
$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json)
Hash identifier: Asgpq7CIgUjzHiDSlbb6ificUqKHvntQpqAqDOeMOac=
Subject key identifier: 9D:D6:74:1F:14:1E:94:10:91:E2:1B:2F:5A:AF:77:38:92:D4:42:2A
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial: 03E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
Manifest number: 03B6
Signing time: Sun 05 Apr 2026 00:27:38 +0000
Manifest this update: Sun 05 Apr 2026 00:27:37 +0000
Manifest next update: Sun 12 Apr 2026 00:27:37 +0000
Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: JisJirLUPQ7wRn3zRd9/jwp3nx5jXmT4o+mPHU4iExY=)
2: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: vSHf1X3O2nMKh82RanHECAwvzlkFPBFjzTmLD8chpCY=)
3: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: c2lo54QcjHvK6TZ8I450zd6helgARdymi5j3sxVLHME=)
4: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: yi7NYs8PxhwuWWuOtg4OuRxpExkIea04i2z4LtVyM0w=)
5: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: TSL+MTPK8EgRMcMjr6qrtFpszOvhkzRM0QdAHqJaU40=)
6: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: HgcggV8BxU3DsnfnAjE7D8jFk5D0BasQaQRqwA0EAKs=)
7: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 9isDfhzAiD/lHOxq4r19J9IhtSqgH/VDgO9RTET6Oqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Validity
Not Before: Apr 5 00:27:37 2026 GMT
Not After : Apr 12 00:27:37 2026 GMT
Subject: CN=69d1ac7a-9440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:f4:e0:88:da:1e:64:09:db:c6:e7:a5:fd:
30:56:5a:11:04:6b:cc:9e:8c:08:6f:18:9e:40:0b:
22:a1:59:7e:5e:a5:17:ee:87:8d:b1:ca:07:b7:35:
59:60:8f:95:d9:57:09:57:46:c3:b4:cf:a1:22:1d:
12:7d:14:54:07:3c:1f:a8:eb:ad:b0:75:f5:50:8d:
56:4a:00:03:0f:61:96:6f:aa:9b:54:90:d2:1f:9a:
61:6e:9f:f4:57:48:be:63:55:e1:9a:f5:2b:7b:4b:
8b:44:8f:54:8a:6a:fe:7d:d8:96:bd:d9:72:e3:bd:
62:4c:f8:7d:c2:7a:bd:b0:16:9a:ea:04:2d:ae:27:
29:3c:87:73:d6:b7:ad:5d:40:e8:c1:d9:d7:f6:2d:
7b:51:a7:06:06:08:56:a0:d8:ee:67:88:a9:fa:c4:
f5:23:6b:b1:58:1b:34:0c:5e:ec:93:11:8e:8d:2a:
01:bc:65:a6:6d:9e:19:8a:f3:1a:cd:8d:cb:cf:19:
f5:35:4a:06:eb:b1:3d:05:b6:57:ab:5a:5b:20:5c:
0c:a0:eb:de:2f:b7:34:6a:5b:8c:c5:37:cd:20:6c:
95:a8:94:be:80:1b:68:2b:24:30:7b:e0:15:7f:0b:
13:d9:c5:ab:64:1b:45:23:30:ec:71:0b:87:f4:96:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D6:74:1F:14:1E:94:10:91:E2:1B:2F:5A:AF:77:38:92:D4:42:2A
X509v3 Authority Key Identifier:
keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:fa:0c:34:bd:94:5b:ce:16:42:14:f4:91:e0:98:53:b7:ac:
cb:76:7f:d7:c5:3a:f0:62:52:2a:40:4e:9a:5b:1c:a9:09:ff:
70:9d:c7:6b:6b:85:d9:9e:e1:c4:83:53:65:1a:f8:09:73:73:
16:c8:e1:f2:82:9b:d2:8c:1b:3f:3b:66:55:f6:59:f9:30:f5:
aa:ca:79:ce:4a:cf:55:f8:3c:9d:14:3a:e9:42:7b:43:9d:c7:
ab:d8:15:56:e9:44:90:1b:64:dd:c5:6d:ed:9e:c4:77:99:92:
52:60:db:b6:3e:76:3f:53:ee:98:a2:bc:39:97:d2:dd:5a:92:
78:bb:c9:75:9f:65:15:3f:79:84:eb:0f:46:b4:cf:37:09:2b:
77:e1:5c:89:91:10:fd:c6:cc:4c:dd:87:70:94:22:74:0d:ef:
70:bc:8e:71:d6:25:e5:ef:67:e7:69:96:3b:01:1c:15:7a:46:
cc:80:34:63:79:6f:2e:9a:eb:dc:f0:da:26:10:be:f2:a0:25:
80:11:2f:b5:ef:d9:21:71:62:e6:ea:89:d4:f1:ed:0a:2b:01:
ca:9a:04:42:a7:62:df:1f:12:70:b0:c1:91:a6:28:81:39:20:
c6:2e:7a:d8:c0:f0:14:9c:5e:9a:e3:00:e1:b4:14:e3:d7:ec:
af:f5:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:03 2026 by rpki-client