
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier: fgxn6uoMq1hL+7iEyR/wvXK8+hg4x9wcj38lof7INjM=
Subject key identifier: 1E:B2:2B:12:37:C0:A8:12:36:01:72:C7:E2:B8:F6:BD:4F:E5:F5:76
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number: D8
Signing time: Mon 27 Apr 2026 06:42:30 +0000
Manifest this update: Mon 27 Apr 2026 06:42:30 +0000
Manifest next update: Mon 04 May 2026 06:42:30 +0000
Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: R3wPGbJnLAlJFuZL5RZB5vpDcMqDTsnnOANH0QCH6CM=)
2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: pFar0hkjv8MeCYoT9TzhPZtPV3p3brER3074/liih+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 06:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Validity
Not Before: Apr 27 06:42:30 2026 GMT
Not After : May 4 06:42:30 2026 GMT
Subject: CN=69ef0556-b2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:72:7d:5a:64:32:90:54:ff:07:57:30:74:
24:a9:f6:55:73:38:2d:d8:20:06:2f:31:10:4d:c4:
7b:cd:e1:7d:7d:65:1d:86:af:5c:8f:d6:8b:68:bc:
f5:1a:6c:03:38:3f:6a:be:04:f4:3e:2d:ea:f3:88:
40:25:76:b8:8d:c0:0e:51:fb:bb:ff:19:2e:58:41:
fe:c8:66:2d:8a:79:9f:fd:37:47:48:15:10:8a:d6:
c2:c4:c6:ad:04:20:39:a9:2d:a9:46:4a:f0:29:bd:
87:df:18:b2:c9:a4:e2:44:f9:93:91:59:d7:29:e0:
f5:31:80:fc:d3:bb:b8:90:f9:a6:f5:23:c1:1a:87:
07:78:14:42:75:6f:e1:5e:6f:8a:6b:df:b2:53:76:
25:c5:74:e1:bf:98:d8:22:40:ec:a0:51:68:3b:1e:
3e:f3:52:3d:e0:4a:0c:39:76:f7:21:f9:97:99:5e:
55:e7:11:f8:11:2e:f4:1b:72:e2:a3:0c:28:5d:ef:
42:c4:4a:3e:50:07:29:18:b5:b5:5f:8f:ce:97:67:
4c:41:9d:ce:fc:4c:ea:a8:91:c1:c7:54:00:27:f3:
02:8c:2c:a9:a4:4d:ff:57:52:90:d0:6b:96:64:cf:
2a:8a:80:05:d2:39:c3:31:7d:ba:40:e3:13:ba:79:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:2B:12:37:C0:A8:12:36:01:72:C7:E2:B8:F6:BD:4F:E5:F5:76
X509v3 Authority Key Identifier:
keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:bb:91:17:80:7f:41:01:8d:af:c6:90:c2:8f:d3:b7:2b:d5:
0f:6d:64:72:d7:ff:1f:68:8a:af:75:c8:63:c7:1d:3a:c4:ca:
05:ac:f1:26:ca:0a:aa:81:44:1f:5e:4c:3b:33:04:06:e1:38:
54:d1:22:8d:57:41:9b:54:eb:77:96:3e:ac:16:3d:75:a0:d1:
bf:9d:5c:9e:11:12:e1:4a:b0:a5:57:08:7f:0b:ea:fd:e7:87:
07:88:c0:ca:ed:98:53:63:fa:8f:bb:8b:9d:5c:e9:2a:b8:a7:
d8:d9:21:fa:d4:aa:57:f3:5e:73:50:86:9a:a4:0e:17:0c:75:
25:25:cd:6d:d8:e0:92:59:69:9f:53:28:87:35:f7:b2:ee:05:
42:5d:20:ec:74:af:f2:b7:b6:ed:a5:c3:24:76:a4:6f:35:a7:
4d:b3:46:a0:d1:6a:e1:d0:5e:fa:70:c7:6b:31:6a:a4:08:95:
0f:40:b6:b9:59:8e:cb:8b:ab:a8:3a:63:85:05:80:05:40:2c:
6d:4f:56:9c:93:82:0f:2f:09:7f:10:4e:bb:d6:c4:a8:96:95:
44:fb:b7:21:ec:cd:f9:c4:c5:62:bb:3b:84:d7:3d:5e:05:44:
da:27:22:3c:e4:d7:c3:5d:b3:ba:df:70:6f:e7:29:30:c7:78:
22:0d:96:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:08 2026 by rpki-client