
$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier: 5QPChVYtzyCkRhF53crWabZl8YwdZQY31fxppPPc0tY=
Subject key identifier: 5E:73:65:33:1A:65:A7:64:6A:82:20:CC:5E:A6:9E:A3:94:9C:2D:74
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer: /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number: B0
Signing time: Sun 19 Apr 2026 06:44:47 +0000
Manifest this update: Sun 19 Apr 2026 06:44:47 +0000
Manifest next update: Sun 26 Apr 2026 06:44:47 +0000
Files and hashes: 1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: t6SQBFQkrBQq49zWLMh4uvyPzQietZL94QGcAWzCnvw=)
2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: xT5qy146gRzAu39NzX0c8OhjswZUhA9rByvpjRnnGOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Validity
Not Before: Apr 19 06:44:47 2026 GMT
Not After : Apr 26 06:44:47 2026 GMT
Subject: CN=69e479df-882e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:c2:10:93:83:dc:36:9d:bb:fa:89:15:dd:
db:7e:e8:8d:01:74:50:a5:ef:84:88:10:2e:45:f1:
bd:d2:05:7c:da:d3:15:89:5d:aa:97:19:5b:b4:26:
76:f6:c8:c0:67:41:13:3d:ff:7f:6b:50:67:c9:7c:
b2:b2:17:0c:29:04:9d:a6:b7:83:e0:5e:d3:93:7a:
61:e5:35:2e:d8:a7:37:4c:95:60:ba:0d:d9:f2:16:
47:b1:db:23:f5:67:3a:85:d9:08:17:6e:24:45:b7:
a4:10:34:ff:f1:d5:3f:d2:70:07:49:13:2e:d6:55:
a7:9c:90:17:d8:f5:10:d0:db:f8:2d:38:21:e4:07:
98:92:26:85:19:5b:3a:ab:8b:8d:18:32:33:4a:a6:
8b:46:52:d4:b0:1e:4f:94:55:42:ad:5b:c2:e2:b3:
a0:f2:84:96:6c:74:ae:6e:21:ac:0f:e6:32:31:83:
4a:03:f3:98:cb:2d:f0:b1:f2:bd:87:a7:76:1f:30:
cc:a7:27:71:a2:03:c1:c8:a6:51:90:2d:22:55:8d:
ec:a3:74:5f:3e:2c:fb:e6:fa:d4:bc:08:1f:26:bb:
4e:2a:fd:9f:8b:8d:f1:7c:45:9c:e0:53:dc:18:56:
46:d7:fd:3c:ba:0e:a4:64:cc:17:d1:ac:c4:34:5a:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:73:65:33:1A:65:A7:64:6A:82:20:CC:5E:A6:9E:A3:94:9C:2D:74
X509v3 Authority Key Identifier:
keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:c5:8d:5f:d1:1f:d1:b6:2e:69:42:76:01:f8:c6:49:f0:60:
f1:52:d1:61:a1:9d:91:1f:36:d1:aa:3a:01:b3:17:a9:da:c0:
6b:26:80:5e:db:c4:7f:b6:47:b3:e5:3c:a5:0a:21:19:da:d2:
41:03:83:79:0d:ee:05:92:f5:da:c1:db:7d:d4:ef:1f:e2:68:
c6:e5:67:51:f7:71:a8:27:c4:b0:30:d5:3e:54:00:d4:2a:92:
5c:b9:29:73:a9:5a:5b:18:65:d8:f1:49:f5:2c:46:82:03:c5:
64:ba:24:6d:0b:6b:a1:d9:f7:b5:7e:a7:fb:1d:47:d3:14:b4:
67:fd:ab:c6:44:c6:3b:65:b0:eb:5e:4c:fa:68:08:dd:00:3d:
d9:58:ed:ef:08:cc:db:71:c7:51:ec:8f:0b:f4:51:0a:ae:b0:
0a:b7:8e:97:74:2a:20:ce:7d:57:c9:63:bd:78:f1:7a:66:ae:
f8:13:b4:68:6f:f2:31:ab:64:9e:b9:0a:8f:2a:6d:82:b2:a9:
be:92:5d:ac:92:da:36:7a:31:60:1e:cb:4f:1f:ab:dc:7a:0f:
7e:50:02:bb:76:7e:0f:41:76:97:e4:42:01:27:9c:eb:b2:cb:
2d:6e:01:f6:ae:2b:9c:9b:3d:7a:79:db:a2:b1:0d:4d:c8:8b:
04:91:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:03 2026 by rpki-client