
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json)
Hash identifier: y8QoZtoVhVqcFLQhBR/jwiAZamFa5NxSVZJWAdjEy2s=
Subject key identifier: C1:EC:B2:25:9B:36:BF:31:5B:51:29:F6:47:3A:32:77:4F:19:A3:D0
Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF
Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
Manifest number: 0121
Signing time: Sun 05 Apr 2026 05:15:31 +0000
Manifest this update: Sun 05 Apr 2026 05:15:30 +0000
Manifest next update: Sun 12 Apr 2026 05:15:30 +0000
Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: hMAR/iXQeZQQZyYfTWtQWEBr+3/S7OpDhWK3CsohJXc=)
2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: hQD17pdWkHKfFuel65BmeooGPbZsbzoy4kMOI6hWhF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl
rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
Validity
Not Before: Apr 5 05:15:30 2026 GMT
Not After : Apr 12 05:15:30 2026 GMT
Subject: CN=69d1eff3-fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:47:4d:e7:1f:79:f3:de:bf:f2:70:ad:b5:
a3:eb:32:ed:28:3f:0e:82:fd:df:a9:65:08:4c:30:
0d:1b:31:7b:fa:71:13:40:ea:1a:57:f4:62:96:ec:
66:00:1b:75:4e:f6:a8:e7:3e:1b:14:ef:f3:c7:22:
23:c7:6c:c4:68:68:08:4c:65:df:8d:b0:33:04:6a:
9d:8a:3a:41:dc:09:fa:5f:de:1d:0b:7a:e3:73:9e:
42:bb:bf:2a:b2:15:ae:09:b7:e4:ec:21:8c:8a:f6:
61:d9:ce:c7:c6:e5:be:5f:42:6c:57:40:93:2d:57:
ad:39:2f:9a:68:24:1e:38:e0:14:4e:a4:e2:6a:cb:
fd:04:89:c2:90:df:26:99:50:e2:06:5c:21:8e:3d:
93:70:20:20:98:15:ef:9c:dc:3b:e3:14:90:5e:3e:
85:ed:c2:f2:93:5f:6d:3d:76:e2:ba:3b:cd:dd:bc:
af:05:82:d6:36:53:ce:d2:9a:5a:1e:31:ad:ce:1a:
a2:48:a8:d9:9e:a8:a0:99:45:d0:c5:13:be:70:c2:
dd:af:e5:c0:b5:49:ac:42:f7:62:38:2c:94:f2:50:
d1:70:15:15:af:25:a1:d6:14:15:6e:ae:f6:94:ee:
fa:8d:96:1d:02:9c:d3:bd:60:4e:c5:84:66:91:30:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:B2:25:9B:36:BF:31:5B:51:29:F6:47:3A:32:77:4F:19:A3:D0
X509v3 Authority Key Identifier:
keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:5c:8b:e3:44:25:23:cb:da:e6:5d:ed:26:e5:42:15:85:46:
37:2f:7f:2f:80:f5:b4:5c:06:22:17:79:00:63:88:8b:0c:e3:
7d:9e:65:8f:52:b9:03:15:17:fc:81:00:e9:fb:47:8c:23:02:
65:9c:3f:55:01:e5:83:2c:40:85:fb:12:44:17:b0:47:aa:11:
1a:a8:cd:5d:12:e4:cf:e3:ac:cf:05:5e:a1:60:a0:2e:21:72:
0c:50:2c:f7:40:b1:f6:5e:5b:29:51:0c:30:8f:c0:ba:32:a8:
0c:64:4b:1a:7b:88:0e:19:fa:24:3f:38:09:c1:0f:b2:0e:c2:
5c:b4:b0:d2:2b:63:31:68:84:9f:3c:63:9b:54:cb:58:ec:0d:
8d:26:76:ea:90:6e:bc:e2:4e:d1:a9:b4:20:30:92:40:54:d2:
dc:07:6a:69:d4:eb:66:27:81:d5:61:0b:af:f7:2b:ca:f1:0e:
f9:41:3a:1a:05:38:0a:0b:33:3f:95:cf:8c:db:ed:aa:9e:79:
c9:16:0b:c7:8f:85:95:2b:4f:9e:94:e6:90:98:4b:23:0e:36:
dd:e8:0b:a6:9c:3c:a8:64:59:1d:dc:7a:17:8f:ef:b3:dd:54:
59:d2:bc:8b:d3:d4:bc:05:31:7a:48:10:43:a0:bd:c5:ae:57:
38:3d:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:46 2026 by rpki-client