
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier: BHY7wtkKSWGS7a49YUPykBeAm4ZyDc7SGyIZ9ArYPTA=
Subject key identifier: D5:33:B1:53:6D:AC:C4:B3:38:91:20:2D:F0:6B:17:85:AE:BF:97:6D
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number: B9
Signing time: Sun 01 Mar 2026 08:28:00 +0000
Manifest this update: Sun 01 Mar 2026 08:27:59 +0000
Manifest next update: Sun 08 Mar 2026 08:27:59 +0000
Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: SE0tWDMt+5TaVD9KllMPcYQ3f+rO4zdNwYXCQANw3TU=)
2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: wfDreRJEGF1JW5W3fjwvAomrv9lvr6AoS+ZjgINTuCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Validity
Not Before: Mar 1 08:27:59 2026 GMT
Not After : Mar 8 08:27:59 2026 GMT
Subject: CN=69a3f890-695c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:ff:6c:ff:e2:31:ad:a0:28:f1:56:a9:42:
d7:36:5f:c5:86:78:4c:c8:e1:28:85:78:a3:6e:45:
ec:f1:9e:83:f7:df:8f:10:ea:97:df:d7:8c:86:e7:
97:b0:c2:5f:c7:45:1d:a5:76:3d:cb:45:6c:52:08:
14:7a:7f:4d:66:19:86:fc:00:a2:d9:10:13:2d:3c:
2b:d9:bf:8e:a2:31:d9:43:8f:42:16:c0:c6:2a:20:
9d:91:c5:e2:c8:fc:5b:5b:df:f2:1d:82:75:03:83:
44:ed:94:c9:23:89:33:e6:85:e6:d5:21:81:60:b7:
13:f1:64:d2:64:da:06:ba:23:e1:29:c5:98:b9:f7:
6f:8b:a4:33:a9:bd:76:f3:b6:c7:63:bd:c9:ff:5d:
e0:86:14:8a:f1:0d:05:e1:30:49:47:29:49:61:8c:
bd:ba:d9:54:2d:74:5d:d1:c8:cd:c9:b1:02:5b:84:
b1:e9:78:2c:db:5e:70:41:3d:8e:4d:d2:8b:13:f2:
83:c4:cb:43:40:d2:37:a4:56:79:5e:e3:c8:80:73:
a5:42:4c:8a:2d:7b:e2:9c:b7:21:7c:95:5d:80:3d:
3e:d2:0a:f3:15:b3:9a:ce:25:00:51:80:6f:66:24:
fa:05:fb:19:a3:28:b6:3f:b0:50:b2:3e:c8:72:0a:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:B1:53:6D:AC:C4:B3:38:91:20:2D:F0:6B:17:85:AE:BF:97:6D
X509v3 Authority Key Identifier:
keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:2c:d6:35:91:a4:bb:68:da:dd:6a:74:fe:03:15:4c:c3:6a:
f2:8a:a1:3c:02:e0:bc:aa:e5:51:92:dd:88:ce:e3:88:61:8a:
bc:dd:7a:37:3b:0f:32:5e:f7:86:bb:12:5f:0a:48:d2:32:47:
07:8d:23:12:17:8d:72:ac:7e:64:b8:14:86:66:f8:1d:de:41:
c6:25:30:a3:8c:3e:45:ba:d7:ea:c4:52:56:fa:05:bb:5d:a2:
b6:57:33:94:21:e1:6e:9c:5e:d1:c1:66:cb:61:db:8f:74:2d:
c3:67:12:f4:67:ee:57:ea:d3:26:06:ee:50:aa:9d:91:0e:25:
a1:42:c5:51:1c:ab:82:54:a3:8a:ce:2a:a1:2c:e7:06:c6:11:
f8:e1:a3:3f:84:65:f2:d5:d3:d8:76:6a:4e:7b:fa:5e:b2:ac:
c7:09:24:4a:58:73:6e:1e:98:27:af:6c:91:9f:69:eb:aa:89:
1d:4a:6c:86:bd:a3:64:1d:ad:ca:7a:76:54:3e:aa:f7:b9:1b:
29:c2:26:c6:a7:d6:ab:05:ba:e4:95:c6:56:fb:93:42:ab:be:
17:34:4f:8b:d6:35:6a:62:f8:a4:19:90:cc:06:f0:61:a1:8c:
86:46:98:d0:8f:cf:b5:97:0d:ff:41:80:01:b2:d0:fa:e7:93:
a7:a5:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:27 2026 by rpki-client