
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json)
Hash identifier: grPn0dqzTEMuoVfhyBqf4F+MMI/u1nxniGXepiVy81w=
Subject key identifier: EA:2D:FE:9D:CC:85:D4:8F:1C:E4:86:05:75:9E:39:79:A6:EF:B0:6A
Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF
Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
Manifest number: 0112
Signing time: Sun 05 Apr 2026 05:23:46 +0000
Manifest this update: Sun 05 Apr 2026 05:23:46 +0000
Manifest next update: Sun 12 Apr 2026 05:23:46 +0000
Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: boPyOaqvzxQ53yN6+8xPANShibkqe7r7+q3sH6FWyGA=)
2: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: BOtkUPQZlORXc9X/BH+HM6ZvBM7LsfqIm2Us935oA4g=)
3: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: LStciIupeAadWR9QuICSlgD8xRoxfgRjYZY3eP+3Bmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl
rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
Validity
Not Before: Apr 5 05:23:46 2026 GMT
Not After : Apr 12 05:23:46 2026 GMT
Subject: CN=69d1f1e2-3bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:34:8b:a1:c9:e4:75:fa:b5:65:fa:93:01:
7e:3b:26:04:28:73:ac:ab:12:d9:fa:12:2f:d5:cd:
e4:5a:7a:2a:1c:0c:ed:8b:2c:3b:9a:23:e8:93:c3:
2e:3b:89:01:b3:5a:3d:ac:d6:bd:77:9e:ec:8d:58:
43:32:0e:75:97:9b:a6:6b:03:1b:a5:f3:41:99:b5:
29:7e:68:62:ef:47:08:8b:6d:cf:7e:c3:ef:88:d6:
02:aa:76:ad:8b:9a:11:cc:74:51:2a:f5:59:48:24:
67:d8:57:dd:16:ac:c2:88:20:c4:bd:78:48:f3:e5:
05:ba:74:bd:2a:e4:0c:c8:fb:c2:9f:67:9a:2b:16:
8d:86:8c:f3:68:3e:49:7c:60:2e:f0:99:01:60:c4:
4d:b6:ba:52:be:b3:42:a9:32:cc:ab:38:a7:86:13:
15:b0:7c:c7:5c:62:1b:99:15:66:98:42:fc:c9:f7:
c6:9e:1a:b4:d8:70:58:fe:b5:e7:c8:69:ec:ff:e5:
5d:36:4e:40:fb:4c:db:35:5d:e5:bc:c2:03:7a:dc:
e8:3e:05:61:ba:f7:00:95:1a:37:22:9a:7a:a1:f7:
b3:2a:5b:a5:88:89:34:43:be:c5:d5:25:f0:68:5f:
ef:c4:63:d5:53:0d:ef:83:18:2e:19:c0:78:4b:e3:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2D:FE:9D:CC:85:D4:8F:1C:E4:86:05:75:9E:39:79:A6:EF:B0:6A
X509v3 Authority Key Identifier:
keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:45:e4:b6:66:8f:c7:70:fc:07:c1:c1:2d:6d:13:a4:85:0d:
78:94:45:e9:59:79:a6:aa:b0:86:1d:37:62:d1:98:5c:8f:c2:
e3:d3:ed:23:bb:cc:20:9e:dd:50:7e:0a:3a:87:c8:86:a7:2e:
18:72:4a:b3:1f:96:a6:79:ae:0a:46:71:0f:00:56:da:38:1f:
d1:db:ba:f8:05:94:7f:de:9c:9c:3d:1b:6d:b8:f0:2c:ca:51:
2e:8f:15:28:a8:be:84:98:26:aa:f6:fc:3d:a0:bd:08:3e:fe:
90:eb:c1:61:e7:68:16:7a:6b:44:ce:8c:78:70:34:e4:40:d1:
30:07:10:20:f5:1c:f2:0b:43:87:cf:87:a5:1c:cb:27:33:37:
a2:66:5f:ab:ff:b7:0d:f3:d3:fa:28:99:26:6a:9f:b0:db:ff:
88:66:37:ad:dc:87:72:29:02:35:7d:e1:9a:5b:05:98:50:40:
17:aa:66:89:ab:79:71:8e:ef:8d:95:b5:7b:3f:93:c7:1e:bf:
50:94:72:4d:57:e7:8b:00:fc:0b:0e:23:d7:f7:fa:83:ac:69:
5f:4a:5f:15:eb:25:fe:72:83:97:b9:82:85:7d:0c:c7:7a:bd:
b6:30:cf:97:db:03:19:d3:95:9e:3f:14:1d:57:16:f6:1d:1d:
c7:3f:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:00 2026 by rpki-client