
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json)
Hash identifier: 8M7vsHt04GwweOnjcDHym2Xzc0z1aK/VnGcdfDiWCa8=
Subject key identifier: 9B:C8:84:5D:C7:7F:1B:46:87:9A:BF:D2:54:F9:73:F7:35:12:90:D3
Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70
Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
Manifest number: 0221
Signing time: Sun 05 Apr 2026 02:19:59 +0000
Manifest this update: Sun 05 Apr 2026 02:19:59 +0000
Manifest next update: Sun 12 Apr 2026 02:19:59 +0000
Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: GXw0yu+xo+R5NgItuaIuc0k/hpoka3l7C3117rEurAc=)
2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: TRCit7S/Vg6OV4lqP74PVauh5l5sCF/UMjkzMFmjRuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl
rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
Validity
Not Before: Apr 5 02:19:59 2026 GMT
Not After : Apr 12 02:19:59 2026 GMT
Subject: CN=69d1c6cf-405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:06:05:b0:dd:29:ad:4e:c9:9f:93:13:cc:
68:e3:1f:ef:be:72:10:02:c1:8a:cc:94:86:95:87:
80:83:4a:38:42:fe:01:2c:b1:96:67:81:a0:94:1a:
e7:6b:14:15:4c:6a:1e:98:cf:b6:e4:da:44:e2:ea:
c2:ca:ac:08:93:87:98:a4:6b:84:09:5b:ab:da:6e:
74:ce:6e:ff:9f:b2:62:2e:04:c1:0f:97:15:ee:9f:
d6:7e:4c:91:49:60:d8:3b:e6:39:86:a8:93:e2:25:
b5:ea:ff:cb:11:62:45:60:ab:35:52:e4:af:bc:5f:
30:41:67:77:6f:f2:69:ec:75:53:fa:fa:6f:c0:1c:
64:3f:07:61:79:39:09:58:64:fc:c8:e5:ff:5e:69:
5d:62:e6:93:d2:c6:64:22:df:3e:5c:2c:d6:2b:94:
54:12:ae:30:30:a1:3c:af:5c:de:a8:43:4e:36:ff:
72:10:3d:5c:5d:0b:60:1d:02:3b:81:4c:ef:4e:40:
91:92:91:b3:94:6f:c5:2f:ad:fe:9d:ac:88:d8:f6:
36:5d:30:00:5a:b7:38:41:af:16:38:92:cc:df:f5:
e6:11:c3:01:68:6d:88:ac:0f:f7:e9:a3:63:62:8c:
de:a4:d7:29:94:5f:48:cc:f5:d3:04:d2:56:9e:1d:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:84:5D:C7:7F:1B:46:87:9A:BF:D2:54:F9:73:F7:35:12:90:D3
X509v3 Authority Key Identifier:
keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ae:82:a2:b3:3c:b9:5c:26:7e:83:9c:40:82:45:76:bd:78:
7d:f2:16:4c:91:78:a8:0f:2b:c3:25:10:f4:69:49:82:f8:fd:
eb:3f:5d:3a:0d:7a:c4:2f:29:7d:1a:b0:0e:a3:93:9b:c6:5f:
3d:a5:a2:fd:1f:9c:69:6c:69:2c:ec:6d:9e:28:99:4a:39:9d:
95:52:f0:79:cd:21:71:71:2e:3b:4b:a0:db:d8:23:ea:07:5a:
88:78:a4:13:a2:f6:ee:3a:72:da:0e:8e:21:7a:9d:e7:01:1b:
95:e9:d6:2e:18:0e:93:a6:cb:fe:a6:27:09:a4:5e:1d:8c:a3:
ab:ae:e4:7c:3f:37:72:bb:aa:e6:ea:e0:21:cd:a5:65:8b:20:
ff:96:9c:b0:71:66:cb:05:ac:31:21:96:99:49:e4:6b:40:cf:
fa:22:97:ee:44:6d:98:0a:34:f5:b0:49:a7:d6:a2:44:df:29:
a3:33:f1:f8:ee:46:6a:aa:c2:76:90:ed:18:e7:9d:57:ff:eb:
fc:ce:f0:f7:70:ab:83:ac:0e:a4:0d:42:ec:b9:18:e7:38:59:
29:d5:a1:52:38:77:75:10:a1:aa:91:97:93:e5:1c:fb:20:cd:
29:9e:a2:07:41:7c:3c:5b:5b:15:03:4c:18:1f:a7:e2:1a:32:
50:99:c8:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0
NjUxNUNBNzAwHhcNMjYwNDA1MDIxOTU5WhcNMjYwNDEyMDIxOTU5WjAYMRYwFAYD
VQQDEw02OWQxYzZjZi00MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0sGBbDdKa1OyZ+TE8xo4x/vvnIQAsGKzJSGlYeAg0o4Qv4BLLGWZ4GglBrn
axQVTGoemM+25NpE4urCyqwIk4eYpGuECVur2m50zm7/n7JiLgTBD5cV7p/WfkyR
SWDYO+Y5hqiT4iW16v/LEWJFYKs1UuSvvF8wQWd3b/Jp7HVT+vpvwBxkPwdheTkJ
WGT8yOX/XmldYuaT0sZkIt8+XCzWK5RUEq4wMKE8r1zeqENONv9yED1cXQtgHQI7
gUzvTkCRkpGzlG/FL63+nayI2PY2XTAAWrc4Qa8WOJLM3/XmEcMBaG2IrA/36aNj
YozepNcplF9IzPXTBNJWnh16bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvIhF3H
fxtGh5q/0lT5c/c1EpDTMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx
QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR
NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaq6CorM8uVwmfoOcQIJFdr14ffIWTJF4qA8rwyUQ9GlJgvj96z9dOg16xC8p
fRqwDqOTm8ZfPaWi/R+caWxpLOxtniiZSjmdlVLwec0hcXEuO0ug29gj6gdaiHik
E6L27jpy2g6OIXqd5wEblenWLhgOk6bL/qYnCaReHYyjq67kfD83cruq5urgIc2l
ZYsg/5acsHFmywWsMSGWmUnka0DP+iKX7kRtmAo09bBJp9aiRN8pozPx+O5GaqrC
dpDtGOedV//r/M7w93Crg6wOpA1C7LkY5zhZKdWhUjh3dRChqpGXk+Uc+yDNKZ6i
B0F8PFtbFQNMGB+n4hoyUJnIOA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:02 2026 by rpki-client