
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json)
Hash identifier: 15gchud/3ym5E6mMaOixuo5pysNluZ26cQu19oAFdpE=
Subject key identifier: 71:6A:B8:E6:24:57:E7:84:82:2F:0B:E9:B3:48:94:ED:98:00:DE:67
Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Certificate serial: 03A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
Manifest number: 039A
Signing time: Fri 17 Jul 2026 01:21:57 +0000
Manifest this update: Fri 17 Jul 2026 01:21:56 +0000
Manifest next update: Fri 24 Jul 2026 01:21:56 +0000
Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: 5kKQPSAhbwej9jxVelFskuhjr6GZc7zibGUkkLK4Ve0=)
2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: wno/Zpmf7krAlEHHQVbLBHpNiXys3vvcREcGQsemRTU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 01:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930 (0x3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Validity
Not Before: Jul 17 01:21:56 2026 GMT
Not After : Jul 24 01:21:56 2026 GMT
Subject: CN=6a5983b4-17bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:cf:b1:a4:51:88:8f:7e:d5:35:7e:41:c9:
88:08:77:72:13:70:43:44:70:93:ff:75:72:8c:52:
5b:73:97:16:d1:7f:46:c3:a4:f5:23:55:18:17:83:
38:8c:cf:7c:9c:4c:00:8d:bf:a3:fb:95:5b:50:88:
06:c6:c1:7f:49:4f:98:0e:bf:94:8a:70:86:85:c7:
7c:e3:91:3e:52:b3:37:b7:29:dc:4d:5b:ec:85:c8:
e0:6b:1f:58:e3:ff:06:8c:88:c2:23:fd:18:6b:37:
01:41:77:37:f3:8a:e3:73:e6:d8:42:8a:4a:15:8e:
72:9f:61:16:66:f8:25:9d:f1:8b:19:52:36:6e:6f:
1a:b6:1f:8f:cb:68:1b:40:2e:90:04:6d:0c:f4:21:
89:78:17:e4:49:1d:05:e2:a5:d8:3d:d9:2a:b8:e5:
33:2f:2c:16:c4:f8:fc:a6:e3:11:a1:53:a2:9c:a1:
eb:f5:a0:9c:62:68:f9:08:04:bc:4f:fe:76:b3:33:
4c:10:31:80:68:87:f9:a8:23:09:78:9c:c2:58:75:
66:ab:78:dd:22:03:61:16:05:06:7f:a5:89:97:0f:
e2:de:7b:9c:bf:4e:86:a4:47:03:9c:24:95:01:2f:
13:11:09:f1:2a:42:c9:03:35:f0:f3:20:f5:ff:35:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:B8:E6:24:57:E7:84:82:2F:0B:E9:B3:48:94:ED:98:00:DE:67
X509v3 Authority Key Identifier:
keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:78:1e:7e:25:f6:51:6b:71:c1:5d:ab:1f:40:a3:f9:82:c4:
7b:25:55:47:91:23:13:1a:91:de:1d:20:0e:67:05:1c:a8:30:
d6:ba:9e:22:60:98:d6:b5:71:a5:36:8d:9f:24:f5:c7:4f:44:
7d:71:ca:e3:cd:41:50:9b:52:f6:53:ca:48:75:7d:07:d1:75:
49:c6:6a:f0:00:52:70:78:12:95:f3:22:4e:a1:72:d8:7a:8b:
4e:e1:61:35:f0:4e:05:fe:9b:d9:ff:74:a4:6f:57:5d:72:28:
3f:c6:d1:ae:82:e9:f0:b5:a5:92:0d:b7:bc:93:8d:c3:5d:d0:
89:6a:11:d7:d1:2f:11:72:1d:24:26:fb:43:21:01:2e:ef:fa:
4d:b4:30:77:31:2c:ff:cd:cf:9d:8b:56:ae:32:e8:79:d7:e2:
fc:08:59:62:9d:b8:c7:07:83:ad:17:42:bf:87:2c:b0:20:90:
06:c8:ee:1f:2c:d9:f4:f0:27:b8:45:39:ba:da:4c:ed:dc:25:
b7:2c:c4:28:d8:90:a8:35:07:e7:dd:94:d6:40:9f:e8:17:11:
df:e9:8e:4d:4c:40:5f:7a:fc:b0:11:72:fd:8a:5e:b5:b8:5b:
38:a4:65:0f:b3:31:ec:76:d9:c9:d7:ae:25:d4:f1:88:36:41:
7b:93:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:00:46 2026 by rpki-client