
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier: ks/Z+WdHD5mnBZ6FfSjfUjA/XAtCfIOldCoXPqS4aUo=
Subject key identifier: 5B:08:A4:E0:C6:61:BA:C0:5F:5C:57:E9:CF:E4:DA:6A:92:72:CC:E2
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial: 0783
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number: 0770
Signing time: Mon 02 Mar 2026 02:28:16 +0000
Manifest this update: Mon 02 Mar 2026 02:28:14 +0000
Manifest next update: Mon 09 Mar 2026 02:28:14 +0000
Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: 5z3QwUIwv2bl7+Bp5WW5p4Wka6WC1jRlx7zXOeG2ERc=)
2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923 (0x783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Validity
Not Before: Mar 2 02:28:14 2026 GMT
Not After : Mar 9 02:28:14 2026 GMT
Subject: CN=69a4f5bf-0625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:e4:87:ac:ea:e7:52:57:b2:4c:f3:4c:cd:
92:ee:31:93:f6:09:ea:fa:8a:85:c4:de:f5:2c:30:
71:0a:1e:cd:e5:84:63:b3:25:95:d7:dd:79:3f:b3:
c7:b6:b6:f2:98:a4:88:d5:6b:e4:f0:09:16:4e:62:
5e:54:df:c0:3a:c0:7e:52:36:7b:fb:ca:ad:d6:d5:
ec:6b:0e:39:78:9a:07:94:22:cc:1d:e5:36:36:c2:
fb:f1:20:fb:3f:66:47:66:39:1b:ff:12:d8:42:51:
81:ac:c8:72:d3:0a:35:d1:cb:34:20:73:73:ea:50:
52:8a:60:9a:bd:bb:52:bb:7b:f4:b5:c2:00:c6:49:
9b:e1:44:d3:ce:a4:c1:1d:8c:f2:9a:df:46:32:5b:
b9:c7:3d:45:54:8a:ca:62:99:fd:4e:d4:93:5b:c5:
91:ea:82:64:c1:43:47:2c:3b:f0:02:7e:37:4b:2a:
c3:dd:39:f8:80:32:42:db:fa:02:f2:51:30:53:5d:
6a:3f:1a:48:a9:cd:48:fa:93:c4:d1:95:d2:dd:da:
07:84:9e:70:86:76:05:0c:bb:ab:78:e6:6c:c4:6a:
ae:82:9d:d1:bb:3d:d7:bb:22:e9:7e:67:2d:5b:a7:
2b:9b:67:0b:cc:81:9f:fd:5a:a3:ca:a0:f6:60:4d:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:A4:E0:C6:61:BA:C0:5F:5C:57:E9:CF:E4:DA:6A:92:72:CC:E2
X509v3 Authority Key Identifier:
keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:0d:2c:6d:bc:44:c9:7a:80:77:c8:0d:3d:d7:42:aa:4c:e6:
85:b9:e9:77:b8:06:5b:66:b9:4a:db:7f:e1:03:fa:a4:69:9c:
8b:33:e7:5c:ce:87:f4:d1:74:93:a7:1d:60:0e:6a:f8:93:28:
39:eb:ab:bd:7f:5c:15:07:f3:fc:ef:8f:80:14:d7:0e:b8:91:
9c:1b:b0:48:59:eb:d1:21:f3:18:bf:69:86:71:da:bf:28:71:
36:27:ce:d6:cc:95:58:f6:37:61:e9:e3:3b:38:0a:94:84:33:
64:ba:bc:28:64:6a:13:53:86:0a:eb:61:40:63:da:3e:1a:56:
88:4d:8f:ad:fe:08:02:ec:9f:11:00:91:42:67:6f:68:b8:12:
f3:a4:78:72:be:31:ea:e4:72:0e:ea:0c:bd:e9:43:23:e0:9c:
c5:97:cf:5d:f6:49:bf:58:1e:62:74:a8:cc:24:75:c3:ae:65:
16:d6:71:43:36:38:c5:d9:0a:16:a8:8f:96:ee:9f:24:ea:9f:
a5:88:62:03:46:63:11:52:73:f6:66:53:80:98:31:0d:4b:44:
04:b6:b2:51:ad:86:1c:2a:79:f0:2c:5c:1d:2d:0a:1b:d2:7c:
84:44:34:03:6e:3a:6d:2f:c5:98:b6:a3:30:e8:c7:2f:f1:a6:
1f:a2:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:23 2026 by rpki-client