
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json)
Hash identifier: V8Q7yNEQEDf/JaUMztX31J1oCfrjjl3uDqXSbIJOHi4=
Subject key identifier: 7A:62:7D:E4:15:9A:6A:DB:48:F3:C0:8A:9C:F4:1E:5A:E6:3A:B6:15
Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Certificate serial: 04F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
Manifest number: 04EE
Signing time: Sat 04 Apr 2026 23:32:09 +0000
Manifest this update: Sat 04 Apr 2026 23:32:09 +0000
Manifest next update: Sat 11 Apr 2026 23:32:09 +0000
Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: mUCZE4SjgH7qPD5tsgeC2ugpvhlEEuhXPDmnvlnkl4U=)
2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: HfIHCgE3FqwzFZeum4TKPXX/IhXg0j6Cd01v1i5w0B0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Validity
Not Before: Apr 4 23:32:09 2026 GMT
Not After : Apr 11 23:32:09 2026 GMT
Subject: CN=69d19f79-92c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:ad:a6:65:cd:d6:1d:9d:ae:1b:61:19:c0:
eb:55:20:47:a8:32:9e:c7:9d:e4:95:14:df:5c:41:
60:95:2c:03:71:c9:7a:af:7a:30:e5:0b:80:7e:1e:
43:35:83:08:db:9d:a1:bc:70:8a:9d:30:d4:48:76:
54:04:af:38:4d:6b:39:b4:db:be:c0:49:94:1b:64:
82:47:af:c4:3e:fe:1c:a0:ca:53:a5:b4:13:d3:57:
6b:b1:e7:61:83:bd:c2:d1:3d:be:a8:7a:76:dd:76:
62:88:da:04:1e:18:1b:c6:f6:a8:00:27:5f:46:f8:
bd:3a:1f:ae:75:0f:61:e4:17:d2:65:3f:fe:05:0c:
23:3a:19:59:b7:48:a8:f7:8e:e5:3e:01:af:fc:89:
8d:3c:15:e5:56:9b:7e:b9:f6:d2:5d:da:75:a7:61:
a0:ae:27:fb:54:e9:57:2a:3c:f0:72:33:ad:fc:46:
76:bf:aa:ef:0e:94:db:34:ce:8d:e0:8e:5f:12:4b:
45:f0:eb:57:4e:f0:1a:2c:2c:d0:15:e7:7b:35:4d:
42:f7:aa:cf:df:28:50:73:a3:d2:b4:a8:9c:3c:2e:
5d:40:f8:72:00:d3:64:6a:08:8b:64:1c:e7:d6:5c:
2d:16:f4:d1:ec:0a:d2:63:28:3b:44:1e:55:07:6e:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:7D:E4:15:9A:6A:DB:48:F3:C0:8A:9C:F4:1E:5A:E6:3A:B6:15
X509v3 Authority Key Identifier:
keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:50:e3:21:b0:c2:68:35:05:e7:34:19:3f:72:a9:51:17:7d:
14:77:38:d5:e9:c2:01:fa:c4:0e:00:a3:11:ac:9e:f4:15:29:
78:fd:25:2d:c8:16:6a:f1:ad:30:2d:4c:e8:fc:85:61:75:66:
28:4b:b8:eb:e2:f1:b4:a1:21:4a:9e:6e:e8:50:2f:6a:29:ce:
42:0c:69:9e:bc:94:5f:cd:17:2a:8e:d9:b1:e0:7c:eb:68:43:
7b:59:67:cb:eb:04:0a:39:86:35:99:ed:63:06:cc:76:ef:8f:
dc:ee:f8:8b:10:61:17:b2:81:f0:1d:c9:35:9c:d8:be:34:af:
fc:cd:64:38:0e:dc:ca:36:41:cd:3f:5e:78:3b:42:6a:6d:20:
6e:78:0d:6b:1d:4a:65:89:76:dc:31:9b:50:96:8c:bd:5b:7f:
9f:e2:53:67:66:c3:b8:5f:fe:29:a0:2c:04:e5:1d:aa:d5:2a:
af:12:ff:f8:93:f5:78:28:76:7c:47:39:6a:06:f9:4c:46:b4:
f4:89:e3:ac:13:0e:b0:b1:37:14:ce:f9:f8:b1:6f:1e:3c:d4:
5e:bf:41:09:17:48:a1:2e:47:65:03:7a:ad:35:a2:07:e7:1b:
63:5c:07:3b:a4:b8:c0:57:b6:93:a6:40:6d:08:71:eb:41:fb:
14:14:6f:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1
RjUwNTlGMTcwHhcNMjYwNDA0MjMzMjA5WhcNMjYwNDExMjMzMjA5WjAYMRYwFAYD
VQQDEw02OWQxOWY3OS05MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7ytpmXN1h2drhthGcDrVSBHqDKex53klRTfXEFglSwDccl6r3ow5QuAfh5D
NYMI252hvHCKnTDUSHZUBK84TWs5tNu+wEmUG2SCR6/EPv4coMpTpbQT01drsedh
g73C0T2+qHp23XZiiNoEHhgbxvaoACdfRvi9Oh+udQ9h5BfSZT/+BQwjOhlZt0io
947lPgGv/ImNPBXlVpt+ufbSXdp1p2Ggrif7VOlXKjzwcjOt/EZ2v6rvDpTbNM6N
4I5fEktF8OtXTvAaLCzQFed7NU1C96rP3yhQc6PStKicPC5dQPhyANNkagiLZBzn
1lwtFvTR7ArSYyg7RB5VB260cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpifeQV
mmrbSPPAipz0HlrmOrYVMB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3
NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz
b21iWEtnOFNfODFmVUZueGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMFDjIbDCaDUF5zQZP3KpURd9FHc41enCAfrEDgCjEaye9BUpeP0lLcgWavGt
MC1M6PyFYXVmKEu46+LxtKEhSp5u6FAvainOQgxpnryUX80XKo7ZseB862hDe1ln
y+sECjmGNZntYwbMdu+P3O74ixBhF7KB8B3JNZzYvjSv/M1kOA7cyjZBzT9eeDtC
am0gbngNax1KZYl23DGbUJaMvVt/n+JTZ2bDuF/+KaAsBOUdqtUqrxL/+JP1eCh2
fEc5agb5TEa09InjrBMOsLE3FM75+LFvHjzUXr9BCRdIoS5HZQN6rTWiB+cbY1wH
O6S4wFe2k6ZAbQhx60H7FBRv4A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:40:57 2026 by rpki-client