
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json)
Hash identifier: aHAZdU8+hrYM8V4wSDSEx+wWnAlMxCjh4TQ7iNqGbqY=
Subject key identifier: 9E:42:76:4C:F4:4E:8B:A1:26:1A:A5:CA:22:F8:53:AF:32:52:B2:27
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 05EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
Manifest number: 0594
Signing time: Mon 02 Mar 2026 02:26:21 +0000
Manifest this update: Mon 02 Mar 2026 02:26:19 +0000
Manifest next update: Mon 09 Mar 2026 02:26:19 +0000
Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: dLODzvhMXaku4+M+/cK8Mf1nGf+duJ7XzLsr/f/HHjQ=)
2: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=)
3: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: PGfOZ8aur6eFpfgp1qb3p6zkq3ccsWlLdh66JdofFDY=)
4: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=)
5: F88F642285E411EEB951413BC4F9AE02.roa (hash: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=)
6: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: loULOkxTyFtV5eU4JwAnNk7SaUEpMQGahUv+OEZBH2g=)
7: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A=)
8: 74489676FBF711F0B6045B12716F56BC.roa (hash: PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=)
9: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=)
10: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: zVio0ZLOTaNLC8Edfl//4jmaPw9/v9cWbuyVyZUeg1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Mar 2 02:26:19 2026 GMT
Not After : Mar 9 02:26:19 2026 GMT
Subject: CN=69a4f54d-3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:41:12:8f:51:98:09:82:74:83:cf:85:79:
af:5e:73:54:fc:d2:ca:4e:08:b5:e7:bc:e6:ea:e6:
85:b1:d7:61:07:75:fb:6a:bb:ca:f8:7a:4b:47:1b:
28:fc:ab:ac:1a:bb:cc:e8:86:cc:1b:c1:6a:67:1e:
b2:a8:cb:6e:75:85:63:92:1f:54:c7:8e:d9:62:e2:
07:cb:f8:aa:05:87:96:4b:b7:3a:f4:df:43:74:e9:
e2:8c:da:41:1f:bb:07:aa:06:29:9f:02:e2:a7:84:
91:83:0c:29:74:4d:42:6b:28:a3:80:92:c2:b3:5f:
e0:23:17:4b:ad:c9:12:7e:5c:3d:e1:8d:08:08:1f:
75:ed:ff:2a:3e:eb:89:4d:8c:e6:a6:e2:df:db:28:
ce:d9:6f:96:88:7c:ff:00:91:8d:71:da:35:bf:b3:
36:e1:e2:7a:91:e7:67:08:1d:0e:60:2c:43:35:a2:
f0:7d:ec:38:d8:b4:15:f1:99:05:14:8e:73:c9:59:
e7:76:42:bd:1d:d6:82:7a:ef:19:5f:30:50:5e:58:
16:88:f5:a0:81:2d:a2:9b:a9:45:8d:8d:75:cf:22:
03:fc:54:3c:1d:e5:46:b6:f4:c8:a7:50:8e:28:36:
c7:ae:52:32:00:66:89:f9:e9:e4:86:93:d7:51:97:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:42:76:4C:F4:4E:8B:A1:26:1A:A5:CA:22:F8:53:AF:32:52:B2:27
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:be:4b:72:91:9c:01:5d:67:4e:8c:35:af:04:24:cd:38:2d:
b2:91:2f:f4:e7:cf:be:8e:de:61:ad:85:93:c5:ad:98:f6:6e:
6c:b3:77:1b:11:01:6a:48:01:b3:75:b7:f7:41:28:35:8d:3a:
8a:24:38:86:b0:27:40:7e:3c:30:4b:45:48:56:e6:60:02:db:
00:38:07:a8:a6:32:11:e5:55:e3:5b:2c:fc:08:7d:0c:db:f8:
e7:a8:90:8e:af:18:8c:51:db:8e:d2:d0:24:28:bf:2e:77:9d:
ef:74:bf:7f:82:3a:6e:b8:32:97:3e:63:3b:b2:02:99:c1:fb:
01:77:df:c4:42:5d:63:71:67:6a:bc:c6:0a:a9:2b:02:c6:c3:
e0:4a:97:2f:17:73:e6:c1:1b:e6:49:d5:1a:5f:be:05:91:0d:
0c:76:fd:bc:a9:f1:2b:1f:b4:7b:1a:45:7f:36:cd:f4:e5:3a:
c1:9e:c0:c5:9c:92:55:87:d8:f8:ae:41:67:62:c0:f6:45:95:
b3:12:7f:8d:3e:c3:83:70:f1:2c:9a:6f:0a:af:88:a1:39:66:
a3:74:cf:74:6d:2e:ec:a0:20:53:34:93:15:7e:b5:8f:db:d5:
8c:85:df:7f:2a:74:10:ff:15:89:77:be:41:59:69:35:67:fd:
e5:0d:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:19 2026 by rpki-client