
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier: kKTK5dnqoW1WlLHM/qpB+b+rLAH6fvm1p1fXEUcX9lQ=
Subject key identifier: 64:84:51:2B:B1:95:37:6F:83:D2:83:D6:8F:44:AD:23:70:EC:5B:C6
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0C3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number: 0C13
Signing time: Thu 16 Apr 2026 18:45:21 +0000
Manifest this update: Thu 16 Apr 2026 18:45:21 +0000
Manifest next update: Thu 23 Apr 2026 18:45:21 +0000
Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: c4ReBSLg1PZMReOer0LRLlbRlZwQy0pYd3aa6qraoqM=)
2: D9173AE459E811ED85614349C4F9AE02.roa (hash: leMECVmhVTsAWm2huPmHyjfAW/BQtxrDM48+UQZcH9Y=)
3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: PKj9sFGG8PoYLlt4SuP/keqFiSjZV6/K10jPwAvS8jU=)
4: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: WF5zZF6qWOdmRefH/8xgl7eODKn3xPKvlJlYV7opxnI=)
5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: bTCwQurYG8Xk94vaUk8PvdDkAz4L8d6mn3Wu2OIibFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3134 (0xc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: Apr 16 18:45:21 2026 GMT
Not After : Apr 23 18:45:21 2026 GMT
Subject: CN=69e12e41-f76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:38:d6:17:6e:1a:7c:8d:78:63:e9:a1:74:
99:85:dc:17:97:b4:03:a9:c3:8d:38:dd:64:44:e2:
a8:56:3f:90:eb:50:f3:dd:ee:89:c8:03:82:10:46:
c0:d9:78:fc:76:33:13:6f:59:a8:a2:e2:50:0d:91:
ee:24:ee:6a:81:ad:6c:4e:bc:b5:62:03:77:87:5b:
56:58:52:62:8c:21:4e:32:b5:36:bd:d1:c5:0a:07:
bf:2d:6f:f5:57:ad:17:d0:96:6c:08:3e:55:d7:94:
64:a2:30:ee:18:74:97:56:22:cf:28:ee:ec:e5:a4:
c2:2b:72:bc:f3:3f:da:91:56:97:6e:5f:e6:13:31:
1f:a1:39:92:9a:e3:68:0f:40:4a:55:0a:93:4a:5b:
86:9f:62:d7:0e:d7:65:a1:9a:de:7e:b9:3e:f2:2e:
8a:90:fc:95:c4:05:0b:b0:8b:b5:09:04:05:71:50:
92:23:46:f7:91:3d:f1:72:ac:c7:e2:b5:1b:c8:cc:
a2:be:06:88:5f:7c:6e:75:47:40:99:83:37:db:5b:
bc:75:53:40:5b:0f:6b:a9:a4:dd:f0:2f:d5:c3:36:
d0:ec:0e:47:3a:de:2d:dd:52:88:21:69:0a:98:3f:
57:d4:1e:dd:ff:aa:0b:e5:e1:5f:b3:60:a9:72:a7:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:84:51:2B:B1:95:37:6F:83:D2:83:D6:8F:44:AD:23:70:EC:5B:C6
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:87:6f:31:69:1a:55:6e:7b:48:21:1e:c1:c0:8a:05:87:4c:
db:59:b6:fd:f8:36:94:7c:f4:74:8d:cb:f6:77:5e:3b:d3:cc:
67:12:0a:af:c7:6e:61:cb:de:f8:e8:d1:6f:41:12:68:6e:26:
97:27:b7:e2:70:17:08:57:1c:9f:d9:00:b2:d2:87:90:ff:18:
2b:f3:40:df:3d:b8:53:30:09:19:d3:7a:20:2f:8f:05:61:82:
96:29:b4:e5:b1:0c:31:bc:86:70:32:2d:e1:23:8f:52:21:da:
05:cb:2f:6f:55:8e:66:06:25:45:77:5c:5a:95:9b:e7:c9:ea:
23:d5:80:1e:7d:af:09:bd:4c:fc:c8:b3:6c:2c:45:3c:ac:34:
93:37:83:d3:e8:3f:55:ce:81:ca:eb:b8:3c:36:1a:ac:d9:14:
41:6a:03:72:27:7f:ec:9f:dd:64:7d:18:44:fb:7e:1a:6b:ba:
1b:28:e2:3c:67:b0:fe:81:bc:7e:81:20:ec:35:44:e8:65:02:
e2:40:04:58:df:a9:25:64:7c:70:e6:33:ff:4e:cb:f7:f2:9b:
38:69:e1:11:c6:60:c8:24:81:f6:a6:37:e4:9d:18:65:79:60:
50:f1:e2:2b:5a:0f:b8:ad:57:18:94:8a:79:76:2e:af:35:fe:
01:c7:85:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC
N0E0MjE4OEYwHhcNMjYwNDE2MTg0NTIxWhcNMjYwNDIzMTg0NTIxWjAYMRYwFAYD
VQQDEw02OWUxMmU0MS1mNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqec41hduGnyNeGPpoXSZhdwXl7QDqcONON1kROKoVj+Q61Dz3e6JyAOCEEbA
2Xj8djMTb1moouJQDZHuJO5qga1sTry1YgN3h1tWWFJijCFOMrU2vdHFCge/LW/1
V60X0JZsCD5V15RkojDuGHSXViLPKO7s5aTCK3K88z/akVaXbl/mEzEfoTmSmuNo
D0BKVQqTSluGn2LXDtdloZrefrk+8i6KkPyVxAULsIu1CQQFcVCSI0b3kT3xcqzH
4rUbyMyivgaIX3xudUdAmYM321u8dVNAWw9rqaTd8C/VwzbQ7A5HOt4t3VKIIWkK
mD9X1B7d/6oL5eFfs2Cpcqe/HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSEUSux
lTdvg9KD1o9ErSNw7FvGMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy
MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz
el81THYxSUljVkMzcENHSTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJYdvMWkaVW57SCEewcCKBYdM21m2/fg2lHz0dI3L9ndeO9PMZxIKr8duYcve
+OjRb0ESaG4mlye34nAXCFccn9kAstKHkP8YK/NA3z24UzAJGdN6IC+PBWGClim0
5bEMMbyGcDIt4SOPUiHaBcsvb1WOZgYlRXdcWpWb58nqI9WAHn2vCb1M/MizbCxF
PKw0kzeD0+g/Vc6Byuu4PDYarNkUQWoDcid/7J/dZH0YRPt+Gmu6GyjiPGew/oG8
foEg7DVE6GUC4kAEWN+pJWR8cOYz/07L9/KbOGnhEcZgyCSB9qY35J0YZXlgUPHi
K1oPuK1XGJSKeXYurzX+AceFwA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:41 2026 by rpki-client