
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json)
Hash identifier: jd6zex2Rgd1P9rhKD6eqvfPdoqxLGKL4d3lKEvEWIFw=
Subject key identifier: B2:F8:80:E1:E6:23:CD:6C:90:C3:57:DC:F7:D6:5B:C7:0C:78:8A:DB
Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Certificate serial: 0351
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
Manifest number: 034B
Signing time: Thu 19 Feb 2026 00:10:28 +0000
Manifest this update: Thu 19 Feb 2026 00:10:27 +0000
Manifest next update: Thu 26 Feb 2026 00:10:27 +0000
Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: qaWsrH7w9kMgjBKMULUwrY2kAravlK9LjkaugFIrFDw=)
2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 849 (0x351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Validity
Not Before: Feb 19 00:10:27 2026 GMT
Not After : Feb 26 00:10:27 2026 GMT
Subject: CN=699654f3-7994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:03:5b:47:d8:9b:d2:df:ab:50:5f:0a:4b:
e4:7b:d4:7b:bb:c3:03:d3:51:2b:f4:db:f2:9c:a2:
fd:f5:34:d9:74:9d:e4:4e:2d:26:48:3e:ee:f3:77:
b3:95:a3:c6:4f:48:c7:02:6a:93:89:a6:be:a6:f6:
52:0a:e0:42:27:de:08:d2:df:78:e5:03:39:b7:54:
fe:09:1c:c2:04:f4:63:b8:81:e0:15:26:7b:e2:53:
c2:cd:17:89:f7:fa:80:de:ff:58:5b:c4:d0:c6:76:
6c:b6:08:bc:74:7f:05:5e:89:85:c2:d7:53:eb:7b:
d6:7f:db:a1:5a:71:b6:80:7f:07:57:e6:4a:7e:fe:
e3:8c:3e:62:06:08:7f:ab:49:d8:ea:1f:d4:89:42:
7b:55:35:e0:e2:d0:8f:a7:7b:a5:27:6d:f4:a2:61:
6b:5c:da:63:d5:12:d5:33:41:d5:f0:fa:29:ec:1c:
e1:8f:0c:e5:b5:a0:c2:a2:9d:b9:b8:15:d5:59:fd:
15:15:40:20:7a:e6:85:1d:b2:63:87:01:35:09:f5:
11:4e:cb:69:93:e0:b9:56:c8:f0:53:91:68:b4:ae:
9e:6b:c4:be:d7:c8:f3:ab:97:15:86:d7:da:5d:c5:
37:b7:fb:4d:08:34:96:44:ad:41:6d:db:2c:69:a2:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F8:80:E1:E6:23:CD:6C:90:C3:57:DC:F7:D6:5B:C7:0C:78:8A:DB
X509v3 Authority Key Identifier:
keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:7c:78:e8:d0:77:56:e4:79:05:ad:c9:6f:85:39:00:11:cd:
db:42:68:26:6d:e6:04:37:06:8e:a8:8d:2d:e9:64:48:5b:39:
4b:df:91:d3:f5:e8:0a:53:a7:7d:aa:10:cc:c3:fd:80:28:cf:
50:02:87:28:78:26:ac:91:c6:f4:36:60:7b:42:5d:61:cf:55:
b2:5c:7b:42:1f:40:ba:d2:91:1e:dc:b9:90:56:6c:66:95:82:
29:a5:3d:27:b7:cf:c3:91:73:45:f6:00:78:89:71:ff:ca:c4:
0f:56:e2:f7:39:8d:94:c0:2c:f2:6d:37:d4:be:47:55:ba:db:
d7:5b:5a:8d:56:13:93:98:f0:0c:a2:ca:eb:95:ce:d0:18:ce:
f4:bb:c1:ba:45:23:9f:47:51:12:43:fa:bd:22:65:f3:01:2f:
e3:35:c1:20:ea:86:06:bd:78:5c:ab:dc:0b:33:ac:ad:d3:b2:
c5:e1:73:8b:90:c3:ea:e9:92:aa:f8:0a:ee:ac:af:c8:fe:b3:
4c:fc:87:20:5d:a8:b9:c2:e5:ca:38:d9:e2:a0:17:94:11:47:
d3:a7:10:23:f8:de:aa:97:1b:58:65:5e:18:1e:34:c7:86:88:
b7:31:5b:78:bf:12:d1:e6:58:8c:50:f9:0a:c0:35:71:4a:dd:
2a:af:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:33 2026 by rpki-client