
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier: oTYTC22haa14bMPXqvqxb+TJhz5wl0ADTZWMWOhkY98=
Subject key identifier: BC:4B:1C:34:BE:8B:1B:3D:A2:75:B2:5B:C6:7A:5B:84:DB:6C:5C:3C
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number: F7
Signing time: Fri 17 Apr 2026 05:57:15 +0000
Manifest this update: Fri 17 Apr 2026 05:57:14 +0000
Manifest next update: Fri 24 Apr 2026 05:57:14 +0000
Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: rmi9eHHqYhfoUdL63AUAHowFXF4kyD9eebH5Ci48w5Y=)
2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: SlpOf782RmBcU6vc9OruiEeR0DjviJjgOX1TVRThoh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Validity
Not Before: Apr 17 05:57:14 2026 GMT
Not After : Apr 24 05:57:14 2026 GMT
Subject: CN=69e1cbbb-c63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:bd:ba:9d:c6:f0:ec:e7:e4:eb:11:65:d8:
ba:b3:1e:cc:60:5b:0c:35:2d:da:f0:e6:b5:60:37:
91:14:f9:77:46:db:29:29:4f:03:d1:12:2b:93:6b:
d9:fe:e6:5e:74:d8:39:8c:98:16:bf:ce:af:b9:73:
cd:1a:aa:70:6b:66:f0:ba:ed:de:ac:e1:a3:15:cb:
90:2d:66:43:6a:83:b8:d0:d7:6b:a7:99:a2:f5:58:
0a:7d:8d:79:e4:ec:86:3d:4d:69:01:3f:7d:5e:9b:
64:50:08:e2:7f:1d:d4:68:70:3d:a8:e3:8b:0b:0c:
01:62:d4:3b:1a:5b:60:cb:16:db:72:b2:24:8f:0c:
bc:c7:46:f0:ea:6e:70:73:5a:64:14:95:fb:60:dd:
57:74:d3:bc:42:e5:9b:5c:6d:27:c4:39:54:a0:b7:
7f:bc:83:e3:da:fc:ce:e0:ea:50:b6:dd:fa:4c:c2:
53:02:32:a3:ea:d2:2c:89:59:d1:e2:c2:fd:40:03:
77:79:fc:12:b9:08:d1:e6:48:e7:39:1b:9e:2c:43:
94:63:0e:0d:b1:fc:1e:73:0a:9b:1b:7f:b5:b7:b0:
59:d1:0d:e7:3f:87:cf:d2:9a:c8:e6:b4:52:a1:f7:
73:20:e5:e9:99:e4:fd:85:ab:fe:9a:97:28:e6:9d:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4B:1C:34:BE:8B:1B:3D:A2:75:B2:5B:C6:7A:5B:84:DB:6C:5C:3C
X509v3 Authority Key Identifier:
keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:25:cb:3a:92:6f:8d:d7:bd:63:22:c6:fd:22:96:52:ee:65:
6e:5e:4e:1c:cf:07:62:43:71:dc:34:80:98:5d:5b:20:f3:9c:
da:d3:e8:ec:ec:c1:ba:6d:e2:7d:df:07:d1:f6:39:c7:29:2b:
8d:45:06:8d:59:e2:2e:17:96:13:d5:f6:fd:0c:29:b7:04:22:
a5:ae:25:ad:d4:e7:27:13:6d:59:4e:cf:62:90:d3:d9:04:3e:
05:5c:39:9c:e7:85:3f:74:5f:4c:8d:94:bf:62:b3:ab:12:19:
79:f9:66:5f:e2:07:85:3f:80:a6:17:63:a6:32:f5:15:12:a0:
a0:b2:21:e1:58:44:bb:d9:c6:d8:f2:e8:68:1b:5e:ee:c9:02:
3f:5b:9d:a7:d1:0e:f5:7a:c0:ca:d3:2d:40:64:b8:89:7e:7b:
c3:4e:0c:e2:a6:bd:52:3e:63:4f:c3:d6:cb:be:d7:76:3c:1f:
d2:6f:3c:8d:71:6d:52:52:d9:42:1a:cf:23:35:cf:1a:91:8a:
cf:a6:88:b9:10:aa:9b:b0:91:1b:77:c7:ec:5e:0b:cb:56:7a:
70:6c:2f:95:52:d6:c8:dd:4a:22:7b:21:f8:30:9b:1c:a4:82:
e6:95:17:44:b3:f1:05:34:05:27:b8:03:e5:78:19:1e:1c:69:
6b:d3:ba:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:26 2026 by rpki-client