
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier: LQKd08zevNFj129fFEs/TFkOYGIa14qoSeqVs7tooyI=
Subject key identifier: 53:1C:0E:08:E5:12:7D:BD:BB:8F:15:31:60:9D:98:66:75:43:D8:98
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number: 010F
Signing time: Thu 05 Nov 2026 06:56:28 +0000
Manifest this update: Thu 05 Nov 2026 06:56:28 +0000
Manifest next update: Thu 12 Nov 2026 06:56:28 +0000
Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: CduoNZFQRQHLVwcosPPn2SNTJy9K6i2NqPBfsD660IE=)
2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: XsH+IJ5SSw5cAUWIZZhkMzbgbFC8kkMlwg6uRhNZXvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 06:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Validity
Not Before: Nov 5 06:56:28 2026 GMT
Not After : Nov 12 06:56:28 2026 GMT
Subject: CN=6aec289c-f375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:ea:50:06:92:78:55:a7:ab:fa:31:73:a6:
0c:ba:d3:5f:f6:8b:4e:91:98:d2:09:5c:04:ab:12:
45:b6:51:dc:5b:a5:b4:aa:c9:a4:b4:1f:87:f3:4f:
f5:20:d4:b9:60:2d:90:55:75:87:c9:1f:c1:a6:8f:
cf:d4:03:f2:ae:b4:fc:ef:88:0d:f8:4e:40:2b:11:
a6:cd:41:bd:64:00:e2:f6:21:59:65:23:e3:9a:e6:
a5:17:0f:a4:a9:10:d2:80:37:73:fa:77:5d:be:57:
f8:3d:63:2f:98:40:83:b1:40:e3:ca:3a:0e:f7:82:
98:a6:4b:5a:8d:36:08:fd:34:ce:30:6c:e7:20:ae:
83:1f:a9:5e:9f:fa:4c:b5:f3:ae:9b:7d:c5:45:15:
9d:9b:93:cc:9c:c8:09:5f:73:31:8e:ee:23:15:e0:
2e:0e:f7:f5:02:7c:11:ff:fd:42:92:85:c5:d8:5d:
7b:60:c9:dd:6a:31:61:33:2f:88:96:a5:18:95:fb:
92:eb:08:05:35:b6:7c:43:cc:f7:9c:ef:6f:2a:99:
ed:2f:9b:64:56:b8:87:09:00:41:cb:08:f4:26:21:
75:37:a4:12:74:fe:40:a9:f3:20:ba:5b:f4:c9:d1:
bb:57:68:85:70:04:58:0c:55:6d:a0:af:b3:8e:7c:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1C:0E:08:E5:12:7D:BD:BB:8F:15:31:60:9D:98:66:75:43:D8:98
X509v3 Authority Key Identifier:
keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:16:ac:2c:24:6f:7f:e7:8d:76:06:62:16:d2:25:ce:ab:
3a:e4:5b:5a:b4:1a:8f:95:ca:a3:ed:14:06:ca:21:ba:ab:f5:
1d:a5:8d:fb:22:60:de:1c:b4:2e:9d:c8:54:97:2d:20:2d:71:
90:40:db:dd:8a:0d:a8:88:06:20:35:00:12:98:85:2d:9c:2d:
19:85:ba:8a:59:d2:56:60:16:37:c9:38:44:df:72:5a:5b:b9:
c9:73:32:a1:b0:b5:ee:6c:80:de:96:91:71:0a:7b:9b:5c:af:
fa:c2:e6:7d:4d:0e:1e:00:b1:5c:47:e7:29:f0:33:c3:ea:c0:
1d:57:6b:83:35:b3:6d:12:6b:03:b2:d6:65:45:b0:16:fd:b5:
c6:15:60:05:80:79:4a:f1:82:2f:45:79:7c:72:2a:1f:9b:bc:
c3:e3:6f:06:4f:ad:10:f5:2a:eb:28:ae:79:13:01:6d:8b:d4:
ef:a4:6e:ae:a8:76:08:6e:7d:f5:b4:8e:f1:05:a4:d3:d3:28:
6a:7e:bd:fd:30:e2:be:6c:0f:65:5c:3c:f8:9e:59:87:de:b4:
4c:6e:52:ee:9b:e4:84:53:ba:44:40:db:0f:fb:fd:73:17:2d:
29:60:28:68:1d:9a:38:e7:1b:8f:40:f7:e3:c9:88:47:82:50:
92:8a:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:03:22 2026 by rpki-client