
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier: eY8qbhW4mU102QPop+l5h4gaq/l6AgOpNp4TOkXJ3Qw=
Subject key identifier: 12:4B:58:23:08:C1:7D:E4:4E:3B:1A:E7:CB:ED:F8:51:60:98:4F:1D
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 09E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number: 09BC
Signing time: Sat 28 Feb 2026 20:17:51 +0000
Manifest this update: Sat 28 Feb 2026 20:17:50 +0000
Manifest next update: Sat 07 Mar 2026 20:17:50 +0000
Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: tJYy9VGiuaIUnsRHTSUIyTQn7D9mKLbsK/ITPV/0HQg=)
2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=)
3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Feb 28 20:17:50 2026 GMT
Not After : Mar 7 20:17:50 2026 GMT
Subject: CN=69a34d6f-df8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:f1:d5:11:70:af:60:38:97:fb:1f:d9:7a:
39:43:fb:ee:f4:73:a7:8c:6a:bf:6e:50:81:58:c7:
89:4b:0e:17:e4:7b:b3:21:85:d7:a8:fb:44:e1:12:
42:04:d8:e9:9a:70:01:74:b6:f3:86:c6:8b:76:17:
55:7d:40:53:c7:46:3b:0a:f8:28:e0:76:49:d7:ad:
26:92:36:e0:18:74:65:c7:54:2a:33:ea:3b:52:af:
36:b6:b4:96:a3:11:a5:5e:4d:5b:f7:e2:a0:98:37:
80:07:d8:65:34:e0:81:55:7c:8b:f9:6a:d9:4b:9c:
6c:eb:79:9c:1a:fa:f2:8d:16:1a:79:95:d0:79:90:
bc:fb:79:f9:34:69:51:59:87:dd:27:a2:44:2f:4f:
92:79:cf:c1:7e:40:fe:28:89:28:5e:41:75:bb:d3:
12:c5:c1:78:a9:02:fb:7a:2d:33:d7:85:33:26:3e:
3b:f1:42:7e:ef:de:9d:32:2b:a2:fd:c4:ae:56:0b:
15:56:fa:98:11:ab:c0:8e:c8:85:e2:6a:99:ac:b7:
da:bf:44:f8:2a:6c:43:c0:51:56:78:5e:54:cd:66:
cf:1b:5e:b8:b0:1b:dd:67:c5:18:35:85:83:22:a8:
d9:ae:1d:63:42:7a:d4:30:0e:c3:5b:bf:f4:22:31:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:58:23:08:C1:7D:E4:4E:3B:1A:E7:CB:ED:F8:51:60:98:4F:1D
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:81:d2:d9:1c:75:50:2e:a6:30:f4:f9:fe:c4:1c:b9:39:6a:
f9:5b:8d:e7:1f:db:1a:ff:a2:f2:45:30:d5:ae:59:79:e5:f1:
0f:d1:14:a2:c9:30:e1:85:09:5d:96:74:d5:fa:ff:cf:e7:3b:
5b:0d:91:6b:bb:c4:2d:75:71:8e:61:6d:5a:7b:95:46:27:cb:
bd:71:77:c6:ac:43:59:00:e6:68:bd:91:95:d4:db:a4:fb:b0:
f5:70:4d:0d:3b:f9:45:ad:89:32:d3:4d:b1:92:b2:4d:e9:b0:
7a:3e:d2:89:44:91:56:ac:dd:5b:21:06:41:e5:1c:55:b4:d2:
43:ac:2d:ae:e8:bf:17:c3:2a:2e:88:52:50:25:53:d7:5d:c0:
bc:58:6b:64:49:12:9e:b4:df:8e:0d:d9:fd:e0:d0:b1:5a:c0:
ef:03:ef:8e:a8:9e:72:4a:15:f0:0b:c8:17:a5:c3:e8:7e:16:
d9:63:16:2e:78:86:43:7c:b6:54:eb:20:3d:08:2f:cd:c7:c8:
93:24:0c:8d:93:31:fb:83:06:d3:4e:2d:97:11:3a:ad:3a:30:
f4:da:bf:0f:4f:24:07:98:91:d6:48:3c:57:be:e0:17:da:85:
db:b8:54:d3:fe:3e:bf:1e:a1:d7:35:41:fd:03:f4:80:af:94:
dd:8b:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:55:24 2026 by rpki-client