
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
File: LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json)
Hash identifier: uVLisEHd89yk+AOBL5kHBW4CQlSgEIa5MdvtuSQTNBk=
Subject key identifier: D2:07:DF:F8:12:AE:2B:55:0D:3D:83:5E:B2:21:9A:C5:CD:05:83:BD
Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
Certificate issuer: /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
Manifest number: 0147
Signing time: Tue 02 Jun 2026 19:09:52 +0000
Manifest this update: Tue 02 Jun 2026 19:09:52 +0000
Manifest next update: Tue 09 Jun 2026 19:09:52 +0000
Files and hashes: 1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: CmLgs6W1pIenQbvKWHe1FmVBLXTCBniOTACrgwut1dg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Validity
Not Before: Jun 2 19:09:52 2026 GMT
Not After : Jun 9 19:09:52 2026 GMT
Subject: CN=6a1f2a80-75f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c7:d2:e8:21:aa:d6:ca:d6:9c:f0:b5:b0:a1:
7c:d6:80:a2:a3:06:e7:bc:44:5a:e4:d3:51:ba:81:
e4:d2:ce:ee:99:78:46:3d:de:27:40:a0:77:49:7c:
54:ac:2a:ae:4f:5b:d0:40:0a:6e:77:3c:7a:e5:23:
6d:70:0c:e5:ed:76:a7:af:4f:7c:db:34:36:e1:9e:
de:0d:a2:76:c4:fa:9f:b3:2c:55:14:cb:59:20:54:
7a:27:09:c8:1f:e7:8f:ae:a6:6a:1f:26:82:58:a4:
51:a5:fb:1e:8f:43:ce:e5:57:64:c8:c9:b2:a0:a3:
58:4d:58:e4:9f:76:7e:89:11:58:15:5f:e0:93:89:
74:96:df:f4:0b:2a:70:7e:40:a0:f0:22:af:ec:89:
7a:bc:41:cd:05:0a:9a:d9:4e:f6:85:ff:1b:41:8f:
a3:6d:61:54:25:31:df:f9:41:5c:ac:6b:38:42:9b:
e9:4d:42:ac:fa:31:4b:45:5c:f1:35:9e:9c:f8:f3:
22:e1:81:a4:1f:3e:30:20:3c:fa:1b:82:59:bf:b4:
f8:56:43:a1:f8:2f:7b:3b:6d:79:21:fa:07:33:d1:
2e:39:89:8d:75:fb:ef:45:a2:65:81:fe:57:c4:d1:
2f:ca:74:e4:00:11:88:e5:c3:ec:6f:56:40:dd:11:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:DF:F8:12:AE:2B:55:0D:3D:83:5E:B2:21:9A:C5:CD:05:83:BD
X509v3 Authority Key Identifier:
keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:ed:67:e8:ec:19:14:68:09:ab:96:54:49:ea:68:5c:23:95:
3e:e0:76:0f:39:e3:ec:33:a2:3f:be:9c:7f:8c:9f:7e:a5:e6:
82:26:63:a9:6d:9d:6b:a2:b7:9a:ec:12:9e:57:2a:ac:14:78:
e3:ed:5f:1d:5f:d8:e0:b9:11:bd:f2:3a:fe:54:90:a3:00:2f:
c1:8a:90:b2:8f:79:da:23:ff:5e:63:12:e3:c0:8c:bb:42:98:
23:59:d7:e7:82:77:3b:b6:ef:85:0b:06:c3:5f:82:ea:cf:b6:
de:26:71:53:85:bf:28:a1:64:c3:53:7f:72:fe:a7:d3:46:9e:
72:ca:71:e5:16:4a:b3:a9:51:1a:e4:39:7c:08:35:5f:06:83:
b7:90:d1:c4:00:9c:ab:b7:da:1b:54:c5:20:62:3e:66:f6:2d:
5a:25:2a:db:3c:3a:15:24:84:91:04:75:9b:03:b0:1c:45:8e:
4c:b8:2e:31:c2:a5:6f:8b:da:41:92:91:d4:09:07:62:42:1f:
1a:07:7d:91:78:c3:1b:a4:a3:58:cb:ea:d3:c3:c7:68:d8:8a:
1c:72:63:27:d1:94:2d:ed:7c:bb:54:71:19:68:c8:06:2c:7e:
f0:ff:6e:b3:9e:53:74:11:ca:99:2a:a5:76:66:66:c1:69:54:
f2:2a:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:06 2026 by rpki-client