
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier: CXnpT75k216CUJHqm1Yp2JvOASTdLTfpZiOosm6ezoc=
Subject key identifier: 74:61:32:EB:80:00:F2:F1:10:38:47:A2:6E:73:6B:77:CC:0F:EB:A3
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number: A6
Signing time: Wed 15 Apr 2026 06:51:12 +0000
Manifest this update: Wed 15 Apr 2026 06:51:11 +0000
Manifest next update: Wed 22 Apr 2026 06:51:11 +0000
Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: 36XzmsMpKgzki3ZX6RehST17DWUkqTZelHk/HlgL+sA=)
2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: 271bGx5p6cweTatnCk/v53X55aXxOr6gavN3HpXZVTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Validity
Not Before: Apr 15 06:51:11 2026 GMT
Not After : Apr 22 06:51:11 2026 GMT
Subject: CN=69df355f-ff0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9f:db:b2:d8:a0:a1:d4:fa:f6:f8:54:b9:50:
56:f5:77:d5:5b:7b:0d:11:95:d1:70:ca:d2:a1:7c:
60:45:99:aa:3f:f2:a9:0b:68:e4:7c:bc:07:d2:04:
17:23:76:e5:20:22:b5:bd:7b:5e:24:0f:f9:5a:22:
5a:b6:af:2f:ef:1a:fd:25:99:0b:82:0c:9b:49:29:
1d:0f:fa:92:c1:05:e4:00:dc:15:b7:10:38:c2:3e:
63:56:4c:56:74:97:b7:50:7b:d8:3a:a7:87:12:62:
5f:32:4c:81:30:f9:aa:67:f8:0b:42:49:9b:54:83:
58:0d:e4:a0:4b:fa:1c:6a:9b:6d:d8:e5:cd:00:9e:
3d:f1:11:ce:8a:b2:26:97:38:3a:13:74:bf:45:0e:
fc:53:6c:5d:e8:06:da:c5:8e:93:9d:24:4f:66:91:
a9:18:d0:82:bc:ca:7f:11:b1:5d:fc:79:7d:73:7a:
50:ee:e5:ae:f7:7a:1a:b9:6c:e7:bd:31:b6:f7:93:
c0:c1:b3:ed:c3:7d:a3:da:2b:f0:1c:78:9e:0f:fc:
a3:8f:62:89:ba:1d:e5:13:e1:af:39:79:a0:1f:02:
f1:39:43:b9:ec:4e:e9:6e:3b:d9:17:5c:17:2d:96:
79:98:eb:a1:88:61:bc:f6:7c:88:6d:d4:d6:a8:3c:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:61:32:EB:80:00:F2:F1:10:38:47:A2:6E:73:6B:77:CC:0F:EB:A3
X509v3 Authority Key Identifier:
keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:00:f2:c1:7c:8f:3a:4d:3d:ed:ae:5a:82:c7:d3:e4:bc:0d:
21:95:05:35:78:3e:46:02:07:52:c7:29:d4:82:59:e1:bb:83:
8b:d7:74:7d:1b:c4:b7:8b:76:ae:65:91:11:48:41:84:e2:c7:
ee:c9:26:33:37:8d:bb:5b:74:62:1c:23:46:9c:37:0c:70:cf:
22:34:80:ab:b6:38:2a:dd:e3:a4:da:b6:24:16:3c:10:ef:1f:
42:8e:75:5b:b8:fc:f5:c9:4f:42:21:99:4a:4a:2f:c5:57:3b:
2e:59:34:e1:f9:90:68:9a:b6:ac:1b:78:de:69:90:19:aa:e5:
dd:ec:c6:5e:5e:35:2b:25:31:3a:d8:23:11:95:96:e7:b9:88:
1f:61:b9:24:6a:ef:51:43:f8:d2:35:9f:94:5c:6e:18:79:4e:
2a:f8:c7:c7:f6:68:63:a9:89:15:81:13:bb:30:8e:c9:59:cd:
47:87:53:2d:70:a3:ad:8c:ff:72:3d:7d:8c:ed:d8:cb:b5:43:
b4:35:b6:ad:3d:89:1d:78:df:46:d2:5a:8e:55:02:21:4c:4b:
3a:18:54:ed:fe:10:0a:61:d8:70:57:58:d6:3a:96:d9:ae:a0:
08:bb:9c:3d:d1:c3:ce:a9:85:f8:d1:04:0e:9c:7a:f4:c1:be:
7b:a1:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:45 2026 by rpki-client