
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
File: LZqjsNhdis2WNSgFXHSHpmkEyHk.mft (raw, json)
Hash identifier: PP/07VsyDaexUfrfEQovgpngW0zvico13fSyam7+DN0=
Subject key identifier: A6:06:54:38:2F:5A:10:25:E6:63:83:97:7E:5B:49:01:51:64:D9:E6
Authority key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
Certificate issuer: /CN=A91CD883/serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
Manifest number: 59
Signing time: Sun 11 Oct 2026 08:45:35 +0000
Manifest this update: Sun 11 Oct 2026 08:45:35 +0000
Manifest next update: Sun 18 Oct 2026 08:45:35 +0000
Files and hashes: 1: LZqjsNhdis2WNSgFXHSHpmkEyHk.crl (hash: pbMAZFFedjTAS0Ybmy9ZQ39tgAMdEednMdKXl/XfnhE=)
2: FFF0486A3D7C11F1AE97A9BABA833773.roa (hash: 8PBVOn5rHRwK4EpJUtLvYRy9A1Nxp+wwyWqks95ix4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Validity
Not Before: Oct 11 08:45:35 2026 GMT
Not After : Oct 18 08:45:35 2026 GMT
Subject: CN=6acb4caf-ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:62:f8:cc:c4:ce:1c:79:06:c6:32:90:e1:
3c:49:6e:11:cd:19:98:94:c1:3a:8e:1d:c0:b9:85:
eb:80:aa:01:16:9a:9e:3b:f8:9d:39:63:17:94:74:
4a:05:fa:c5:8f:45:f7:e8:e7:08:71:48:cb:5e:b8:
3f:03:f3:75:40:60:ba:f1:f8:c6:4d:0e:68:f7:25:
21:52:9f:b1:5b:cf:d6:b4:de:b0:15:45:27:2f:fd:
36:03:0f:e9:16:3a:1b:d1:9f:a2:78:85:43:64:bf:
65:41:90:e5:e6:78:5e:3f:cf:45:75:2c:65:2f:cd:
f8:36:fd:8a:bf:9d:a7:43:ac:06:ba:eb:88:90:3c:
cf:16:0f:b4:20:9a:1b:4c:54:4b:f5:a3:ec:5d:89:
31:e7:8a:2f:91:8d:90:a4:ce:40:f4:5a:ad:f3:98:
6e:d7:32:a1:93:ee:71:53:ca:95:3d:64:e1:74:77:
da:8c:3a:bd:31:d2:67:57:5d:46:41:62:e9:2d:55:
5e:1c:02:1d:a1:a5:e3:31:35:92:00:6f:c0:a1:38:
3b:be:e3:4a:bd:fa:9b:3d:b6:44:4b:4d:36:de:6f:
7e:9b:1d:a1:3c:3f:7d:16:0b:af:03:50:1c:87:7d:
bc:85:ca:6e:e2:30:1e:31:1d:f5:a0:ec:b1:b5:1b:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:06:54:38:2F:5A:10:25:E6:63:83:97:7E:5B:49:01:51:64:D9:E6
X509v3 Authority Key Identifier:
keyid:2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f1:01:71:09:13:db:3f:65:1c:44:63:77:2a:c2:94:62:6b:
a5:0b:75:6a:67:b3:6d:82:a8:a7:a7:e8:b5:86:a5:be:47:6e:
8c:81:7b:90:b9:63:1d:86:54:97:65:c4:54:9d:68:79:57:7e:
ef:88:03:12:74:04:98:c7:e2:72:d8:cd:23:de:76:f6:70:fe:
19:a5:da:5f:94:41:55:1a:4c:66:5b:6e:df:9d:f8:eb:e0:be:
36:85:3d:b9:3c:7e:dc:68:ba:c0:fd:e5:ad:51:1b:61:48:81:
96:68:c0:60:b1:01:22:24:b3:48:21:6e:be:0f:3c:72:c3:d5:
ac:1f:e7:f0:fa:18:53:8f:04:76:89:51:5d:83:82:ec:95:1a:
ee:5a:2e:df:76:1f:10:c1:b5:78:0a:5e:00:62:b1:dc:d7:a9:
a8:16:6e:6f:b3:a5:ec:af:ee:53:82:3b:41:37:33:a2:0a:e4:
19:d7:25:b1:e5:4f:72:e9:0c:1f:32:84:96:61:29:fc:3a:9a:
aa:f1:eb:fb:d8:43:4f:76:bc:77:f7:eb:61:93:57:32:ed:bd:
f5:6f:2d:5e:b9:87:6c:92:84:fe:f4:7a:e7:49:c0:d0:af:ac:
35:18:37:af:57:3f:07:cd:fe:c6:b2:60:b5:e7:ae:de:43:a4:
19:f1:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:32:04 2026 by rpki-client