
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier: 5G0IjpJJggJzqDrs7whbim7aSVIoonqoLFqZNUoSeAA=
Subject key identifier: 86:80:7E:C8:1F:58:C9:14:DE:07:77:71:D0:F6:3A:67:A9:11:20:DE
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number: D3
Signing time: Fri 17 Apr 2026 06:36:30 +0000
Manifest this update: Fri 17 Apr 2026 06:36:29 +0000
Manifest next update: Fri 24 Apr 2026 06:36:29 +0000
Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: VEvAKpS3AAbLXLqoZTfZaRH1rRKmIJhk9c3HDatkfQk=)
2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: pFar0hkjv8MeCYoT9TzhPZtPV3p3brER3074/liih+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Validity
Not Before: Apr 17 06:36:29 2026 GMT
Not After : Apr 24 06:36:29 2026 GMT
Subject: CN=69e1d4ee-258f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:5c:a2:ad:c4:8e:a9:b4:4a:3a:a9:ad:f7:
4e:12:7f:af:6b:a4:e4:3a:24:67:87:21:68:72:ec:
65:50:49:d5:2e:93:ff:70:0e:fe:94:90:ad:2f:16:
39:08:72:3c:b0:0f:c1:13:02:5e:c4:67:2d:45:21:
44:ec:6f:d0:b4:45:17:f7:9c:59:3f:a4:db:dc:50:
2b:c4:fb:75:66:b5:f6:ad:69:15:ce:0c:a2:7c:16:
16:cb:24:53:4d:0a:29:64:d2:23:11:af:0a:75:7a:
6a:23:39:b6:4d:ff:08:55:93:fe:a4:76:14:d6:35:
1e:97:96:53:21:41:7d:ba:c7:21:5a:94:8c:73:9b:
59:21:80:bf:7b:80:dc:1a:ae:9f:50:66:1e:66:b8:
18:02:2e:b7:e5:cc:6c:c6:14:1e:e3:ca:9f:11:04:
53:dc:69:7c:ac:8c:8d:24:4c:25:01:cd:4d:37:f8:
3c:d1:da:58:11:96:0e:ed:48:b9:a1:12:1f:a7:64:
6c:1e:f9:2a:3c:a5:42:38:88:20:8e:17:62:2d:5e:
cc:50:d8:84:6c:f5:c2:6a:f7:84:d6:b7:29:43:07:
f5:2a:da:ad:60:d8:25:5b:05:47:4d:da:93:67:84:
0a:a5:29:ae:a5:f4:7a:43:54:a0:52:eb:e6:64:42:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:7E:C8:1F:58:C9:14:DE:07:77:71:D0:F6:3A:67:A9:11:20:DE
X509v3 Authority Key Identifier:
keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:32:88:6d:03:e9:8b:01:9f:44:70:b5:21:be:84:e7:51:59:
20:ea:5d:98:08:df:27:9e:7f:7c:cd:d2:e4:1a:68:17:4c:7f:
47:dc:6b:32:d1:bc:eb:7d:9b:a6:c8:85:28:9e:c9:cf:34:7c:
90:20:48:0e:9a:ea:3a:80:d8:0f:93:ff:30:4e:1b:4d:cf:45:
b3:2b:ad:e0:62:a7:1c:7a:97:52:f6:c4:11:51:9f:e5:59:a1:
8d:f0:b4:ee:38:d2:e9:35:15:29:11:72:d4:9a:5f:f4:12:4d:
d7:c3:08:4d:70:4a:65:16:ed:2d:5c:b1:90:93:e3:91:27:10:
50:22:b1:93:bf:7f:47:8a:16:d8:73:5c:ce:57:de:f6:f5:73:
be:ed:6f:9d:88:cc:67:6f:cd:10:44:f6:42:69:62:8c:d9:d2:
00:97:bb:7b:45:48:0a:a4:e7:eb:ba:9e:ac:25:b7:97:3f:cb:
50:5d:ca:53:88:79:c6:90:44:48:99:0b:fc:16:82:74:0c:5f:
ad:d6:60:00:83:05:5d:f7:30:33:12:36:59:0d:63:65:14:c9:
5b:08:03:ec:61:d8:4a:e4:e0:7f:8e:0b:fc:02:36:1a:2d:cc:
3e:e7:e1:ad:77:4b:6f:a0:bc:4e:16:be:79:27:33:a2:77:82:
c1:37:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:47 2026 by rpki-client