
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier: vMDC5xtG7Tf79xVcfPvFLfBZqKDevJyp0l8tNhhoTKM=
Subject key identifier: 50:52:71:EB:E7:14:22:DE:BF:B1:7E:0E:E1:70:D8:B6:55:FC:2B:44
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number: 1E
Signing time: Tue 03 Mar 2026 08:32:58 +0000
Manifest this update: Tue 03 Mar 2026 08:32:58 +0000
Manifest next update: Tue 10 Mar 2026 08:32:58 +0000
Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: UHga+cdLAdFbkLzexM31geW4WqbuOIsvHdvNXmiid3Q=)
2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Validity
Not Before: Mar 3 08:32:58 2026 GMT
Not After : Mar 10 08:32:58 2026 GMT
Subject: CN=69a69cba-8558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:a8:57:8d:e6:5b:c9:17:0b:73:a0:ba:b9:
66:f6:fb:95:18:32:1e:90:7c:4a:39:2e:d2:2e:1e:
5f:29:60:5f:2b:54:33:e9:f3:3c:6b:7d:5b:8f:9c:
c4:84:eb:9f:8e:32:1a:05:82:80:f5:97:a7:8b:07:
41:a0:04:98:99:35:f8:39:d8:39:03:a7:4d:22:0c:
23:b1:7e:3d:2a:98:9e:95:17:85:0b:b6:ce:a1:f9:
54:6b:62:ed:52:95:8b:26:72:ab:1d:c5:b0:44:52:
c4:c2:92:00:c6:c0:c4:5e:f1:40:29:b3:96:a8:68:
e8:dd:93:d1:4c:91:a8:4b:8f:a6:3a:ae:77:7e:00:
5a:75:13:84:2d:3a:4f:4c:5e:1f:92:c7:ed:7a:37:
ea:04:05:60:4c:68:69:6f:5d:2d:e5:85:c6:5f:10:
c6:63:33:e0:bf:86:09:7c:54:f9:4c:a2:9b:85:4e:
1c:80:00:57:66:97:aa:e3:3c:0e:3a:5a:51:ef:cd:
12:cc:34:2e:b3:be:24:97:09:48:78:c9:2b:e4:2d:
36:97:7a:c5:d8:e7:f0:b7:94:66:fd:8b:8a:a0:0f:
c1:80:83:22:6c:01:59:b3:3b:71:af:cc:6a:75:3c:
b8:14:d2:ca:e5:89:b1:0c:d8:c9:8b:34:da:7c:3a:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:71:EB:E7:14:22:DE:BF:B1:7E:0E:E1:70:D8:B6:55:FC:2B:44
X509v3 Authority Key Identifier:
keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:dd:5b:3f:d1:f3:c4:d1:f9:6e:01:24:09:e5:6d:a8:19:f9:
3b:34:7f:cb:1f:a0:78:bf:db:2e:bc:13:7f:a1:78:64:35:d2:
bf:23:9b:0f:93:1f:a5:8e:49:7a:12:15:eb:a0:ac:ac:10:43:
bb:07:83:d2:79:12:4f:ef:1d:42:74:a8:bb:1f:40:ce:d6:a5:
fd:fa:5b:70:4c:6f:7c:24:8a:f6:43:22:c1:9d:15:cf:38:05:
40:a1:c1:7e:5d:6a:3f:7b:49:c4:34:14:a0:37:70:70:5c:3a:
77:c5:a1:6c:ab:96:b6:81:cf:0b:e5:80:15:3f:10:b3:b8:49:
ff:23:71:46:38:59:93:a6:2b:a3:59:98:5f:28:40:d0:9c:7f:
82:f6:ba:61:2b:ea:7b:a7:62:1a:fe:dd:bf:46:66:ea:53:12:
06:94:21:e5:e9:ce:10:0f:b2:44:ee:73:0f:54:ab:19:0c:d6:
f1:14:0c:57:a5:c0:61:8b:f6:3b:0e:da:12:aa:8a:af:87:18:
09:3f:0b:33:13:29:ce:cc:6b:95:50:b2:22:82:bb:85:ed:ae:
9b:21:77:82:ab:00:d7:4b:30:17:ed:e2:f6:0b:32:be:34:9a:
fe:47:79:d9:f1:88:93:9d:e6:33:aa:5b:63:55:42:bd:d5:23:
fb:e0:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:31 2026 by rpki-client