
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
File: LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json)
Hash identifier: 4AbjO9/Ty6GS+pOXKg2s4zBGQXBtBZOIqTwyEq+sacA=
Subject key identifier: B6:5D:31:5C:9B:61:95:E1:B9:87:53:E5:E8:8D:CA:26:D0:F5:60:7F
Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
Certificate issuer: /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
Manifest number: 01EB
Signing time: Sat 03 Oct 2026 04:01:49 +0000
Manifest this update: Sat 03 Oct 2026 04:01:48 +0000
Manifest next update: Sat 10 Oct 2026 04:01:48 +0000
Files and hashes: 1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: WQtAiMLXIUJfuDgXwDykjbhbXzNrnvggYVN2L1V7UqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Validity
Not Before: Oct 3 04:01:48 2026 GMT
Not After : Oct 10 04:01:48 2026 GMT
Subject: CN=6ac07e2d-aabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:c6:50:5b:72:d3:43:c1:db:ab:cd:9f:48:
36:89:cb:9c:b0:3b:d6:e2:14:71:b6:f8:a5:99:c0:
ab:88:da:2f:00:05:2a:a5:a5:d4:94:aa:5d:66:5c:
72:9a:ec:9e:02:97:3d:42:f6:dd:5c:34:dd:89:9e:
b4:14:7b:83:d7:45:c7:8b:72:31:da:f0:67:a0:33:
9f:36:2e:0f:31:6a:ea:87:65:81:77:18:6f:0e:48:
8d:b6:ba:b5:e6:6a:b5:5f:a8:1f:a2:27:5d:eb:ae:
bd:4e:76:64:75:8f:b6:44:ee:0b:66:47:6b:c1:87:
b6:fe:14:ee:ee:c4:1d:4a:eb:36:b1:68:5e:b2:bb:
59:fd:77:8a:92:9a:fc:43:e6:17:1a:90:64:48:6f:
e9:12:99:53:bf:97:f4:60:1f:43:f7:63:7e:b2:e5:
98:76:85:94:16:e6:96:8e:a2:09:52:71:38:c8:b5:
d9:33:05:f9:0e:f9:d1:0a:ca:4e:d3:42:e0:b9:71:
0b:3e:76:92:1f:21:f4:82:a1:71:b7:60:3c:4e:08:
29:75:e7:98:81:d7:8c:86:ea:9d:bc:60:1b:3d:0c:
90:09:b3:08:20:6f:db:b5:02:4c:52:7b:d9:a4:ec:
a8:3e:5d:14:49:05:f7:56:a1:5c:91:55:84:98:3e:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5D:31:5C:9B:61:95:E1:B9:87:53:E5:E8:8D:CA:26:D0:F5:60:7F
X509v3 Authority Key Identifier:
keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:00:93:89:48:5b:ea:82:5e:1c:fc:c4:82:1a:cc:79:28:64:
a2:a9:5d:c2:2c:93:8b:ba:24:e5:3d:b8:59:df:13:bb:85:cb:
df:09:40:8c:a4:5e:4a:b8:2e:6d:77:36:e5:95:f4:22:7c:1a:
1a:c6:51:c2:5f:f0:91:69:55:ee:3a:d1:23:4d:58:b5:ad:7a:
30:56:4b:86:87:f9:1b:7b:7e:1a:6f:37:ad:13:db:79:55:b7:
e1:76:fc:f8:36:66:56:a6:fa:14:4c:0f:db:72:8f:7a:f4:b5:
49:6c:9d:35:1a:a2:a4:d6:15:53:de:1c:09:1e:d0:57:4b:4a:
4e:65:f7:83:65:67:f0:ab:96:54:12:fa:17:37:e9:d5:a9:c5:
00:6b:5d:b7:1e:02:b8:70:4c:03:65:4c:92:44:1d:ce:3a:81:
6e:10:ae:bd:62:dc:05:ec:15:ba:bc:b2:a6:cf:2f:b2:10:4c:
d6:4f:01:ae:c9:8d:9b:0a:82:11:5f:03:95:4b:0f:85:d8:bf:
b4:ac:58:17:be:d9:4b:19:78:24:00:77:67:e6:64:6c:35:f3:
70:40:f9:45:88:e9:c7:9f:3a:66:63:79:89:f4:79:67:75:5e:
97:39:ab:6d:20:28:8b:bd:66:d6:42:a0:b6:16:11:f2:62:4c:
6c:be:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:39 2026 by rpki-client