
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
File: LFTOW3Q5yME3PII5T2B5FwVy9_0.mft (raw, json)
Hash identifier: OQpXvUWelqzHdQQXe/aVeX4KOrStgCMyMrPoR+0zPxY=
Subject key identifier: 72:25:69:D6:58:D7:DB:CD:F3:A0:44:CE:62:AF:C9:6F:0C:DA:2C:00
Authority key identifier: 2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
Certificate issuer: /CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Certificate serial: 0695
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
Manifest number: 068E
Signing time: Tue 06 Oct 2026 22:36:44 +0000
Manifest this update: Tue 06 Oct 2026 22:36:44 +0000
Manifest next update: Tue 13 Oct 2026 22:36:44 +0000
Files and hashes: 1: LFTOW3Q5yME3PII5T2B5FwVy9_0.crl (hash: Ro2+om6xxhAr0QTcEisA32+Rn81ZCgbvQUmsm7gtHLo=)
2: 26DDF9C4D59311EB9DBD350EC4F9AE02.roa (hash: bCL3Viem/kaeDI5fANKRqsR+6xed5OvLge1DHC5Yp+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl
rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC271, serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Validity
Not Before: Oct 6 22:36:44 2026 GMT
Not After : Oct 13 22:36:44 2026 GMT
Subject: CN=6ac577fc-a636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:87:26:15:c5:fa:12:43:81:10:42:16:00:
5f:df:86:8b:9e:07:c6:c3:d4:a5:8e:64:07:fb:f1:
e6:1e:bc:2f:07:62:51:22:69:b9:e8:24:db:f7:7c:
02:63:29:e6:d4:16:24:60:71:35:cb:06:1a:e0:c9:
aa:67:a0:dd:32:a2:d5:42:78:70:a9:38:4d:27:c5:
08:0f:05:dd:2f:97:b1:0d:41:49:a0:b3:49:0a:b7:
21:ba:d9:f1:9a:8a:e6:99:57:e2:4b:6f:f4:19:ef:
ea:36:94:eb:77:db:8a:83:f8:91:98:ea:1c:d8:49:
67:67:c2:db:5e:f9:0c:19:0e:7f:a0:bd:c4:14:cf:
5b:46:80:63:b3:76:c2:33:c0:c9:3f:80:a6:51:6f:
e0:38:49:40:a2:05:5e:8d:4a:3b:58:c3:54:02:55:
8f:a4:0b:02:cc:b7:89:d3:d1:c8:b8:f6:ca:ee:35:
88:5f:f9:a4:fd:4f:eb:81:ba:ca:2b:05:08:97:30:
4b:8f:f7:de:7e:07:d8:10:eb:e0:b1:29:39:d2:49:
d2:4b:1a:ae:b7:d0:80:33:26:7b:07:2d:15:80:ea:
a3:c1:c9:94:56:53:14:ce:55:05:e1:4b:3e:79:04:
02:9b:7a:60:43:be:c9:7f:c7:3d:9b:d4:3f:2a:b1:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:69:D6:58:D7:DB:CD:F3:A0:44:CE:62:AF:C9:6F:0C:DA:2C:00
X509v3 Authority Key Identifier:
keyid:2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:aa:45:6b:fb:e8:9d:e4:f1:13:bc:77:25:47:18:88:0b:c4:
f3:6e:0f:ff:a5:75:31:10:0a:bd:94:88:74:a7:d3:5b:2b:d0:
82:c7:74:11:cc:5b:dc:35:f0:82:d3:c3:7a:18:e9:73:c5:21:
66:24:8d:6b:97:bd:7b:da:8c:ed:87:d9:5f:dd:a3:47:33:cd:
65:6a:db:1a:79:93:c6:eb:73:18:ca:0c:bb:5c:67:b6:4f:b3:
25:36:f0:11:01:47:c4:03:57:38:60:47:8b:5b:93:00:34:58:
1b:0c:04:f7:08:fe:3a:72:3e:fa:89:e7:57:4f:6a:ba:2c:c6:
fb:35:cb:9c:4e:4a:05:88:0c:b7:44:bb:a7:e8:3c:b1:0b:0c:
7b:36:38:d7:40:85:36:24:2c:86:6e:15:2f:ec:82:df:b8:09:
78:7c:57:96:63:0d:99:46:76:eb:4a:fe:45:b2:48:86:da:b5:
48:25:06:07:3c:24:63:b0:e3:a5:4a:01:2e:01:7c:27:23:4c:
64:0f:86:6e:5b:1b:f0:08:01:82:8b:29:14:d5:a6:fe:1b:1d:
a5:ec:08:11:f7:8c:89:23:c1:22:10:1d:80:d9:64:d1:05:c6:
22:4c:ed:76:da:23:43:57:0c:5c:05:a7:cb:d6:b3:78:d6:62:
a5:cd:2a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:10:37 2026 by rpki-client