
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json)
Hash identifier: Cj+0rmI4xYsCNssHuxfl4HoawQ1IaLc6ucRZ2CTjURo=
Subject key identifier: 8B:44:6E:6C:B6:02:58:A0:2C:25:51:4C:FC:01:FD:9D:4B:C6:0D:E3
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial: 02E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
Manifest number: 02DA
Signing time: Fri 17 Apr 2026 01:15:09 +0000
Manifest this update: Fri 17 Apr 2026 01:15:08 +0000
Manifest next update: Fri 24 Apr 2026 01:15:08 +0000
Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: E5EnPLaOvFaYX291Ua87uzZlXI1KWpKWJu4YlABzl08=)
2: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: fau8zrxoL5+rKWWTOegWV7fze5dW+nWi1/hJ5SSwjv0=)
3: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: aefMK2H8VuJURMPwEnmuT8GCvTBNLWTHQiekOGLIEHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Validity
Not Before: Apr 17 01:15:08 2026 GMT
Not After : Apr 24 01:15:08 2026 GMT
Subject: CN=69e1899c-be10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:dd:01:fe:b1:3a:a8:5f:e5:0f:9c:8f:15:
5c:ff:ec:85:9e:17:70:1c:8e:fa:62:e8:24:4f:ba:
fe:2b:d7:e8:fb:fc:94:e4:7e:94:83:e3:c9:ed:c5:
b9:35:04:a9:7a:2d:37:2b:0f:47:3a:71:86:d2:9e:
37:e7:e7:c3:24:ef:78:58:93:4b:70:84:ee:92:18:
05:91:bb:7e:b9:f7:52:16:f8:29:5b:c3:0c:d4:6b:
f5:dc:b6:3e:c8:c0:00:0e:a0:de:1a:fc:4c:d2:7c:
3c:ff:d5:f1:2c:b1:8c:6d:84:1a:58:c1:72:b7:d0:
41:15:d9:76:68:b7:6f:97:0c:dd:0c:84:b0:25:17:
38:d2:8c:d0:ed:7a:78:cd:98:14:25:95:63:7a:d5:
72:b6:89:a2:01:80:ff:b1:22:72:42:f9:ad:2a:20:
a3:18:f1:a0:e9:ae:16:e6:f2:68:5b:4c:9c:fe:24:
34:1b:5b:e0:35:6b:7a:3b:50:e5:f5:b9:6c:36:b4:
94:0a:f4:78:3e:f2:ed:98:f2:bf:c9:5b:21:69:50:
58:a9:43:db:e7:a3:d0:2d:45:1e:35:91:75:e6:fb:
b8:04:9c:39:e5:df:0e:b9:dc:22:f9:e4:0d:61:58:
6e:86:1d:a1:e8:c5:b5:fb:eb:41:ba:e4:aa:c4:79:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:44:6E:6C:B6:02:58:A0:2C:25:51:4C:FC:01:FD:9D:4B:C6:0D:E3
X509v3 Authority Key Identifier:
keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:4a:32:08:d8:68:92:72:0e:ea:eb:82:f7:58:d1:7e:5a:b6:
cb:36:31:50:c7:80:30:a7:b0:37:67:26:8f:26:7f:74:05:bd:
a0:4d:67:f2:9a:12:c1:8c:ca:b1:b0:dc:d8:be:c6:63:5d:d8:
cb:9e:14:0e:59:c0:4f:08:30:8d:9c:b8:56:17:b7:04:69:d6:
f2:bb:b3:4f:80:54:10:ca:f9:ae:1b:85:91:69:51:64:75:99:
10:39:77:d5:a5:b2:04:fb:df:2a:5b:de:5d:ba:4d:cb:c4:ab:
61:1f:46:0e:d7:5b:9c:cb:8d:8b:a5:93:7a:1f:21:6e:db:42:
81:5e:67:fa:ca:02:0e:85:aa:94:9c:0e:80:63:01:43:86:79:
b9:13:b0:72:ca:7d:94:30:9b:54:cf:e9:b3:1a:da:f8:66:2a:
48:33:7b:19:f0:4c:c0:66:05:11:fe:39:5b:19:70:04:d1:8a:
75:8b:ed:ae:62:0f:49:63:26:09:2f:29:21:70:7a:d5:18:58:
e5:ea:53:15:b8:57:67:c5:3e:8c:5c:80:78:de:c7:bb:58:de:
1b:2c:de:c1:94:4a:34:ca:cd:1e:7e:4d:f5:e6:ee:c6:aa:84:
11:22:c2:8c:bb:33:3b:2e:a8:5d:96:5c:c5:35:68:e2:c7:5a:
b8:60:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:31 2026 by rpki-client