
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
File: LnNx4gZThK0R1DN9DS7NH2bSGco.mft (raw, json)
Hash identifier: N1J6tA9ME6mk0EMnX+NCNVTSTJ8/I4BI9Xe3c23ZLGA=
Subject key identifier: A1:7E:45:5D:4B:49:6F:10:8B:22:32:46:C4:D9:27:1F:4C:C2:25:2D
Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
Certificate issuer: /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
Manifest number: 02F4
Signing time: Sun 05 Apr 2026 01:02:44 +0000
Manifest this update: Sun 05 Apr 2026 01:02:43 +0000
Manifest next update: Sun 12 Apr 2026 01:02:43 +0000
Files and hashes: 1: LnNx4gZThK0R1DN9DS7NH2bSGco.crl (hash: 8BVD9tm4T80kOAnXI6Hva0n8du1nan2dFvDSFt71GTA=)
2: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (hash: M4qhU2Zwkz7gIyGByvUikqF53mhF5gT1cR8+NUKeRsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5753, serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Validity
Not Before: Apr 5 01:02:43 2026 GMT
Not After : Apr 12 01:02:43 2026 GMT
Subject: CN=69d1b4b4-e884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:26:c6:9c:6c:46:54:07:14:16:d3:57:c2:
3d:2c:64:27:e9:3b:eb:f8:be:cc:39:4b:d3:29:e6:
c9:32:46:6a:ee:bd:51:67:b6:89:7d:60:e4:03:0b:
a6:ef:7e:37:4f:2f:02:e6:04:c3:20:92:b8:f7:1c:
28:f7:46:f1:63:6d:b0:41:f2:66:4c:9b:07:08:6a:
6e:6f:ee:8d:32:87:a4:d2:92:01:b7:f9:48:cd:3e:
f1:df:a5:13:b9:f8:c0:6b:97:8d:e6:de:ac:d8:84:
b1:ab:c8:63:79:5d:ab:d8:08:7b:80:00:1e:1f:d1:
8a:8a:ee:57:0c:e6:c5:e3:77:f4:28:87:84:7b:97:
e9:82:6c:9a:13:b4:3d:e6:1c:32:7b:5c:c1:e5:3a:
50:28:b2:43:12:72:0d:b1:fc:3d:17:71:97:d3:9f:
50:3a:21:d1:2a:5b:3f:64:f0:1d:8d:4c:ba:a5:5e:
47:76:19:ee:6a:81:69:8d:eb:b3:06:d0:ce:0b:79:
38:d0:6d:66:68:26:3c:96:e4:04:94:38:35:4e:17:
3c:fd:af:41:89:8c:93:80:11:93:75:8e:d4:9e:6e:
bc:97:3f:19:a2:2c:b6:b0:40:62:f2:c1:1f:3d:bf:
45:11:b9:4b:9a:8e:f1:bd:12:d2:e5:02:b2:b5:b1:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:45:5D:4B:49:6F:10:8B:22:32:46:C4:D9:27:1F:4C:C2:25:2D
X509v3 Authority Key Identifier:
keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:76:a2:fc:29:9a:3b:70:e6:19:72:cc:16:17:5d:e8:34:3e:
20:bf:e6:9c:fa:89:d0:a7:0b:58:fd:ac:1e:46:af:83:ee:8e:
44:1a:79:29:7f:2f:08:96:71:d2:16:a7:b6:8c:5d:58:82:f2:
7c:ba:83:7b:15:ac:a0:4d:2b:f2:ac:77:63:d2:c1:6d:92:9f:
6b:6e:d0:5e:68:d5:78:2f:ec:e8:fe:4c:87:0b:e6:31:40:10:
8a:92:b0:64:4f:12:b0:4f:77:bd:a4:14:35:73:e5:e9:83:c0:
97:eb:d5:67:6b:b4:3d:65:4c:eb:87:7e:5d:b1:84:5f:78:37:
00:b2:57:51:b9:aa:d7:95:7d:ea:13:6b:30:7b:8e:0a:f9:fc:
da:4b:6f:c1:e9:6b:df:85:84:7c:fc:c1:26:5c:f6:99:60:e4:
84:a3:d0:40:c7:14:26:36:30:7a:8f:e4:ec:48:9d:c9:04:30:
49:6b:ee:4d:1d:bf:f5:76:15:d6:14:73:7f:a4:be:bb:02:ef:
20:1f:e8:e3:f8:db:a1:31:57:b6:15:8a:72:2e:98:10:cd:2c:
1a:9c:54:c9:6f:85:11:85:96:07:2b:da:d9:42:21:25:ec:c0:
81:da:0d:36:9e:ec:ca:e4:d9:78:bd:81:98:c8:46:f2:2f:60:
5e:ae:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:22 2026 by rpki-client