
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier: NrN9A+BdqP/DDsaGaSNVBjRIiFambrCL9NrU3Ny6F54=
Subject key identifier: 27:26:65:33:F0:C5:FE:F0:99:66:1A:96:FE:3F:C8:84:CD:E2:2A:9D
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number: 89
Signing time: Sun 19 Apr 2026 07:12:01 +0000
Manifest this update: Sun 19 Apr 2026 07:12:01 +0000
Manifest next update: Sun 26 Apr 2026 07:12:01 +0000
Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: Yqz9EKYJOn3tQqULZ0AJxDduwfaQ+6Bt+H49VmkXMEs=)
2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: JklpsFyowHEwcOoj+ZilnkU1z0N39Fb72KxzXQYDJI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 07:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Validity
Not Before: Apr 19 07:12:01 2026 GMT
Not After : Apr 26 07:12:01 2026 GMT
Subject: CN=69e48041-59af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:2e:a5:3b:09:b8:89:28:e6:af:46:7b:f8:
dd:65:7e:92:66:56:aa:a2:5e:79:c8:37:8e:36:89:
e9:32:31:64:9c:44:c2:48:6d:60:0a:fa:15:03:3c:
83:5e:83:cb:90:25:ab:87:e8:e7:37:52:9f:e2:3f:
fa:b7:fa:61:5e:b0:ba:36:8f:08:db:70:9e:00:6c:
7f:d4:4e:cc:c2:8d:a0:48:dc:93:f0:13:a8:ff:25:
71:83:c8:65:60:52:28:a8:aa:7e:d8:eb:0b:59:52:
92:3a:22:3b:e9:c5:68:40:1a:cc:42:f7:5a:dc:00:
29:aa:77:02:2b:4f:3a:c7:ab:15:55:5f:43:f1:33:
8c:49:60:82:65:67:29:9e:da:3c:9c:db:21:20:ff:
f6:ea:c1:73:39:a0:21:aa:e3:08:9f:07:1e:6e:31:
05:fa:54:ec:a9:56:78:9b:5a:b1:73:60:ce:ac:96:
ec:ae:fe:33:24:71:db:38:8f:be:bc:7b:62:96:dd:
01:33:d9:3b:25:48:23:57:26:33:f2:89:cb:5d:06:
c6:4e:f5:3e:d2:29:1f:ca:61:f9:4c:88:b5:59:e5:
87:8f:9f:a7:16:ca:b2:f5:96:25:62:ee:59:b1:3d:
67:c5:b6:20:d9:6e:73:6c:41:ce:30:9d:1d:fe:f9:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:26:65:33:F0:C5:FE:F0:99:66:1A:96:FE:3F:C8:84:CD:E2:2A:9D
X509v3 Authority Key Identifier:
keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:73:63:47:9d:45:cc:ce:62:23:61:b9:fa:84:32:c5:d0:
e9:ed:1c:6a:c3:64:0a:a2:de:0e:cc:55:65:d2:26:9d:d4:03:
b8:97:05:36:a5:80:8d:1f:fe:58:5b:41:30:a7:ab:40:b2:fe:
cc:bd:bd:a0:90:13:7a:03:47:9f:df:7d:8b:3d:72:d3:e4:7b:
cd:21:fe:9c:ea:c1:07:77:c6:d0:3a:fe:0e:c3:e6:46:4d:67:
8f:30:ec:14:65:6b:06:43:b9:ce:f0:b0:43:3a:66:b4:a4:7a:
10:99:b4:79:89:9d:cc:e7:f9:52:29:a0:2b:27:a8:10:3a:5a:
b0:f5:48:92:4d:b2:15:7b:51:a2:4a:c5:aa:31:51:52:d0:c4:
c1:ca:90:b1:b8:fe:f2:3a:f7:de:d3:2f:31:05:31:e8:21:b7:
a8:94:d4:4e:14:39:a0:b4:96:db:6c:52:8b:40:2c:8a:d1:96:
c5:0e:45:19:8e:52:c1:e0:d9:8f:b7:7f:92:6c:5c:f0:79:95:
60:9d:5a:c5:b6:b3:74:9b:1c:67:b4:c2:de:0f:eb:e8:f2:1c:
3b:ff:1c:8b:15:23:e7:9a:3c:86:81:07:f0:e9:e3:09:a6:3b:
7f:aa:80:c1:60:fa:65:fb:b7:d0:8a:b0:f1:4c:ee:fa:cb:36:
ff:a0:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 13:48:25 2026 by rpki-client