
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier: Vxommx2aM9m5KRTjl+7cP2NdXoIvIN1L1VIk9Str7yA=
Subject key identifier: 72:0B:72:7D:6F:9B:69:B8:5F:CA:A9:57:A4:FB:C6:F5:BA:38:0B:3F
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial: 0795
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number: 0782
Signing time: Sat 04 Apr 2026 21:24:47 +0000
Manifest this update: Sat 04 Apr 2026 21:24:47 +0000
Manifest next update: Sat 11 Apr 2026 21:24:47 +0000
Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: MZr6SSXVQktgd51gsoNyDv25sZZAFeMu29zwzu5jaAg=)
2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Validity
Not Before: Apr 4 21:24:47 2026 GMT
Not After : Apr 11 21:24:47 2026 GMT
Subject: CN=69d1819f-d531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:f5:51:af:4c:6b:ae:46:35:29:05:d2:5b:
e3:fa:68:7d:78:03:f9:e8:d3:a6:2c:30:33:2f:6e:
7b:ab:b6:e4:76:93:63:20:52:8c:5f:6e:ed:9f:2e:
39:95:73:d4:2a:8c:4f:54:09:4f:b9:d6:c1:b9:2d:
fb:8c:17:b2:86:d9:7c:47:c4:92:71:24:88:b9:11:
41:0d:84:08:08:93:3a:33:13:d2:56:36:7d:82:fb:
ac:b3:b9:d9:d7:2c:67:08:8d:69:ea:54:fd:65:12:
bd:52:16:c1:ee:d8:9b:ee:36:25:97:7c:51:2c:c7:
8e:ba:63:c6:73:f5:e9:b7:d4:5c:b8:fe:c4:52:21:
89:30:f7:04:f2:7a:cb:28:1d:65:72:58:c8:d7:ae:
6c:23:7c:38:9f:f9:fb:d5:7c:cf:c9:b4:2a:a8:17:
ac:2e:9d:b0:c5:1b:99:5e:d8:40:55:c5:cf:98:42:
74:74:33:7f:70:fb:80:22:65:0e:38:34:e8:ba:5f:
f7:c5:2a:56:01:b7:b1:18:b5:b2:f1:9d:0b:c5:80:
40:28:59:87:a0:26:7b:72:04:c2:a7:fd:62:2c:6e:
09:2b:46:85:97:81:e9:1c:2d:fd:82:ae:ef:33:3a:
56:cb:c0:3b:2e:4f:7e:de:1c:b9:1b:b1:a0:57:7f:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:72:7D:6F:9B:69:B8:5F:CA:A9:57:A4:FB:C6:F5:BA:38:0B:3F
X509v3 Authority Key Identifier:
keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fb:05:87:9b:70:82:6b:9e:c1:15:30:0a:28:5b:f8:c1:bd:
9e:72:71:8a:10:26:bb:be:76:ca:1f:bb:c1:c2:e3:10:9e:88:
4c:a6:e8:d9:cc:09:ad:e2:27:8d:86:05:84:58:fa:76:82:cf:
98:d7:96:9e:bd:51:78:be:b9:62:39:a8:ba:1d:75:a7:8f:f3:
a3:11:17:69:05:f9:f5:ac:24:d8:82:84:a3:b9:f6:ec:99:dd:
71:52:16:6c:6e:92:e0:81:d3:17:09:c8:56:09:0f:34:a0:da:
1e:6b:f6:e6:25:94:8f:a4:c7:f1:ec:18:90:1a:31:34:c7:d3:
74:92:ec:3c:31:47:be:62:39:1d:a7:4e:d7:b4:76:bb:16:ac:
7f:81:4e:46:11:6d:cb:92:f7:e3:8e:70:2b:00:87:de:d9:b6:
c2:af:90:fc:c3:24:a7:4b:45:4a:b5:33:67:2e:6d:34:1c:64:
36:67:11:39:f2:01:b7:51:5c:7a:48:fb:ed:3c:c1:c6:e9:95:
1d:61:c7:a2:d2:e3:f8:ea:95:89:61:64:77:2b:23:94:32:2d:
b3:67:2a:e4:50:2c:d5:76:7c:9c:f3:08:98:2f:ff:93:87:29:
c2:ca:d0:df:ba:fe:ed:70:87:a9:c2:4b:53:08:da:1a:0b:a2:
be:80:cb:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD
NzQ0ODk1QzIwHhcNMjYwNDA0MjEyNDQ3WhcNMjYwNDExMjEyNDQ3WjAYMRYwFAYD
VQQDEw02OWQxODE5Zi1kNTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsF71Ua9Ma65GNSkF0lvj+mh9eAP56NOmLDAzL257q7bkdpNjIFKMX27tny45
lXPUKoxPVAlPudbBuS37jBeyhtl8R8SScSSIuRFBDYQICJM6MxPSVjZ9gvuss7nZ
1yxnCI1p6lT9ZRK9UhbB7tib7jYll3xRLMeOumPGc/Xpt9RcuP7EUiGJMPcE8nrL
KB1lcljI165sI3w4n/n71XzPybQqqBesLp2wxRuZXthAVcXPmEJ0dDN/cPuAImUO
ODToul/3xSpWAbexGLWy8Z0LxYBAKFmHoCZ7cgTCp/1iLG4JK0aFl4HpHC39gq7v
MzpWy8A7Lk9+3hy5G7GgV3818QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHILcn1v
m2m4X8qpV6T7xvW6OAs/MB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2
MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf
QzZvR1dwTDJVX1hIUklsY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH/sFh5twgmuewRUwCihb+MG9nnJxihAmu752yh+7wcLjEJ6ITKbo2cwJreIn
jYYFhFj6doLPmNeWnr1ReL65Yjmouh11p4/zoxEXaQX59awk2IKEo7n27JndcVIW
bG6S4IHTFwnIVgkPNKDaHmv25iWUj6TH8ewYkBoxNMfTdJLsPDFHvmI5HadO17R2
uxasf4FORhFty5L3445wKwCH3tm2wq+Q/MMkp0tFSrUzZy5tNBxkNmcROfIBt1Fc
ekj77TzBxumVHWHHotLj+OqViWFkdysjlDIts2cq5FAs1XZ8nPMImC//k4cpwsrQ
37r+7XCHqcJLUwjaGguivoDL5A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:34 2026 by rpki-client