
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier: 10TSJYHWbAdB4PGU9KmiDLZFkkCneEyryzg7qR7smZE=
Subject key identifier: 07:5F:4B:D9:94:71:6B:CA:54:01:54:92:52:DA:B3:1F:9E:79:9A:24
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial: 35AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number: 356E
Signing time: Sat 04 Apr 2026 14:15:43 +0000
Manifest this update: Sat 04 Apr 2026 14:15:43 +0000
Manifest next update: Sat 11 Apr 2026 14:15:43 +0000
Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: NrzlGuIu1soQUVh3K2pDfxR7L2lcNC/anBihXaRMrzQ=)
2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: aMHBQ0J7YfPV7IMIB5NQWhqNvs3O4UzTOKWMInuGuiI=)
3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: mRRQUvKxyPfmPaRjVyhQzZiLqbyD63uPoSK3GiULemA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13743 (0x35af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Validity
Not Before: Apr 4 14:15:43 2026 GMT
Not After : Apr 11 14:15:43 2026 GMT
Subject: CN=69d11d0f-47ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:27:1a:6a:cc:a6:9f:0e:2a:1c:c6:b9:fb:
09:f8:e4:58:56:81:94:5a:b0:b7:6a:6b:77:92:60:
d9:5f:5b:3b:2e:d4:fa:31:66:1d:9d:15:e8:78:e9:
5f:57:4f:b5:9f:19:17:3a:2b:72:9b:b4:4e:cd:52:
7c:86:0f:f9:c2:3b:31:39:8b:73:31:0b:55:c8:5b:
0b:3c:7c:64:54:3a:96:e7:90:f5:be:2c:e0:cf:c7:
49:4f:25:02:63:c0:30:e1:56:1e:3e:61:b4:30:09:
80:37:e9:15:90:55:a8:07:3b:29:6d:36:95:45:96:
1b:40:ff:c0:8f:42:0a:02:95:4e:ba:82:bf:09:a7:
91:1e:af:2b:15:df:41:01:af:12:16:13:40:d6:4d:
a2:ed:6a:85:61:7a:63:09:05:a2:19:bf:3f:bb:26:
5c:c2:c6:bf:7d:a2:77:d8:2e:40:94:a9:ce:ca:be:
73:d8:18:82:7a:a4:ad:24:9c:45:0c:82:fa:53:46:
67:44:bf:39:11:63:73:49:fb:c2:54:61:68:b2:0e:
b6:dc:ef:63:64:91:07:22:ff:1b:67:ea:b4:d0:bb:
d1:07:5e:92:7a:cc:c9:fa:79:6d:2d:81:26:84:3f:
aa:97:c5:2a:3a:e5:5c:6c:7d:20:84:2b:ba:dc:91:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5F:4B:D9:94:71:6B:CA:54:01:54:92:52:DA:B3:1F:9E:79:9A:24
X509v3 Authority Key Identifier:
keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:5c:25:0a:d2:6e:4b:fd:eb:be:e8:76:c6:51:b4:24:2e:13:
a3:4c:b7:6a:60:3b:0d:66:80:04:1a:38:3d:73:b2:f2:01:e3:
87:fe:0f:b5:e0:f5:27:00:74:b8:46:0a:b8:2a:02:65:f7:12:
6b:1a:e2:a6:09:10:f4:fe:03:4a:f6:6f:7e:50:83:64:04:53:
47:17:8a:8b:ab:fa:56:59:4c:77:7e:90:7a:3c:54:6c:2c:1a:
d2:c7:9b:2d:3e:1f:a1:af:c6:18:d7:dc:a7:54:fd:e1:2f:c6:
5a:af:d4:a6:f3:59:18:73:0d:99:66:e7:ee:a6:64:45:cd:7b:
27:92:eb:1f:92:40:11:62:84:f2:56:f3:c8:f1:6f:72:fc:88:
15:e4:ec:8c:25:5d:f1:c1:d1:7c:5a:9b:5a:68:fe:fd:76:be:
cc:e5:c6:b4:e6:ba:61:8e:f4:ef:be:61:f2:01:15:48:a2:20:
ac:90:a1:94:d7:0a:48:50:b4:22:68:1e:3d:2f:aa:6d:2b:15:
ce:17:68:95:bf:9d:bb:21:32:a6:63:89:67:58:a2:b9:b1:01:
2e:db:cf:22:77:9e:46:0b:e9:df:26:01:93:08:6a:db:4b:b2:
6c:dd:2c:3f:fb:aa:ed:81:35:85:6b:84:5a:b9:5d:82:db:a2:
13:9f:c4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:31 2026 by rpki-client