cd:24:25:38:00:ef:e0:4a:c2:
18:93:59:9f:6f:41:cf:1f:51:2f:a8:ff:3d:6e:32:b7:11:b7:
61:bb:72:0a:1d:68:ba:fb:b7:c5:fe:b0:b1:8d:91:ce:95:2b:
16:27:55:00:12:f7:6e:b0:a8:c6:4f:dd:53:c4:bf:27:06:4d:
8f:4e:26:b8:65:29:4e:ae:8b:3e:45:cf:0b:cb:13:4d:f6:ab:
ce:69:e5:99:1c:e7:f7:b3:8c:a4:50:69:2f:2e:2e:dc:f3:19:
17:6f:bb:a5:da:96:e3:07:64:9a:da:b3:87:99:21:72:c7:52:
26:85:aa:24:94:81:a6:05:3c:7a:a8:a1:46:72:90:14:1f:8e:
7f:91:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:00:27 2026 by rpki-client