
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier: v41/pFPonZkOiMh3o1kGV/xZ3ds25IsLxRdifs8jtNY=
Subject key identifier: CF:32:1E:24:09:8F:17:78:AF:5A:CC:8E:EF:47:F3:94:02:E0:84:9E
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 0A0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number: 09DB
Signing time: Sat 18 Apr 2026 19:50:17 +0000
Manifest this update: Sat 18 Apr 2026 19:50:17 +0000
Manifest next update: Sat 25 Apr 2026 19:50:17 +0000
Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: BEJb0kKhL8h42614DuZW4nOdes8cGRTgg2jQcwYOQiE=)
2: 570B25FA305111F0BED81784C4F9AE02.roa (hash: UNamoSLqPfgLYpd2PGo2wGNk5GFxnnncmR2Esq//UuA=)
3: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: 9cZAA819ZNYxdN7xk7f1AZKeDye0bv4EBp7wGGivMIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2573 (0xa0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Apr 18 19:50:17 2026 GMT
Not After : Apr 25 19:50:17 2026 GMT
Subject: CN=69e3e079-90d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:37:66:38:63:d2:af:c1:b9:90:a6:ec:f9:
f8:8c:1d:79:5f:2e:ba:e0:70:0c:87:34:30:26:45:
75:4e:58:6e:62:6f:9a:88:ce:83:2a:70:0d:4a:ae:
bd:c2:ee:b0:e6:8e:be:1e:62:32:bb:cc:14:c1:a1:
36:51:16:aa:cd:3d:e8:92:8f:1b:a9:7a:5c:82:20:
ab:e4:d6:70:88:8d:c9:0b:08:a4:24:94:c9:73:4c:
43:37:89:57:be:3b:0f:8b:69:0c:38:9f:41:81:31:
06:22:89:14:02:49:62:5c:64:67:3b:10:04:87:10:
94:7e:2b:1a:a8:1d:8b:4e:07:ea:c0:3e:54:ee:c0:
82:74:1f:03:d8:3a:93:79:4e:4f:cf:26:34:d9:92:
73:58:96:8b:14:16:a9:f1:e4:e6:fc:15:55:dd:73:
32:1d:15:8a:59:85:7b:9e:2f:98:98:a6:48:0a:10:
6b:b9:f0:13:a0:ab:72:40:bd:02:76:f8:37:f9:a3:
8d:4c:65:34:95:31:b1:7f:4e:d4:8e:7f:7d:5c:84:
28:64:00:87:ac:63:01:c3:78:83:cd:17:19:0c:1d:
f2:1c:98:6c:4b:dd:45:91:40:a6:55:bb:a5:d3:c9:
c7:d4:8a:de:1a:3e:d5:7a:4f:5c:59:0d:b8:42:b1:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:1E:24:09:8F:17:78:AF:5A:CC:8E:EF:47:F3:94:02:E0:84:9E
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0a:2b:1f:ee:60:84:1a:bf:a5:ea:ca:74:fe:47:18:4c:4d:
28:31:08:71:7e:39:d6:3c:eb:05:e6:41:3a:49:4a:be:c7:7b:
50:ca:f8:30:1c:2c:1b:0e:1b:9f:c0:8c:1b:c7:bd:69:9f:1b:
6e:28:06:5b:95:b2:fe:29:47:63:9f:c4:8c:c2:bc:c3:41:fb:
1f:ed:3c:6a:13:ba:85:f4:23:e6:31:ce:bd:d7:36:10:ec:8b:
b7:ba:b2:b8:b0:7d:68:1c:a1:92:a6:5b:78:42:31:f3:bc:fb:
99:cf:05:bd:07:a0:8c:6c:ae:1e:0f:c7:9c:45:3e:6e:22:7c:
22:c6:96:3f:a4:06:d0:92:d2:fb:d2:d9:7d:31:1c:b5:78:ab:
ad:78:c4:8e:11:ea:2c:e8:8b:bc:a2:93:22:89:eb:d0:2c:d6:
3a:b9:00:c5:13:ce:8d:7b:63:bd:fd:1f:0f:0f:89:65:f2:3c:
d6:2a:2e:24:91:b7:22:03:aa:43:ce:a6:1f:24:a4:e2:81:da:
06:0e:00:a0:29:d6:3b:5c:3b:43:c1:7b:e8:3f:b6:3d:ce:32:
43:c9:92:ac:66:bc:27:39:65:f4:fd:5d:85:e9:6b:22:a9:2c:
f2:f8:4f:64:67:4e:56:43:d8:29:88:f4:4f:89:53:3d:e1:6a:
5a:3a:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:24 2026 by rpki-client