
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
File: LJql-YLItE-ibfCM6iQx15qsN1U.mft (raw, json)
Hash identifier: VDhoDt7853jEgBL9WJakCVpFy9XA5wv/ApT104jsEfE=
Subject key identifier: 9F:F6:C1:1A:80:9F:45:6D:62:B8:E6:E4:68:16:0D:58:B3:69:24:61
Authority key identifier: 2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55
Certificate issuer: /CN=A91A4ACD/serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
Manifest number: 9B
Signing time: Mon 21 Sep 2026 07:22:38 +0000
Manifest this update: Mon 21 Sep 2026 07:22:37 +0000
Manifest next update: Mon 28 Sep 2026 07:22:37 +0000
Files and hashes: 1: LJql-YLItE-ibfCM6iQx15qsN1U.crl (hash: gYBfKQhGLhk47B4S/w/zJGd1mnv9E4xxcuOE8r31ebw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl
rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ACD, serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755
Validity
Not Before: Sep 21 07:22:37 2026 GMT
Not After : Sep 28 07:22:37 2026 GMT
Subject: CN=6ab0db3d-4b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:f9:c5:0a:bd:61:f1:a2:ad:64:0c:92:22:
5f:a0:84:77:3a:ab:5b:0e:9f:f1:38:88:66:20:06:
c2:b7:af:df:be:e1:37:dc:0d:d8:22:83:d0:7a:a3:
7b:eb:58:d5:b9:ea:ea:7c:15:e2:3d:ee:7b:c7:ba:
9b:5f:86:82:df:61:31:fd:15:c8:28:0f:ca:c9:94:
0e:34:95:c5:de:76:aa:7a:07:c5:08:41:5e:dd:6b:
63:5a:bb:43:9c:db:87:38:1b:fb:74:ff:c2:bc:d6:
bc:5a:2a:38:7d:7e:9a:29:3d:a1:24:9a:30:69:87:
5d:51:83:b2:12:24:50:df:6d:12:93:54:91:19:9a:
97:64:79:fa:01:13:11:80:f5:bd:0e:62:d7:91:8d:
86:25:00:94:02:59:05:dd:3d:6e:51:ec:71:36:6f:
3a:85:7a:45:e7:3d:9f:43:a8:86:be:96:87:e0:a7:
7e:86:aa:27:d3:01:de:43:e5:93:8a:85:03:7d:5a:
ac:4b:c1:23:03:01:ae:ee:d0:a9:e2:44:13:e8:5e:
25:c0:30:8b:07:e0:41:1c:1d:bd:ab:e3:68:7d:2f:
f6:1d:d6:79:71:5f:25:f1:47:7a:4d:52:3a:7e:94:
16:0c:be:57:3c:d6:ec:8f:19:3a:7a:ca:91:3e:81:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:C1:1A:80:9F:45:6D:62:B8:E6:E4:68:16:0D:58:B3:69:24:61
X509v3 Authority Key Identifier:
keyid:2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:25:19:f9:01:25:f3:0f:51:ac:23:e2:30:89:5f:e7:7d:6a:
4b:ca:a6:3d:dd:4e:b8:4b:4b:2b:9e:91:61:18:72:7f:c7:5b:
7e:3b:97:e7:79:bd:33:51:d7:5c:bf:a1:00:05:49:ad:1c:f9:
45:f8:08:b9:62:98:ab:5a:ba:69:6f:36:df:c1:ec:9c:66:35:
72:68:67:af:5f:78:a9:cb:cd:cf:49:c4:c5:03:57:60:e1:fe:
10:13:d8:5f:c3:92:82:95:97:01:58:a4:01:b7:4f:7c:66:32:
c4:3f:a1:dc:b1:5b:d5:e4:8c:89:d6:ce:0e:3b:86:a9:05:eb:
22:41:0a:84:a2:fd:48:65:30:8a:05:f5:6e:a6:e8:49:42:58:
9f:d6:24:83:02:49:57:2f:c1:63:b7:e4:d6:4a:f7:af:af:f1:
41:9c:5a:8c:ac:7a:f7:4c:ee:c7:10:c2:87:eb:01:05:23:72:
99:90:2d:8d:e5:7d:c6:fa:27:36:c1:09:6c:2c:01:aa:b4:e5:
93:89:73:c8:7d:14:3f:94:8c:a4:26:36:63:57:bd:66:5d:25:
b9:e1:36:eb:0b:67:7d:87:4f:41:da:ac:01:f3:e4:32:f7:32:
ca:25:df:61:ce:e5:a4:23:dc:14:33:fb:a3:a3:8d:08:14:ef:
44:d2:e2:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRBQ0QxMTAvBgNVBAUTKDJDOUFBNUY5ODJDOEI0NEZBMjZERjA4Q0VBMjQzMUQ3
OUFBQzM3NTUwHhcNMjYwOTIxMDcyMjM3WhcNMjYwOTI4MDcyMjM3WjAYMRYwFAYD
VQQDEw02YWIwZGIzZC00YjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApzL5xQq9YfGirWQMkiJfoIR3OqtbDp/xOIhmIAbCt6/fvuE33A3YIoPQeqN7
61jVuerqfBXiPe57x7qbX4aC32Ex/RXIKA/KyZQONJXF3naqegfFCEFe3WtjWrtD
nNuHOBv7dP/CvNa8Wio4fX6aKT2hJJowaYddUYOyEiRQ320Sk1SRGZqXZHn6ARMR
gPW9DmLXkY2GJQCUAlkF3T1uUexxNm86hXpF5z2fQ6iGvpaH4Kd+hqon0wHeQ+WT
ioUDfVqsS8EjAwGu7tCp4kQT6F4lwDCLB+BBHB29q+NofS/2HdZ5cV8l8Ud6TVI6
fpQWDL5XPNbsjxk6esqRPoEZ9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/2wRqA
n0VtYrjm5GgWDVizaSRhMB8GA1UdIwQYMBaAFCyapfmCyLRPom3wjOokMdearDdV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEFDRC9CQ0RCRDRFNENC
OUExMUYwQjcwMEMxMTZDNEY5QUUwMi9MSnFsLVlMSXRFLWliZkNNNmlReDE1cXNO
MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xKcWwtWUxJdEUtaWJmQ002aVF4MTVxc04xVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEFDRC9CQ0RCRDRFNENCOUExMUYwQjcwMEMxMTZDNEY5QUUwMi9MSnFsLVlMSXRF
LWliZkNNNmlReDE1cXNOMVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABSUZ+QEl8w9RrCPiMIlf531qS8qmPd1OuEtLK56RYRhyf8dbfjuX53m9M1HX
XL+hAAVJrRz5RfgIuWKYq1q6aW8238HsnGY1cmhnr194qcvNz0nExQNXYOH+EBPY
X8OSgpWXAVikAbdPfGYyxD+h3LFb1eSMidbODjuGqQXrIkEKhKL9SGUwigX1bqbo
SUJYn9YkgwJJVy/BY7fk1kr3r6/xQZxajKx690zuxxDCh+sBBSNymZAtjeV9xvon
NsEJbCwBqrTlk4lzyH0UP5SMpCY2Y1e9Zl0lueE26wtnfYdPQdqsAfPkMvcyyiXf
Yc7lpCPcFDP7o6ONCBTvRNLiqA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:42:34 2026 by rpki-client