
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier: jkDa06QAZc7wp+uAc0UNF7w7jxPrKVMmlxrecvwJGGA=
Subject key identifier: E0:E4:0E:87:49:2B:2F:C8:9E:84:7F:8E:47:7E:77:E8:00:16:86:BA
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial: 085F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number: 084D
Signing time: Sat 04 Apr 2026 20:42:52 +0000
Manifest this update: Sat 04 Apr 2026 20:42:51 +0000
Manifest next update: Sat 11 Apr 2026 20:42:51 +0000
Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: JBBxBeqjZYHbNg8ryDLHFU1RQEHYcfdSMCvKd52ym40=)
2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: qWStS0v5bHsp5UQ+CjZRahzRxVHNB9C2cwcqgmnOyvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Validity
Not Before: Apr 4 20:42:51 2026 GMT
Not After : Apr 11 20:42:51 2026 GMT
Subject: CN=69d177cc-3a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:79:ea:93:57:c2:7d:f6:a0:13:cd:11:9a:
ca:39:eb:da:83:44:28:32:4f:0c:e2:92:8f:e3:7b:
7d:d8:79:f3:72:60:ab:4b:93:1a:96:34:0f:51:cd:
7a:4a:21:61:aa:a5:66:bc:ea:22:43:67:2f:06:c2:
26:45:d2:73:e9:8f:6a:54:27:b2:2a:8d:f2:f7:22:
07:ff:8f:eb:7c:36:45:2d:45:82:9b:0f:9e:66:f0:
51:7c:37:87:4b:50:c1:c8:03:55:3f:f6:c9:66:ce:
aa:7c:f2:e9:de:65:63:73:37:8e:35:d4:e6:eb:7a:
fa:03:e2:8a:42:80:22:39:d6:4a:af:7e:42:1b:a9:
53:b4:71:87:95:da:a5:9e:98:1f:d5:fa:1c:c7:88:
2c:d5:16:16:3d:db:9e:9e:09:d5:5a:85:ef:69:78:
ac:a1:28:b0:b9:43:0a:c1:b9:cb:5f:e8:63:fa:01:
73:65:17:73:45:e1:cd:a2:06:cc:78:fc:69:a3:fe:
59:e6:8f:f2:31:a2:b2:63:e2:6d:64:0a:9c:a2:42:
8a:16:43:be:89:02:ff:f0:f8:57:3b:e8:f1:90:5f:
92:45:e2:c3:48:e8:76:84:4d:64:a9:b8:4e:83:75:
b4:e9:1f:63:26:fd:0a:df:cb:73:bb:a7:57:f1:37:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:0E:87:49:2B:2F:C8:9E:84:7F:8E:47:7E:77:E8:00:16:86:BA
X509v3 Authority Key Identifier:
keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5c:25:7a:20:8e:da:bd:0f:2f:42:8a:a0:de:8c:6e:58:31:
9a:9b:1e:e3:59:9f:30:ba:30:c9:13:c4:a0:61:97:72:fd:ad:
fd:f0:b6:71:8e:36:06:fa:bb:ad:a6:30:5f:0d:7a:24:6b:a8:
bb:23:34:c2:64:49:59:4c:56:57:c1:c4:32:af:6a:44:53:25:
a1:56:71:4d:a9:a3:f8:20:12:aa:d7:ca:a7:ed:6b:98:b1:c1:
11:46:50:4e:67:10:a5:33:71:71:2b:37:4e:c2:24:5e:56:ab:
56:4e:a9:c3:5f:cf:4e:70:7a:1d:06:b9:9c:37:a3:20:e0:15:
7e:ba:fa:2c:cc:86:a6:c4:73:02:1c:3c:fc:09:4c:75:76:ab:
0e:17:99:03:b1:a2:ee:4a:36:44:94:71:cb:04:18:c6:f6:7a:
a5:0e:f3:6e:8f:3f:bc:a7:d4:f7:6f:c9:39:e0:27:71:9f:27:
e2:6a:ee:e2:0b:cc:22:a7:21:b7:75:d7:b6:46:49:c5:93:51:
05:c9:99:4a:c8:1f:d3:f5:c6:37:d6:15:68:d7:83:25:33:4c:
08:5b:7f:7a:28:f2:96:fc:fb:01:e2:ea:07:08:e5:4e:56:e2:
e5:e0:47:84:02:fb:f6:55:ad:bd:c5:d6:d6:1a:a3:29:de:e9:
7c:c4:1c:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy
QzE3NkIzNzYwHhcNMjYwNDA0MjA0MjUxWhcNMjYwNDExMjA0MjUxWjAYMRYwFAYD
VQQDEw02OWQxNzdjYy0zYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5nl56pNXwn32oBPNEZrKOevag0QoMk8M4pKP43t92HnzcmCrS5MaljQPUc16
SiFhqqVmvOoiQ2cvBsImRdJz6Y9qVCeyKo3y9yIH/4/rfDZFLUWCmw+eZvBRfDeH
S1DByANVP/bJZs6qfPLp3mVjczeONdTm63r6A+KKQoAiOdZKr35CG6lTtHGHldql
npgf1focx4gs1RYWPduengnVWoXvaXisoSiwuUMKwbnLX+hj+gFzZRdzReHNogbM
ePxpo/5Z5o/yMaKyY+JtZAqcokKKFkO+iQL/8PhXO+jxkF+SReLDSOh2hE1kqbhO
g3W06R9jJv0K38tzu6dX8TebEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODkDodJ
Ky/InoR/jkd+d+gAFoa6MB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5
MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR
UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADFwleiCO2r0PL0KKoN6Mblgxmpse41mfMLowyRPEoGGXcv2t/fC2cY42Bvq7
raYwXw16JGuouyM0wmRJWUxWV8HEMq9qRFMloVZxTamj+CASqtfKp+1rmLHBEUZQ
TmcQpTNxcSs3TsIkXlarVk6pw1/PTnB6HQa5nDejIOAVfrr6LMyGpsRzAhw8/AlM
dXarDheZA7Gi7ko2RJRxywQYxvZ6pQ7zbo8/vKfU92/JOeAncZ8n4mru4gvMIqch
t3XXtkZJxZNRBcmZSsgf0/XGN9YVaNeDJTNMCFt/eijylvz7AeLqBwjlTlbi5eBH
hAL79lWtvcXW1hqjKd7pfMQccA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:43 2026 by rpki-client