
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier: hp841o4zh/I0cAiSKENTjk/MyjIHaR0S5ZSMGGhXP+s=
Subject key identifier: 26:72:84:19:8E:F4:D7:E6:6C:1F:0D:DF:B2:F5:1D:41:F4:27:D8:6A
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number: 8F
Signing time: Sun 01 Mar 2026 08:51:35 +0000
Manifest this update: Sun 01 Mar 2026 08:51:34 +0000
Manifest next update: Sun 08 Mar 2026 08:51:34 +0000
Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: nmklZa2rxCU9eDHX746Gr5KLrZluKgKYOo+y6BkMDnk=)
2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: 271bGx5p6cweTatnCk/v53X55aXxOr6gavN3HpXZVTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Validity
Not Before: Mar 1 08:51:34 2026 GMT
Not After : Mar 8 08:51:34 2026 GMT
Subject: CN=69a3fe17-adb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:ea:36:3c:f5:62:9b:cb:39:c8:e5:49:16:
e1:a9:53:88:1c:d4:10:44:ca:10:fa:b7:b1:ae:5b:
cc:ab:43:44:3a:22:75:92:bc:7c:b5:e6:8f:a3:66:
39:24:82:c1:aa:e7:1a:1f:75:79:42:9e:8a:9a:8f:
c1:dc:2d:77:8e:7a:5f:bf:ca:27:34:b8:50:82:0f:
5a:e7:9d:1e:35:03:29:5d:5e:0e:9d:7d:be:f1:50:
bc:f3:bc:9a:ad:cc:7c:83:13:41:47:6e:87:d5:26:
a8:07:0c:9f:6a:77:96:90:e3:ec:69:56:d7:e2:a0:
75:77:92:0a:41:d9:2a:68:bd:06:cd:2f:70:d0:a8:
5a:71:54:0d:56:de:7b:d5:ab:0e:de:73:8f:87:ec:
fb:ba:4d:10:a2:93:bf:70:fb:22:d4:7e:9e:bb:34:
3c:b1:d1:04:4d:41:f3:5a:01:d1:b8:8b:79:34:06:
b0:0a:ef:18:ab:e6:82:e9:82:5b:00:41:46:a1:a4:
7d:2f:b2:96:85:4c:1d:15:44:cc:9e:df:df:0d:72:
1f:d7:2a:14:b7:1d:25:06:ea:81:da:7b:3a:55:05:
0e:97:30:a1:a2:45:5b:1f:34:95:ae:c9:1c:6b:b0:
f9:d0:0e:8c:55:d8:8e:f8:a3:a0:c7:12:07:10:18:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:84:19:8E:F4:D7:E6:6C:1F:0D:DF:B2:F5:1D:41:F4:27:D8:6A
X509v3 Authority Key Identifier:
keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:27:59:cc:ea:c4:3a:0a:1a:bb:74:48:47:dc:a3:be:40:60:
30:50:4e:02:98:3c:d3:c5:4e:31:eb:b2:bd:80:ae:fb:a7:25:
77:25:a2:88:cb:f1:15:d8:18:e5:4e:47:3f:48:ae:d6:5a:89:
90:e3:79:24:8d:53:34:7d:2b:23:4b:f3:89:67:54:4b:ce:15:
22:85:18:50:8a:0f:78:1f:3d:ae:6d:e7:a1:f8:3f:58:5a:43:
4f:2b:18:e6:1f:95:f3:5c:5e:15:e1:fb:0b:8c:2e:c2:53:25:
b9:0f:2e:06:02:06:43:f6:ff:83:34:cd:53:31:b9:f2:3d:53:
94:cd:3e:ee:38:5a:e3:e8:83:71:43:3f:dc:ae:07:4d:19:22:
3e:27:0a:64:7a:78:aa:08:64:85:a6:b4:7a:ff:f9:91:ce:19:
e8:12:66:89:8d:a0:a6:7f:31:5a:96:f1:e9:e3:56:40:10:a5:
31:91:80:cd:cf:69:dd:21:59:65:da:29:69:79:8f:31:5e:b5:
85:e4:ae:c4:d7:3e:b8:e2:69:bc:33:63:af:07:4d:9e:05:75:
62:88:7a:33:cc:42:ad:76:eb:da:c6:c0:c6:7c:cc:8d:fe:61:
50:03:c3:e4:45:07:d7:37:ae:a6:73:02:77:d6:85:e2:81:d0:
35:af:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:00 2026 by rpki-client