
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier: Y0jMohdP4TlGgxzzortr9000sEu2xSqZwiOQnN3Nnsk=
Subject key identifier: A9:6F:95:8D:A8:4B:5A:0A:C7:E6:2D:33:D7:65:FF:95:E1:BE:08:8D
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0C26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number: 0BFB
Signing time: Mon 02 Mar 2026 02:47:00 +0000
Manifest this update: Mon 02 Mar 2026 02:46:59 +0000
Manifest next update: Mon 09 Mar 2026 02:46:59 +0000
Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: 6fBoS/olp/seEL0D20yCCjVSyUzReKJEXYXD9bD+NKo=)
2: D7D5B86859E811ED85614349C4F9AE02.roa (hash: bTCwQurYG8Xk94vaUk8PvdDkAz4L8d6mn3Wu2OIibFA=)
3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: PKj9sFGG8PoYLlt4SuP/keqFiSjZV6/K10jPwAvS8jU=)
4: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: WF5zZF6qWOdmRefH/8xgl7eODKn3xPKvlJlYV7opxnI=)
5: D9173AE459E811ED85614349C4F9AE02.roa (hash: leMECVmhVTsAWm2huPmHyjfAW/BQtxrDM48+UQZcH9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: Mar 2 02:46:59 2026 GMT
Not After : Mar 9 02:46:59 2026 GMT
Subject: CN=69a4fa24-7d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:d1:c6:7e:43:77:cf:c5:4f:1c:63:65:4d:
e9:a0:f7:ab:fe:c6:c6:90:e8:1e:0a:2d:0b:1a:bb:
96:c2:f4:3f:13:4b:92:9a:10:cc:b9:30:1a:b1:5c:
01:96:31:a7:e9:ae:46:6b:0e:10:7c:00:26:af:59:
5b:9d:b1:cd:80:2b:ca:f3:29:84:2c:4c:0d:a6:2f:
ed:b5:b8:5a:10:f0:b7:71:d8:6a:97:ad:bc:35:7b:
dd:f1:d6:1e:5f:51:a2:f5:1b:95:59:e8:be:1d:3a:
45:fd:ed:e4:8a:61:a0:40:f4:1d:cf:a4:db:9f:ba:
0c:ef:58:88:1d:6d:76:d9:5d:60:af:7a:31:83:12:
01:fb:77:d8:59:ca:bc:71:96:79:5d:1d:65:2f:7c:
7c:67:73:67:54:57:e1:b8:a7:24:20:37:88:a2:12:
ee:2d:54:ee:0e:8d:96:54:ca:6d:b1:a3:e2:f9:39:
fd:96:14:bb:aa:01:23:09:dc:66:9d:8b:4b:95:d6:
c2:f4:47:fe:fa:8a:2d:99:99:7b:31:14:d1:82:6b:
59:d9:4e:37:e8:ac:4c:e3:51:8b:dc:f8:df:05:d9:
47:a9:e2:9b:b9:2d:c5:f3:51:a4:41:62:a1:1d:7a:
47:0e:27:19:b7:db:02:88:6a:bf:d7:6d:dc:e8:7a:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:95:8D:A8:4B:5A:0A:C7:E6:2D:33:D7:65:FF:95:E1:BE:08:8D
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c6:44:1c:c5:04:35:31:87:0f:88:2a:40:75:44:3d:76:04:
6e:1f:05:b9:0e:da:7f:60:34:af:41:26:87:3f:48:18:df:41:
b9:4a:cb:63:81:94:72:26:05:7b:e1:d9:d6:a7:7b:fe:f1:dd:
25:74:a9:eb:85:91:9a:3d:5b:eb:8a:5b:8b:4e:da:50:fa:65:
b5:33:28:97:d5:00:57:1e:6c:64:06:f8:91:5f:70:29:8a:e8:
0f:48:cd:e2:d4:6e:8a:a4:36:32:09:87:d5:c6:30:b3:6e:05:
09:cb:5a:c8:24:46:6c:7b:b5:6e:a5:46:86:ac:a1:eb:86:1e:
83:ee:ef:1a:e8:63:3b:30:ff:3b:b7:99:d7:48:bc:68:96:b6:
5d:8f:b3:c1:c7:2d:94:a2:1e:43:af:c1:e3:a5:d5:ae:55:30:
2a:dc:5b:6e:e8:c3:3b:08:f6:1d:95:51:bc:3c:96:12:77:dc:
3c:a7:a7:51:a6:59:14:61:33:28:5b:d1:ac:31:1b:c7:a4:c9:
b2:2c:39:83:33:f9:85:66:a9:60:89:78:0b:25:70:b3:3c:ce:
fc:fe:ae:52:0a:f9:0c:19:d0:b6:ea:fe:9b:77:67:6c:1c:07:
fb:d0:be:88:ca:39:d3:e4:bf:1b:0e:48:ac:32:70:8a:b8:e4:
f0:8b:36:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:05 2026 by rpki-client