
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
File: leqvwkta9LFytYuwGnAc_hltoZk.mft (raw, json)
Hash identifier: gB94bYX9Pm/tIbWJHwBjaeJaB3X9GeZb626EcNzf7mY=
Subject key identifier: B5:6C:96:2B:09:26:3E:32:49:21:EE:72:81:09:3E:E5:4F:35:EA:E6
Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
Certificate issuer: /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
Certificate serial: 11C4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
Manifest number: 11B7
Signing time: Thu 16 Apr 2026 17:06:56 +0000
Manifest this update: Thu 16 Apr 2026 17:06:55 +0000
Manifest next update: Thu 23 Apr 2026 17:06:55 +0000
Files and hashes: 1: leqvwkta9LFytYuwGnAc_hltoZk.crl (hash: gCIlUtp7qzCDzQKBOn8ugqKGJeiid2Cyi9eCR6I5DMA=)
2: 2837843AA3E811EAB397F675C4F9AE02.roa (hash: mX70QQ2yE9wPh1hnIXZOciGYYAe5yUlr20YktwOYe68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl
rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4548 (0x11c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91972B6, serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
Validity
Not Before: Apr 16 17:06:55 2026 GMT
Not After : Apr 23 17:06:55 2026 GMT
Subject: CN=69e11730-9edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:a8:32:c2:ef:33:dd:d3:f4:3a:2e:3e:69:
f4:b6:2d:e6:1f:e7:ca:73:ff:8a:a4:ca:be:75:4f:
3f:fd:23:4b:c3:45:9f:46:a4:44:50:c0:e4:3f:66:
5d:4a:e2:a9:fd:47:48:13:6f:dc:58:b5:c0:83:29:
0c:00:d8:82:d0:40:4e:37:8a:07:7a:05:da:42:b6:
14:6d:43:0e:b1:4e:f5:8e:74:89:23:02:99:bb:aa:
31:c6:26:91:4e:b2:60:a6:a7:fe:b2:cb:aa:c5:0c:
ef:57:7a:db:76:df:45:5c:fb:95:7b:a2:2d:44:5a:
7a:d0:32:5f:4a:af:69:94:4c:42:51:c0:f3:16:f5:
5d:61:ee:cc:1d:57:ce:59:4b:23:3b:26:c2:a3:5f:
1e:74:5a:43:75:a4:1e:aa:90:dd:57:52:fc:51:0b:
c2:d6:7c:c2:f9:f3:88:99:b5:10:48:51:98:6c:8f:
be:fd:4b:a2:3f:ae:c6:df:f0:3f:a0:fc:97:fc:d4:
bb:46:1e:e3:81:c8:c7:62:4d:5a:24:b6:6f:3f:79:
47:a0:34:fa:73:f1:5a:e5:77:6b:52:bd:fc:cd:e3:
ba:d6:ec:22:f1:1c:00:86:db:7e:8c:ab:db:be:4d:
75:04:f3:dd:31:78:ef:a8:be:8b:2a:5e:21:24:e9:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6C:96:2B:09:26:3E:32:49:21:EE:72:81:09:3E:E5:4F:35:EA:E6
X509v3 Authority Key Identifier:
keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4a:65:8b:9b:bb:4a:c2:02:e9:8f:92:41:07:c3:b6:5e:e3:
83:13:ca:be:d7:ea:ac:fb:c0:0f:36:20:36:87:f9:8d:03:1e:
c7:41:75:d3:67:9b:7f:92:8b:e8:ec:fe:ef:da:a6:95:b1:e9:
86:87:f6:aa:ac:e7:ca:1f:a5:c7:8b:43:02:49:79:43:18:23:
78:72:da:21:79:9d:db:57:80:1b:a2:cf:39:6a:03:cf:46:b9:
49:b3:67:fe:56:2c:d9:d8:dd:fa:a8:95:87:68:dd:5d:2f:3f:
0d:41:28:73:c1:40:36:b7:b2:e5:44:9b:1a:f8:7c:11:fa:c6:
cd:69:71:ec:9e:46:8a:27:c9:18:28:1f:6d:83:37:4e:60:03:
ab:c5:e5:53:4d:1b:c7:dc:2e:ee:9d:29:4a:85:da:f4:26:e3:
6e:2c:8b:6c:df:9b:3c:f1:6d:ee:1a:8c:d9:21:7a:88:32:0c:
e2:80:9e:2a:b7:98:43:db:28:67:ba:c9:80:7b:0c:48:e5:6d:
23:93:09:82:5e:49:7a:b9:81:7c:af:f7:70:c1:f9:8a:f6:90:
97:1b:f3:da:3a:1a:99:b7:c5:ef:92:fd:e1:1f:17:19:86:50:
af:2d:c3:d7:38:a2:f6:c0:ef:e1:33:1b:29:b6:c2:26:f9:8e:
1a:1f:7d:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcyQjYxMTAvBgNVBAUTKDk1RUFBRkMyNEI1QUY0QjE3MkI1OEJCMDFBNzAxQ0ZF
MTk2REExOTkwHhcNMjYwNDE2MTcwNjU1WhcNMjYwNDIzMTcwNjU1WjAYMRYwFAYD
VQQDEw02OWUxMTczMC05ZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFSoMsLvM93T9DouPmn0ti3mH+fKc/+KpMq+dU8//SNLw0WfRqREUMDkP2Zd
SuKp/UdIE2/cWLXAgykMANiC0EBON4oHegXaQrYUbUMOsU71jnSJIwKZu6oxxiaR
TrJgpqf+ssuqxQzvV3rbdt9FXPuVe6ItRFp60DJfSq9plExCUcDzFvVdYe7MHVfO
WUsjOybCo18edFpDdaQeqpDdV1L8UQvC1nzC+fOImbUQSFGYbI++/UuiP67G3/A/
oPyX/NS7Rh7jgcjHYk1aJLZvP3lHoDT6c/Fa5XdrUr38zeO61uwi8RwAhtt+jKvb
vk11BPPdMXjvqL6LKl4hJOlEXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVslisJ
Jj4ySSHucoEJPuVPNermMB8GA1UdIwQYMBaAFJXqr8JLWvSxcrWLsBpwHP4ZbaGZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi8wODI0M0M4QzEz
MkIxMUU5QUU3N0FEN0JDNEY5QUUwMi9sZXF2d2t0YTlMRnl0WXV3R25BY19obHRv
WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2xlcXZ3a3RhOUxGeXRZdXdHbkFjX2hsdG9aay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzJCNi8wODI0M0M4QzEzMkIxMUU5QUU3N0FEN0JDNEY5QUUwMi9sZXF2d2t0YTlM
Rnl0WXV3R25BY19obHRvWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe0pli5u7SsIC6Y+SQQfDtl7jgxPKvtfqrPvADzYgNof5jQMex0F102ebf5KL
6Oz+79qmlbHphof2qqznyh+lx4tDAkl5QxgjeHLaIXmd21eAG6LPOWoDz0a5SbNn
/lYs2djd+qiVh2jdXS8/DUEoc8FANrey5USbGvh8EfrGzWlx7J5GiifJGCgfbYM3
TmADq8XlU00bx9wu7p0pSoXa9CbjbiyLbN+bPPFt7hqM2SF6iDIM4oCeKreYQ9so
Z7rJgHsMSOVtI5MJgl5JermBfK/3cMH5ivaQlxvz2joambfF75L94R8XGYZQry3D
1zii9sDv4TMbKbbCJvmOGh99gg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:03 2026 by rpki-client