
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier: dV/mUyJ2sYAsaIz0d+1x+b0inNohV4L/gEJs23keYzY=
Subject key identifier: AA:10:CD:9A:B1:02:EB:74:08:32:D3:3D:B1:AC:E9:14:83:C6:C3:4E
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial: 0BDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number: 0BD0
Signing time: Thu 16 Apr 2026 18:50:35 +0000
Manifest this update: Thu 16 Apr 2026 18:50:34 +0000
Manifest next update: Thu 23 Apr 2026 18:50:34 +0000
Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: Oa9HFzdBVm3RWq7/LV+vSmur1q+beCDSBV6niQxAsU4=)
2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: ZJ2vN4ORbvna0D0Yqlj8XNP78COyDtoGq6tfy7d5TK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Validity
Not Before: Apr 16 18:50:34 2026 GMT
Not After : Apr 23 18:50:34 2026 GMT
Subject: CN=69e12f7a-81f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:d1:09:e2:b7:28:63:91:e1:92:1b:e9:32:
71:49:69:97:0d:2b:1c:0c:bc:bb:9f:d7:d6:b8:c5:
ca:88:ce:90:a5:77:ba:d6:5a:db:5b:a6:70:52:06:
35:c8:7a:8c:7c:43:a0:4b:7e:fd:d3:b8:f9:cb:fd:
93:38:24:f0:07:07:c6:56:1f:d9:33:d7:e7:f4:af:
24:a4:c5:9c:cf:62:a2:29:fb:94:8e:b2:63:e5:47:
43:99:83:8b:b9:c7:29:42:6f:77:5b:3d:d8:9f:11:
21:7e:55:ca:1c:53:ef:55:45:30:ee:c6:8b:f7:db:
66:1d:45:6c:7d:a0:2d:b2:48:6c:dc:2a:a6:ec:8e:
04:63:9e:fd:24:40:d8:2c:ae:08:8e:88:07:7b:b5:
f3:3f:e2:a7:ee:88:0f:11:bf:49:31:49:65:0e:3a:
f8:5e:c5:be:7e:3b:62:c6:85:60:ea:e6:64:19:31:
9a:96:3b:5e:ad:d6:0d:5a:f4:7a:24:ab:e6:f5:ae:
c2:be:09:94:78:41:89:ea:95:b7:b7:4f:0a:e6:1d:
b6:00:03:7a:59:8b:08:7b:8a:b4:d2:02:02:a4:f2:
70:a2:a8:60:92:38:b8:20:99:86:1c:02:7a:38:da:
0f:25:48:5b:ca:c3:85:20:98:61:97:0b:4a:c1:13:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:CD:9A:B1:02:EB:74:08:32:D3:3D:B1:AC:E9:14:83:C6:C3:4E
X509v3 Authority Key Identifier:
keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:11:23:a1:27:53:48:6d:ac:46:8b:1c:60:c0:9f:ee:0e:e6:
77:2d:2d:58:ea:7a:ba:ca:79:3a:16:b5:27:14:9b:fd:31:e6:
7c:06:31:08:05:9a:d9:6d:bd:45:e6:0d:94:89:e5:83:b7:26:
95:49:ee:cc:ee:11:43:a0:fe:e0:56:e4:d0:f8:fe:20:d9:39:
c2:05:b7:cf:7f:0c:8b:37:a6:86:ee:22:6d:11:87:07:69:c4:
d3:27:2f:d3:02:44:30:f1:91:0b:e4:91:3b:4c:4b:b1:4a:6c:
f0:2f:e8:29:ec:a2:c2:ae:22:a8:0c:26:4a:9e:72:9f:80:4b:
dd:29:53:c2:d5:39:7c:4f:b9:d1:0b:25:eb:d0:64:d6:9b:8e:
1a:a8:34:a6:3b:02:dd:1f:9f:ae:1e:2f:cc:75:bd:92:ca:e0:
97:ae:80:c9:fd:f4:5f:14:64:79:a6:91:bb:07:b8:5f:15:ba:
0f:49:1a:84:1e:ed:31:30:f5:f0:68:04:a7:f6:06:ca:21:ac:
1e:c2:d5:98:51:4b:19:12:af:f0:71:47:5e:52:f4:b7:35:df:
10:33:55:65:bb:ed:37:03:8f:42:f9:88:58:4b:f8:ab:86:d0:
eb:b7:38:9c:7f:df:3c:80:b7:fa:54:f9:84:6f:57:a9:a4:ba:
87:0c:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:54 2026 by rpki-client