
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json)
Hash identifier: ShE7ySo5jUTliMRiCukOYcuPAuAgA+saSAWIw/TapJw=
Subject key identifier: 9E:CE:CF:CB:E2:22:6C:7D:07:B1:A3:63:82:88:D8:F0:6A:A2:EA:0B
Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF
Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
Manifest number: 010D
Signing time: Sun 01 Mar 2026 07:09:03 +0000
Manifest this update: Sun 01 Mar 2026 07:09:03 +0000
Manifest next update: Sun 08 Mar 2026 07:09:03 +0000
Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: E/3QWMELokzy+Vq6WBRUcfepkVUT+CCG8hPS8znBj6Q=)
2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: 48pHeQTbyrBvCbcTm6MBRBsyvDEz+s1PF0SXjnqRsjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl
rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
Validity
Not Before: Mar 1 07:09:03 2026 GMT
Not After : Mar 8 07:09:03 2026 GMT
Subject: CN=69a3e60f-f009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:2c:e9:95:ca:87:a8:5e:14:d1:06:24:c9:
70:ff:ed:46:6d:10:2a:2b:66:3b:43:45:08:8c:98:
6a:ea:ba:12:f2:78:97:70:66:ea:e2:a5:03:fc:c3:
a3:63:57:eb:16:e2:63:cc:87:9e:27:93:44:dd:5a:
ce:d9:62:7e:05:b9:7f:7d:77:28:b0:be:16:1e:53:
15:e9:5d:de:b2:f0:e6:8b:9d:56:c5:ab:81:53:1c:
1a:4a:8a:bd:54:6f:57:02:39:0b:4a:b5:9a:1f:8e:
46:4a:63:64:22:ae:9c:7c:2a:ba:bd:95:81:cd:e2:
07:09:8a:5d:2a:62:14:02:98:6e:a3:dd:ec:30:ce:
15:3c:a8:32:c9:ff:3a:ce:d9:cc:72:d2:1b:72:6b:
61:12:39:ab:71:01:07:ba:6e:f0:b5:12:b9:ab:b3:
d6:ab:18:21:c9:77:79:8d:4e:83:7d:22:32:a2:7f:
b7:df:68:77:8d:8f:6c:23:3c:2a:6f:d6:66:13:84:
4c:7b:ea:ff:f6:29:98:7a:04:15:c6:3f:9b:b8:0a:
9f:a1:1b:63:07:02:02:ac:c8:0e:45:ce:77:05:06:
31:74:c7:c0:01:44:a5:59:75:f5:5a:d8:f1:2f:f2:
a6:05:38:5b:eb:4c:8d:98:73:56:d2:11:99:ef:6d:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CE:CF:CB:E2:22:6C:7D:07:B1:A3:63:82:88:D8:F0:6A:A2:EA:0B
X509v3 Authority Key Identifier:
keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:7a:4d:0b:bd:93:77:c5:40:de:e9:3d:5d:1d:f2:83:96:39:
3f:43:a6:0f:4d:85:fd:ed:66:0b:58:26:bf:02:86:20:b3:3e:
9f:4f:af:bf:b6:88:79:90:11:8f:7c:e3:ea:ac:bf:6c:16:79:
87:ad:4d:90:85:9e:00:a5:2e:cd:61:26:52:9b:0e:cf:7b:ea:
64:ee:c5:ba:c5:7f:11:db:b4:b5:b8:c0:cd:55:9a:71:48:d4:
7d:ed:8c:3e:52:f1:18:07:e0:9d:2a:ec:2b:6f:5c:c1:5b:82:
80:d5:e7:73:29:06:2b:53:a6:88:b1:56:53:fb:d0:77:a2:03:
eb:53:7a:f0:85:fe:f7:ab:18:9e:cf:9b:42:a7:b8:6c:24:87:
d8:57:9a:c2:0d:07:1a:3a:b1:73:50:14:a8:c0:48:f3:c0:e7:
c4:a1:1d:c4:82:3e:25:6c:fd:4a:09:91:5c:d8:ac:5a:22:f2:
f6:14:ad:b7:78:6b:8b:62:c5:10:ed:f1:1b:d6:7d:2b:00:2b:
57:3d:55:a7:d4:cb:6a:14:8f:bb:3e:3a:d0:f3:3d:de:cb:11:
c9:a9:44:2c:f4:ba:a8:f2:32:9d:d5:2b:87:51:3a:ee:77:49:
95:a1:79:aa:c2:78:1f:60:b5:0c:06:4f:68:bc:64:a5:15:91:
19:5e:ec:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFEODExMTAvBgNVBAUTKDJERThGMjE2RENEMkJFQzZEMzhGRUJGMDFFMDZEOEE5
OTAyNzBFQkYwHhcNMjYwMzAxMDcwOTAzWhcNMjYwMzA4MDcwOTAzWjAYMRYwFAYD
VQQDEw02OWEzZTYwZi1mMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxPYs6ZXKh6heFNEGJMlw/+1GbRAqK2Y7Q0UIjJhq6roS8niXcGbq4qUD/MOj
Y1frFuJjzIeeJ5NE3VrO2WJ+Bbl/fXcosL4WHlMV6V3esvDmi51WxauBUxwaSoq9
VG9XAjkLSrWaH45GSmNkIq6cfCq6vZWBzeIHCYpdKmIUAphuo93sMM4VPKgyyf86
ztnMctIbcmthEjmrcQEHum7wtRK5q7PWqxghyXd5jU6DfSIyon+332h3jY9sIzwq
b9ZmE4RMe+r/9imYegQVxj+buAqfoRtjBwICrMgORc53BQYxdMfAAUSlWXX1Wtjx
L/KmBThb60yNmHNW0hGZ7200ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7Oz8vi
Imx9B7GjY4KI2PBqouoLMB8GA1UdIwQYMBaAFC3o8hbc0r7G04/r8B4G2KmQJw6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQ4MS84N0QzNTIwQTg5
RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3ZzYlRqLXZ3SGdiWXFaQW5E
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUQ4MS84N0QzNTIwQTg5RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3Zz
YlRqLXZ3SGdiWXFaQW5EcjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ3pNC72Td8VA3uk9XR3yg5Y5P0OmD02F/e1mC1gmvwKGILM+n0+vv7aIeZAR
j3zj6qy/bBZ5h61NkIWeAKUuzWEmUpsOz3vqZO7FusV/Edu0tbjAzVWacUjUfe2M
PlLxGAfgnSrsK29cwVuCgNXncykGK1OmiLFWU/vQd6ID61N68IX+96sYns+bQqe4
bCSH2Feawg0HGjqxc1AUqMBI88DnxKEdxII+JWz9SgmRXNisWiLy9hStt3hri2LF
EO3xG9Z9KwArVz1Vp9TLahSPuz460PM93ssRyalELPS6qPIyndUrh1E67ndJlaF5
qsJ4H2C1DAZPaLxkpRWRGV7sLA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:09 2026 by rpki-client