
$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json)
Hash identifier: dNCTbXoLdUhNObZ57pWzrudckBROAbgCfWRMJNL2r+I=
Subject key identifier: 42:37:09:64:0E:88:DA:26:25:32:6D:AF:43:F0:93:F7:E9:98:D1:EF
Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C
Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C
Certificate serial: 06E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
Manifest number: 06D1
Signing time: Sun 26 Apr 2026 22:15:52 +0000
Manifest this update: Sun 26 Apr 2026 22:15:51 +0000
Manifest next update: Sun 03 May 2026 22:15:51 +0000
Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: PUtm7iXBQd1p29TXhrco3tsIKiww6HkdUCJ1RxCRxPs=)
2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: nVga8cvt4d5geXWchRCOiaCcwBTl7uOC4MUHjJfCR9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl
rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C
Validity
Not Before: Apr 26 22:15:51 2026 GMT
Not After : May 3 22:15:51 2026 GMT
Subject: CN=69ee8e97-5e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:18:93:2d:13:95:5c:eb:f0:82:98:6b:5d:
2f:ec:d6:3e:bd:ff:b9:ad:d3:a9:01:d0:03:c5:14:
8d:5e:fb:40:36:8d:04:d3:a0:16:16:20:74:94:73:
0e:8f:e3:55:40:2b:10:6a:9c:56:27:f1:01:ea:ce:
5a:9f:97:ea:28:59:63:25:e4:dd:70:99:6d:b3:46:
a7:2a:24:25:62:55:8f:a6:12:9f:e2:91:26:e3:06:
39:97:59:a5:1d:ee:60:75:27:d0:6c:d6:d7:3d:d0:
29:af:0a:b3:5f:19:0f:1c:3d:c6:5c:eb:b0:f6:80:
7e:75:90:6b:31:17:02:0f:cd:48:c1:7b:5d:6e:a4:
eb:61:e7:c9:f5:89:9f:42:cb:21:c2:9b:ea:29:9d:
0a:25:3a:0e:64:e8:6e:18:06:6f:63:cb:0c:14:b3:
12:86:46:21:66:c7:2f:05:6f:1e:07:e9:5e:3a:6e:
ff:1a:4d:61:a6:fd:96:dd:8e:35:a6:be:b0:50:5d:
d7:c6:0b:cc:d7:ec:84:57:e4:6e:c5:83:b7:63:8c:
ce:06:a2:3d:78:ee:77:04:24:8e:7c:c6:39:f6:71:
ec:65:69:25:96:8a:a3:18:eb:d8:0c:95:9a:68:a9:
e3:13:f6:e8:47:f5:92:60:12:dd:e4:ad:df:08:4c:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:09:64:0E:88:DA:26:25:32:6D:AF:43:F0:93:F7:E9:98:D1:EF
X509v3 Authority Key Identifier:
keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:0b:52:68:8f:ca:8c:5e:db:ea:d0:0c:b2:34:98:6e:1f:91:
00:ad:2b:f2:9a:00:56:52:75:f2:75:36:29:a9:c5:32:98:cf:
f7:9b:96:56:79:4d:8d:e7:b1:95:c1:b5:1d:bf:7a:a4:ea:6e:
36:aa:66:dd:fd:d8:cf:06:d6:33:90:18:db:cd:b9:d4:50:79:
e9:0d:ff:32:65:94:4d:ba:12:c6:14:63:8b:10:4e:d9:2a:4d:
7e:f3:e6:72:11:63:97:71:f0:2f:6c:42:2c:62:19:1a:dd:69:
2b:cd:8a:da:e5:1e:f8:d0:f8:5d:29:4b:f3:f5:ed:33:b1:08:
f3:3d:e7:d6:1c:91:47:2f:15:76:d3:29:70:f9:7d:95:bd:82:
9a:4c:06:92:30:e1:68:68:02:18:32:08:fb:a1:e6:78:02:5f:
1f:37:55:e3:ab:69:27:01:be:d6:59:f4:a8:74:4b:b2:63:96:
1a:0e:70:73:87:ea:07:fd:4e:d9:25:06:fd:fe:b3:28:dd:69:
e6:3b:9e:8e:1b:ab:f9:fd:44:dc:5c:8b:7b:c3:e6:6e:7e:70:
93:44:f2:c7:e1:40:74:b1:4c:9f:d4:eb:5d:df:9a:61:d6:2a:
7b:64:18:58:5c:21:f7:98:66:4f:17:51:8d:dc:21:96:51:46:
cf:af:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:28:48 2026 by rpki-client