
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json)
Hash identifier: xxAtww/X6DXMcNe4/BDF6UGQUcbB8AM6gsjSY9HngAA=
Subject key identifier: A7:65:6D:67:CC:8D:92:86:F7:1B:5B:5E:4C:E3:FA:65:1C:82:DB:7F
Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31
Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
Certificate serial: 1296
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
Manifest number: 1273
Signing time: Sat 04 Apr 2026 16:59:50 +0000
Manifest this update: Sat 04 Apr 2026 16:59:49 +0000
Manifest next update: Sat 11 Apr 2026 16:59:49 +0000
Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: gCFgmEFssHrordycfrp9TqsVwYTEmmR7vyGZ118krmU=)
2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: xwp+vsBFySucNW4Yhnh8sJi71zn8ZQofjYnVbPZEHro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl
rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4758 (0x1296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
Validity
Not Before: Apr 4 16:59:49 2026 GMT
Not After : Apr 11 16:59:49 2026 GMT
Subject: CN=69d14386-8e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:d0:92:38:02:0d:f2:77:0f:cb:1b:e8:d8:
4e:f3:34:f0:a8:10:e6:19:cf:5a:41:a5:12:fc:7d:
11:2b:5a:40:e1:28:5e:5e:a8:ad:1a:cd:51:f6:94:
cf:c7:3e:6e:45:cd:e7:85:1a:66:7d:be:17:cb:17:
e6:ca:32:b3:c7:cb:7e:ec:2d:01:94:97:66:78:f2:
83:cb:72:6c:2f:8c:4b:d0:98:28:c3:f2:65:3b:22:
27:e2:a3:20:bb:0a:25:18:ab:2a:58:8a:9c:8d:98:
1f:12:1c:eb:8f:9f:3b:2e:99:26:b9:45:7d:65:13:
30:25:95:3c:68:cb:ff:f4:58:f8:6c:54:e8:ef:be:
b4:bc:88:f1:ea:73:0e:d0:bc:70:df:c4:7f:c4:6d:
c3:04:59:a2:65:ab:bf:09:9b:6a:f3:99:f9:d6:7d:
04:24:7d:2a:3a:e4:1f:8a:6e:ce:69:e7:ae:2f:92:
06:a4:ae:db:e6:d3:3d:d4:3b:74:88:d7:6b:aa:ee:
7b:39:3b:da:48:7d:48:63:9f:e2:43:16:8c:05:fb:
60:dd:70:d5:ba:39:fc:73:e4:e3:17:88:ed:5a:b5:
14:8c:b8:04:93:06:3f:ac:b2:ab:d1:3d:b0:09:d0:
a5:a3:bd:5e:ea:0c:11:13:62:26:44:e1:dd:80:65:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:6D:67:CC:8D:92:86:F7:1B:5B:5E:4C:E3:FA:65:1C:82:DB:7F
X509v3 Authority Key Identifier:
keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:c6:40:93:35:ec:64:13:50:2f:d1:83:92:a0:76:88:6c:88:
80:90:c7:06:74:ad:4f:8e:54:f9:f6:89:b3:81:43:93:d0:7a:
e7:ca:bb:2f:55:aa:cd:b7:7a:73:12:c6:a4:6f:a2:84:69:5d:
e4:f4:15:f8:5c:76:08:ab:95:70:64:77:98:24:c2:71:8e:e1:
5c:72:86:91:3f:3a:94:62:e0:ee:7a:98:61:07:34:87:50:11:
f9:a3:25:2c:bd:4b:16:f9:61:0d:1d:39:ec:8c:40:ce:66:f6:
98:90:30:ab:50:ea:05:d3:d9:93:0d:e8:f7:9a:55:4b:c5:95:
1b:e9:34:67:ca:77:ca:e2:53:c0:5e:e8:db:c9:6d:18:2f:8e:
92:b4:a0:83:29:94:a9:29:ca:97:35:4c:74:0e:21:a0:f1:07:
57:9d:88:ac:63:0a:66:f4:b9:89:b7:b5:e3:9f:96:ce:4f:6a:
11:c4:50:c6:4c:da:b6:78:00:1c:c2:fc:35:09:57:a5:02:d3:
a6:c4:d0:78:33:e1:fa:2d:f2:47:70:c2:cb:20:ca:58:7a:69:
07:be:09:ff:06:a7:2d:67:57:bc:d5:32:6a:1e:20:99:4f:a7:
eb:87:f6:ea:03:74:f9:7b:5c:e8:80:1a:db:4a:56:77:de:e2:
7c:4b:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:53 2026 by rpki-client