
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
File: LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json)
Hash identifier: jEkgXWkOjwrieR8G52VLwVRk3g9dEGQTAMUnJy1EV3s=
Subject key identifier: 6E:67:09:CA:F9:38:E3:9C:28:11:9B:EE:63:3B:B6:58:01:18:06:AB
Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
Certificate issuer: /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
Manifest number: 0116
Signing time: Mon 02 Mar 2026 19:07:51 +0000
Manifest this update: Mon 02 Mar 2026 19:07:50 +0000
Manifest next update: Mon 09 Mar 2026 19:07:50 +0000
Files and hashes: 1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: klmIBkC2ebMb4ZZgwdDj3OxEihuuEzTDII0HS1/Wj1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Validity
Not Before: Mar 2 19:07:50 2026 GMT
Not After : Mar 9 19:07:50 2026 GMT
Subject: CN=69a5e006-0fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:03:bd:f8:c9:e9:e0:54:da:8b:80:e0:b5:
6b:a0:a9:0e:40:04:c2:2d:c1:a9:b3:2c:cd:05:4a:
02:c3:d7:ea:f0:1f:59:cd:b0:81:f5:fd:4d:ce:3d:
b3:a8:05:9d:69:52:98:1e:2c:8e:0a:7c:41:ce:f3:
1c:e8:7f:d3:5d:ac:a3:bc:d8:a1:59:ab:1a:d7:79:
ca:c7:ea:50:3e:9c:de:97:a4:1d:c8:97:26:cb:2e:
ce:ee:b4:84:21:bd:ca:28:09:3e:d6:09:59:8a:87:
b2:ae:74:e6:5e:d1:6a:d6:e2:34:8e:b7:f0:ef:53:
64:2d:ed:50:71:31:a7:36:81:a1:be:b1:48:7f:fa:
9b:12:83:c6:01:28:26:90:d8:38:50:e8:50:9b:55:
ae:c1:fc:1c:e9:30:68:82:84:db:bf:53:bd:82:bb:
9c:2c:1a:a1:2f:99:a7:00:c1:de:4f:9f:5d:f8:00:
72:eb:54:ca:7b:cb:a6:23:a4:97:d4:cc:71:db:4a:
89:1f:81:b0:51:ef:eb:f4:f6:4e:31:36:25:14:65:
7a:61:2c:48:54:d0:1f:b6:9b:93:05:99:36:ac:79:
25:3e:03:b4:ce:d2:17:10:1c:ec:da:4f:e2:df:33:
24:f0:90:f6:d3:c0:27:82:45:5b:3b:22:17:c8:8b:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:67:09:CA:F9:38:E3:9C:28:11:9B:EE:63:3B:B6:58:01:18:06:AB
X509v3 Authority Key Identifier:
keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:59:ec:d9:35:46:8b:c0:26:fe:f4:ac:e7:98:1c:55:41:41:
37:b1:88:b4:45:f9:94:82:a8:46:3b:c4:1b:4a:2b:89:91:8b:
1d:2c:44:b6:65:2a:34:f2:cc:61:df:fa:a7:07:73:4e:c5:1d:
97:88:43:93:20:91:c1:b0:e2:2f:0e:a3:0e:7b:d7:cc:ed:c1:
67:40:88:1f:81:bb:45:ef:f5:67:e0:03:0d:68:fe:91:10:55:
71:c4:67:1e:fc:3b:66:f5:8d:16:d9:0d:09:90:f4:e5:e3:63:
b8:3a:fb:5e:ee:c9:32:2f:a5:5b:98:c8:c4:7e:91:2c:c4:fb:
fd:70:d7:3a:5b:54:c5:e5:a2:47:01:d4:6c:0f:36:75:80:ff:
87:00:88:a4:33:70:51:d7:14:56:25:75:11:2c:36:80:d8:3f:
c7:84:29:2f:07:5f:ce:89:26:c1:e3:40:d0:b4:01:f9:63:c8:
ae:a3:72:7c:c8:d2:d6:02:b0:8e:c0:2a:1b:2d:3a:c9:6b:ab:
78:3b:c6:39:3e:b3:75:27:41:6c:a3:c2:cd:0c:ac:c0:b8:60:
3e:1c:ad:4c:e8:b0:1d:58:75:c7:07:67:97:ee:8b:2d:97:b2:
a0:44:54:7d:44:6a:8c:53:76:74:f9:8d:75:69:74:80:98:52:
f2:d0:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:21 2026 by rpki-client