
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier: gaSHlhl2Z6IYvS0uAQa4CwxutJGD+lyMsQzgAUuD9wM=
Subject key identifier: F8:C0:5D:42:98:72:BB:63:40:9B:4F:62:40:9C:85:3B:C1:95:51:55
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number: CD
Signing time: Sat 23 May 2026 06:52:57 +0000
Manifest this update: Sat 23 May 2026 06:52:56 +0000
Manifest next update: Sat 30 May 2026 06:52:56 +0000
Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: WmAnWlk3Bsh8E/AzTY3Cj3EZo7mmh0mHmHZioEsM9pg=)
2: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: e1py/Dvzt5ULhjodeT2xOCGPBlZKvYaIHOb5jKyG0BQ=)
3: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: xXN9mX48NmFk2vcx7rwVXSG4y30L3OeYK6lw11JbwLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 06:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Validity
Not Before: May 23 06:52:56 2026 GMT
Not After : May 30 06:52:56 2026 GMT
Subject: CN=6a114ec9-4953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:9b:8c:95:e0:e3:db:35:e2:c8:7a:0f:e1:
98:94:9a:06:bd:2b:57:38:d5:99:98:70:81:26:f3:
05:bf:56:89:63:89:94:61:db:38:b3:99:3e:32:7d:
cf:04:ce:07:23:0f:88:ad:40:1c:e1:60:43:4c:5c:
03:d9:fa:bd:5f:0a:a0:59:59:b1:ef:3d:50:56:86:
10:c7:9d:6f:27:1f:55:8a:01:d9:54:c8:b5:cb:ca:
fe:51:d7:e1:ec:6e:33:61:63:1a:e1:3e:60:ce:38:
e2:29:78:98:f4:5f:df:23:b5:23:08:87:df:0f:42:
d8:b1:88:67:7b:72:52:c3:bf:91:27:97:ea:a4:94:
c3:ec:c7:a2:04:d7:0c:56:7e:0c:51:22:d8:f5:1c:
5b:ac:aa:46:e9:53:eb:ba:3e:bb:65:15:3e:cc:5e:
09:8c:df:7b:f1:69:94:32:c3:01:58:19:f8:0d:57:
ad:bb:49:35:bf:9a:50:6c:74:bc:80:3e:e9:16:50:
a6:68:f6:96:3f:a0:20:1d:b6:c2:55:d2:2d:c4:84:
e6:5c:90:d9:fa:86:aa:82:f7:2a:ac:3d:f8:67:0c:
72:6f:8a:07:a6:f3:dd:5a:dc:41:e3:f3:41:c6:44:
1f:c6:c9:52:6b:c5:28:60:aa:1e:76:48:de:28:f9:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:5D:42:98:72:BB:63:40:9B:4F:62:40:9C:85:3B:C1:95:51:55
X509v3 Authority Key Identifier:
keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:57:e2:6c:f2:21:c5:10:b8:d1:3d:6a:8c:1c:7a:6f:ec:9f:
cd:d5:18:f7:e1:7e:8f:4e:41:c7:11:3c:c5:59:8c:15:d7:b9:
be:69:93:eb:4b:80:a2:b1:09:6f:29:c6:8b:bd:d4:22:79:3b:
b6:66:d8:cc:c6:4f:cf:6b:a5:18:3b:18:df:5b:b8:14:90:6b:
2b:b3:d2:45:b8:8e:bd:c4:8e:c0:3f:50:21:c7:85:84:8d:03:
72:40:61:e1:de:52:1f:de:d2:16:98:61:6f:5a:99:f7:0d:98:
7c:33:b5:56:27:f8:4b:86:6b:7f:21:db:18:76:be:14:1f:3b:
f4:27:e3:c2:d5:40:13:a4:f8:de:a0:2d:44:ff:01:fd:54:05:
5e:47:cd:35:14:88:4d:17:4e:58:94:ca:53:b6:03:30:68:06:
ed:fd:48:32:a8:74:33:47:1d:1b:37:12:bd:6f:bc:9f:24:5a:
67:5e:47:d0:97:15:c6:29:60:d4:18:42:00:97:d4:88:b3:32:
4e:f5:80:43:c8:8f:54:65:43:b2:84:39:19:04:4d:8e:98:26:
7f:b6:74:ff:47:c0:93:0b:bd:4f:f6:2e:4a:c6:8d:cd:fa:06:
46:dd:9b:f4:6f:dd:96:3d:93:f8:12:bc:23:f4:72:7c:5c:51:
cd:80:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:22 2026 by rpki-client