
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier: QNsGuy9D01IOeiPnU0vkZQsIaHqLveHN8y5q9qNVuTU=
Subject key identifier: 76:7B:F9:00:D0:33:85:ED:E8:0B:0E:93:42:83:68:58:F5:57:02:82
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number: 4C
Signing time: Mon 01 Jun 2026 09:07:14 +0000
Manifest this update: Mon 01 Jun 2026 09:07:14 +0000
Manifest next update: Mon 08 Jun 2026 09:07:14 +0000
Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: HPUWmYhqgiZEShj1JzZpZO4pxXXSwFL+prJE4OG54Ww=)
2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Validity
Not Before: Jun 1 09:07:14 2026 GMT
Not After : Jun 8 09:07:14 2026 GMT
Subject: CN=6a1d4bc2-3627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:39:e1:39:0d:29:77:44:12:9b:8d:32:4c:
5d:dd:87:ad:26:3b:05:16:f7:f9:0e:d9:4c:8e:84:
5d:6d:30:6c:a0:25:7f:60:79:78:59:b8:81:4e:b5:
9e:06:ea:52:53:32:b6:35:f6:de:5e:18:5f:f8:f3:
c5:7f:12:7c:c4:e2:2a:5f:78:39:04:cf:c7:23:73:
59:32:64:fe:a5:73:cb:53:99:82:38:35:6c:77:c5:
e8:56:15:85:8e:b9:96:cc:3d:76:b8:80:be:56:f0:
22:ef:f3:37:9c:8d:bd:31:b1:13:61:2f:2b:3c:20:
2c:a1:13:86:de:a9:0c:8a:7a:99:d5:53:46:51:63:
32:7b:f4:13:ed:a6:19:af:2e:7c:eb:d0:1b:33:06:
62:b4:cf:28:f7:04:b6:ec:e4:2b:13:4f:6a:a1:bb:
f7:f0:c3:17:04:4f:fa:be:00:d1:a5:c5:97:cc:23:
40:f7:11:65:dd:54:d3:58:35:72:48:60:c0:73:25:
a4:6b:61:cb:23:57:9d:dd:f8:fe:13:3c:b0:26:c5:
44:35:48:3c:0d:86:db:a3:5f:d9:57:c3:0d:f3:32:
65:02:f8:eb:af:51:af:2e:1f:39:8d:c2:e2:24:83:
8e:9a:c3:5a:a6:b0:af:bb:93:b0:4a:46:58:fa:84:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7B:F9:00:D0:33:85:ED:E8:0B:0E:93:42:83:68:58:F5:57:02:82
X509v3 Authority Key Identifier:
keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c4:58:de:f5:0e:31:2f:d0:3d:b1:39:a2:32:ef:5c:da:7a:
17:d4:a3:57:48:27:0b:f3:3d:09:a1:0f:55:9f:0a:d0:76:78:
78:4c:d8:c6:d7:16:a7:25:76:92:ea:c8:74:01:e7:41:43:b5:
4a:01:35:38:9f:02:1d:73:d9:1e:7e:fc:db:be:9c:91:5b:79:
50:c5:33:ae:a6:80:79:85:89:63:65:17:96:80:cd:30:ba:08:
85:7d:6c:f5:e4:ec:cf:d4:f9:34:a2:5c:7e:c3:41:0f:26:e5:
d1:fc:c5:65:5f:5f:d7:45:af:d6:17:c0:a3:9c:40:a5:b7:c8:
0c:1e:d1:08:d2:21:10:42:47:41:0b:4e:4c:11:18:19:37:fe:
89:34:49:ef:42:ed:93:40:a1:71:b5:d0:72:5a:e3:0e:ba:1d:
b9:05:60:78:eb:9a:2d:5e:c2:d4:c9:a0:67:dc:a0:c8:6b:ef:
85:ce:fb:ff:c8:f1:09:32:0c:63:47:6f:ae:10:d5:8e:81:cf:
9e:2e:f5:ad:7b:94:a6:58:23:58:77:62:6a:58:fa:d9:42:d8:
b3:79:66:4d:26:18:38:6a:fb:de:39:07:6f:b2:c2:63:4b:cf:
80:02:82:e0:50:7b:23:b7:be:1e:5c:d9:5b:68:f5:0b:96:1c:
b9:66:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:46 2026 by rpki-client