
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
File: LFTOW3Q5yME3PII5T2B5FwVy9_0.mft (raw, json)
Hash identifier: g+HjgBCbyh4kit5FngDQTwTAei2kvfgqfzat9qFxzUk=
Subject key identifier: A6:2A:CF:57:42:59:EF:D1:A5:81:AA:24:A4:27:ED:BA:86:DE:D4:75
Authority key identifier: 2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
Certificate issuer: /CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Certificate serial: 0637
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
Manifest number: 0630
Signing time: Sat 04 Apr 2026 22:32:35 +0000
Manifest this update: Sat 04 Apr 2026 22:32:34 +0000
Manifest next update: Sat 11 Apr 2026 22:32:34 +0000
Files and hashes: 1: LFTOW3Q5yME3PII5T2B5FwVy9_0.crl (hash: x6xoLkLDeAVqJjD+GtBomXr/vcgdkhi/C7xP8NPQPzA=)
2: 26DDF9C4D59311EB9DBD350EC4F9AE02.roa (hash: bCL3Viem/kaeDI5fANKRqsR+6xed5OvLge1DHC5Yp+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl
rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591 (0x637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC271, serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Validity
Not Before: Apr 4 22:32:34 2026 GMT
Not After : Apr 11 22:32:34 2026 GMT
Subject: CN=69d19183-0c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:b0:3f:5d:b9:d5:a8:53:73:fe:95:4c:3e:
87:8d:ba:e2:6a:91:23:3b:b5:6c:6d:c9:6e:9d:a4:
8a:cc:9b:b1:b8:3b:ed:1b:95:9f:16:d9:31:54:bc:
84:d6:e5:19:0e:36:26:00:a3:6b:d6:33:df:af:b6:
36:99:78:51:a6:c6:27:b3:2f:4b:da:4f:15:22:76:
e0:61:0f:a3:33:98:95:48:1c:aa:1d:f3:c7:54:53:
99:c9:6e:59:49:2e:d6:2d:d8:f8:c6:1c:f2:be:67:
8f:e2:02:75:b0:26:2a:50:ad:40:7f:91:70:ed:ae:
c7:e6:e1:e5:fc:ef:e3:b6:40:af:a9:71:cb:58:91:
1a:c8:3a:df:8d:72:ac:20:0d:72:d6:07:73:c5:a9:
fa:cd:00:a5:4f:1f:23:39:e7:32:f2:03:4f:3f:01:
8c:73:22:39:39:76:94:c3:73:98:f0:74:43:75:96:
2d:1a:72:2b:79:12:31:f9:ec:67:50:ca:05:8d:52:
7e:e3:f0:1a:58:01:33:03:95:1a:9e:dc:07:cc:e6:
c1:cc:72:52:eb:d9:72:7d:46:b4:f0:1b:63:d3:37:
42:39:5e:b1:f4:5a:31:88:37:4f:1f:e2:ed:2f:00:
f9:c0:3c:70:03:33:e4:8e:03:2a:06:dd:8e:54:2a:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2A:CF:57:42:59:EF:D1:A5:81:AA:24:A4:27:ED:BA:86:DE:D4:75
X509v3 Authority Key Identifier:
keyid:2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:2c:60:88:05:85:6d:17:6c:a8:d4:16:25:51:66:b3:a7:0d:
62:ec:52:c5:8a:81:ee:62:32:e8:66:03:2e:a4:8f:67:14:eb:
10:ee:43:5c:3f:d6:29:1b:31:90:af:3b:61:dc:ba:14:a3:5d:
14:1a:22:70:9a:4c:13:d6:af:85:d5:52:78:40:75:1d:46:43:
0b:68:c0:1d:9c:d4:49:1b:b6:34:aa:57:c2:a4:42:31:d8:80:
2f:9b:49:2f:7c:b7:80:91:bf:7d:65:d3:6d:e1:f2:e8:14:d0:
a4:d1:26:fd:53:22:32:7f:99:a9:9c:b2:27:49:a1:cb:f1:39:
f2:c1:01:74:48:c3:65:63:dd:4e:10:59:27:a9:f2:8d:d7:a2:
52:34:90:f0:54:d3:10:a5:4c:19:0b:9f:5e:aa:b4:0a:9d:f5:
8d:b6:1d:9e:0b:e6:d9:55:b1:1b:ce:4f:46:80:8c:83:43:c2:
ec:a3:10:eb:d2:36:6a:9f:6a:21:75:cc:9f:1e:82:8e:98:84:
0d:31:7a:6c:3b:82:d6:9d:4d:14:a4:63:09:47:2c:f4:65:4e:
d4:3c:03:a0:99:d4:9d:54:f6:fb:1f:c5:30:d2:63:bc:4f:30:
55:2e:1f:12:79:e1:53:6c:d8:0d:e1:5e:00:14:9d:cb:8f:96:
e6:f2:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:34 2026 by rpki-client