
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier: xi0Eluqz0xA8d0SlSPF0t4yNalAN1CNPyv8ocCdknuw=
Subject key identifier: 5E:68:95:9C:5B:A2:EC:46:1C:CF:A6:D9:26:7D:A0:80:15:6A:31:7B
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 0A5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number: 0A29
Signing time: Thu 10 Sep 2026 19:45:42 +0000
Manifest this update: Thu 10 Sep 2026 19:45:41 +0000
Manifest next update: Thu 17 Sep 2026 19:45:41 +0000
Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: puCABeLMtB99ZhGCYhJXBec39okyU+aoIZxLJrJtDKo=)
2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: TwfOtqELROfwbdGW94mJ46Jldk9YfuE63pysMVGHVgU=)
3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: qA6m0DYMiRUmJ031ZSlgBYMv/3TYzZQxA8v1f3tCGXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653 (0xa5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Sep 10 19:45:41 2026 GMT
Not After : Sep 17 19:45:41 2026 GMT
Subject: CN=6aa308e6-65dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:3c:ce:33:d0:4f:a6:81:38:1a:e0:92:58:
b5:2d:29:60:0c:11:64:5c:53:2a:0a:b6:e8:4f:c4:
e8:d3:83:33:88:85:b4:02:4b:80:6c:ef:a0:55:66:
79:4f:e0:dc:95:0c:d7:28:e4:4c:0f:8a:37:bb:aa:
7d:57:e5:b1:16:1b:d8:7f:57:7f:10:4c:3f:13:2d:
9d:62:64:ef:73:65:a3:54:14:0e:cc:b2:0c:e5:34:
27:71:30:40:94:e4:de:0e:5a:89:dc:a4:9e:4a:fe:
62:e8:99:87:24:a7:b1:1b:7e:ad:19:47:ba:30:8c:
ca:d7:1d:06:75:8e:a7:3f:e8:3f:5a:82:a0:4c:f1:
9d:82:70:02:07:6b:ae:f5:31:60:f0:cc:97:2e:0c:
08:8a:bf:e3:74:27:6e:83:a5:4b:4c:f0:5f:34:82:
a7:97:26:0e:48:4e:37:b1:66:29:c6:76:fa:c1:57:
67:91:d5:fb:d2:98:d6:2e:c2:a0:2c:4c:a9:ec:17:
a8:fe:be:5b:66:d6:41:e7:42:2f:40:5f:65:72:05:
52:53:6f:68:ec:e4:55:e7:05:ae:f0:84:29:8e:15:
8e:a9:b8:d4:38:72:b5:cc:33:42:ff:eb:79:20:17:
24:af:b0:d4:5e:76:37:5a:96:20:fc:a5:67:6b:6b:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:95:9C:5B:A2:EC:46:1C:CF:A6:D9:26:7D:A0:80:15:6A:31:7B
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:70:f6:67:3c:66:27:ab:dd:31:2c:34:10:3c:52:60:bd:67:
06:cb:7b:fb:5b:d9:d1:a7:0b:9d:25:ba:15:c8:a3:44:f9:c2:
d6:bb:f5:8d:49:4a:ec:72:fa:dd:d8:e0:ac:bd:86:e6:af:9c:
79:a9:5c:c9:0c:90:b8:2a:c0:c2:ae:76:89:0f:9d:4e:bd:7f:
06:f3:eb:37:1f:00:9e:18:77:8a:53:8d:6c:2d:64:e7:fb:8b:
56:38:7c:8b:56:4b:77:fc:f9:92:5e:8b:55:34:fd:2f:b8:f1:
a2:fb:ce:ee:04:44:e8:b9:79:a3:84:f9:dc:27:7c:74:11:e9:
51:c7:29:f9:b0:0a:e8:02:a1:0e:31:e4:13:11:07:54:d0:96:
a2:75:7d:90:3f:72:19:75:ba:25:bb:bd:1b:0c:94:4c:61:9f:
89:70:90:67:af:5a:d8:b6:00:f0:91:81:e8:ba:78:49:be:7c:
b1:bc:58:dd:c7:e3:89:e2:00:08:e4:55:7e:08:65:28:71:d0:
dd:a9:a8:2c:68:b2:b0:00:ab:75:92:c2:6d:ee:38:2d:8c:d2:
64:94:88:4b:1b:ed:58:75:7d:0a:a6:dd:5b:ff:ae:28:9a:f1:
77:4a:73:b6:b2:a2:fa:da:23:24:a6:81:b1:6f:7b:57:93:84:
53:67:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:00:11 2026 by rpki-client