
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
File: LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json)
Hash identifier: 4ECb5xMNcqvQXLuDvDswvboogqa/KROXa+9zbeUOCv0=
Subject key identifier: 09:F2:81:1E:CE:C1:FB:A5:EC:AF:24:13:13:64:D5:F1:F6:D0:76:B1
Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
Certificate issuer: /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
Manifest number: 0126
Signing time: Sat 07 Mar 2026 04:52:29 +0000
Manifest this update: Sat 07 Mar 2026 04:52:28 +0000
Manifest next update: Sat 14 Mar 2026 04:52:28 +0000
Files and hashes: 1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: a8Vzrcuod2j4RF6wnvBhgZClFYKuYBd5+u/uPiOSKmk=)
2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: NiXNioh1N1ujqUnvMxo5A6nmV8GWIiYYOMqIBOCBYlw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 04:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Validity
Not Before: Mar 7 04:52:28 2026 GMT
Not After : Mar 14 04:52:28 2026 GMT
Subject: CN=69abaf0d-8b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:84:4d:3b:2d:94:a0:d1:44:25:e7:7f:56:
e5:aa:aa:5f:c4:63:35:73:1c:ba:88:f0:bd:3b:b2:
fc:5d:df:87:a9:6c:30:21:69:08:94:4e:ba:9a:a7:
9b:3e:90:6a:64:3b:e5:3c:e6:a7:04:29:86:c4:ef:
6e:03:27:cf:e4:41:ce:0b:99:88:17:3d:47:73:dc:
bd:cd:4e:19:79:ae:09:3f:11:d7:01:71:18:13:43:
71:31:f8:14:b3:2b:ed:45:e2:b1:b6:73:a9:10:2d:
da:46:df:f3:48:37:41:e5:a5:c3:d3:5d:79:af:20:
ec:89:5e:35:a9:92:70:43:b0:6c:58:a0:43:61:93:
a3:f5:ab:c1:8e:5e:f5:a1:95:83:e3:db:59:d9:f1:
5d:e1:cd:2b:fd:28:58:92:ee:84:0c:55:d4:99:61:
3e:0b:22:2b:95:21:a4:c3:78:c2:80:63:ca:8e:37:
bf:72:19:84:a2:86:b2:0f:78:f3:fa:6a:6d:9f:9d:
e3:ef:73:ff:14:fc:a5:8b:84:aa:4b:c8:ab:cb:93:
1f:13:f9:8b:75:63:f1:07:e1:91:cd:c4:43:24:17:
ac:62:0e:04:6b:08:dd:9b:a5:36:bc:01:34:f8:95:
d7:20:dc:1b:23:76:24:4e:7a:80:e7:a8:4b:46:7f:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:81:1E:CE:C1:FB:A5:EC:AF:24:13:13:64:D5:F1:F6:D0:76:B1
X509v3 Authority Key Identifier:
keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:49:7f:06:13:2c:9d:43:c8:b9:8a:dd:5c:bc:26:18:2a:24:
98:19:29:0c:09:82:3a:2d:58:f6:2a:b5:2f:96:02:fe:4e:d6:
7e:ce:d5:28:70:cc:15:10:e1:3a:85:92:bd:18:14:11:62:f7:
2c:0f:4e:6f:01:36:2d:03:ed:cf:79:c0:50:76:6d:49:64:5a:
52:11:8b:d8:d8:80:10:7f:7c:86:b0:43:6f:c3:e6:c4:78:7c:
1a:24:a4:eb:ec:c6:5e:de:fb:19:f9:b6:03:8a:1d:b2:82:bf:
08:af:87:00:68:74:c2:8e:e3:51:df:a1:4e:3e:55:e3:b3:42:
a0:30:c5:c2:89:5e:fd:54:d3:8e:05:f8:af:bd:20:11:70:22:
0b:cc:a5:0f:44:5e:ec:f3:30:55:c7:31:9f:1d:34:70:c2:23:
ff:86:81:96:fc:98:83:be:76:62:69:55:59:09:03:33:ad:12:
0f:8e:13:8c:18:be:b5:b9:fa:71:63:d0:69:b8:3c:1f:9d:6c:
4e:9e:e0:fb:51:bb:a6:50:4f:b1:ea:bf:a9:e9:0b:aa:c7:11:
67:12:e2:b5:c7:66:61:73:7e:8a:6e:16:f4:c6:7e:ec:8b:28:
61:57:03:f6:2b:ac:14:0a:c1:2e:af:64:4f:a7:bb:f8:4a:cb:
f4:04:1b:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg0RjcxMTAvBgNVBAUTKDJDRDEwODJFQjQ3NzcxRDIxREE5MDA1ODJGM0VDODdD
NjlERDVDQ0MwHhcNMjYwMzA3MDQ1MjI4WhcNMjYwMzE0MDQ1MjI4WjAYMRYwFAYD
VQQDEw02OWFiYWYwZC04YjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/OETTstlKDRRCXnf1blqqpfxGM1cxy6iPC9O7L8Xd+HqWwwIWkIlE66mqeb
PpBqZDvlPOanBCmGxO9uAyfP5EHOC5mIFz1Hc9y9zU4Zea4JPxHXAXEYE0NxMfgU
syvtReKxtnOpEC3aRt/zSDdB5aXD0115ryDsiV41qZJwQ7BsWKBDYZOj9avBjl71
oZWD49tZ2fFd4c0r/ShYku6EDFXUmWE+CyIrlSGkw3jCgGPKjje/chmEooayD3jz
+mptn53j73P/FPyli4SqS8iry5MfE/mLdWPxB+GRzcRDJBesYg4Eawjdm6U2vAE0
+JXXINwbI3YkTnqA56hLRn8wDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnygR7O
wful7K8kExNk1fH20HaxMB8GA1UdIwQYMBaAFCzRCC60d3HSHakAWC8+yHxp3VzM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODRGNy83OUNBRkIyNjVC
OEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2NkSWRxUUJZTHo3SWZHbmRY
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xORUlMclIzY2RJZHFRQllMejdJZkduZFhNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODRGNy83OUNBRkIyNjVCOEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2Nk
SWRxUUJZTHo3SWZHbmRYTXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcUl/BhMsnUPIuYrdXLwmGCokmBkpDAmCOi1Y9iq1L5YC/k7Wfs7VKHDMFRDh
OoWSvRgUEWL3LA9ObwE2LQPtz3nAUHZtSWRaUhGL2NiAEH98hrBDb8PmxHh8GiSk
6+zGXt77Gfm2A4odsoK/CK+HAGh0wo7jUd+hTj5V47NCoDDFwole/VTTjgX4r70g
EXAiC8ylD0Re7PMwVccxnx00cMIj/4aBlvyYg752YmlVWQkDM60SD44TjBi+tbn6
cWPQabg8H51sTp7g+1G7plBPseq/qekLqscRZxLitcdmYXN+im4W9MZ+7IsoYVcD
9iusFArBLq9kT6e7+ErL9AQbdA==
-----END CERTIFICATE-----
Generated at Sun Mar 8 00:05:19 2026 by rpki-client