
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
File: LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json)
Hash identifier: kmCPUUWw83mf6rGTp88qgYaZ2SinUHXLYkDX8KNrW1w=
Subject key identifier: 7E:EC:6B:97:D0:EC:C5:71:87:6C:54:AE:A0:48:AA:CA:55:51:B1:D4
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 03C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
Manifest number: 033A
Signing time: Sun 01 Mar 2026 03:03:40 +0000
Manifest this update: Sun 01 Mar 2026 03:03:40 +0000
Manifest next update: Sun 08 Mar 2026 03:03:40 +0000
Files and hashes: 1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: /A0PEnJMRozQ052n2S6lV1KLEb3jTgdkpYzltOu0czg=)
2: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: AmuwqsBSe7hIWLuijSaz8cznV1ExxkSwedidAfhqBys=)
3: 755E6B82D21C11EEA166891AC4F9AE02.roa (hash: eOBcL+ti86qxxG4GZER5GjPBmSZhgS6o++eTvbnH834=)
4: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: f9Y4KKT04YRtMxokRyth+pMF9Ggb9NhSd3oXqBDwHfI=)
5: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: gDHotda1hxuaNQN7h9M6AxxJGfzXAR/0C3RpbJSgmtE=)
6: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: LLSWtZdvzPT4rXQVRRto3DLsyoR671syCJPRSB+ppjE=)
7: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: pHPkNw6sk+jwMGQiwSPICHgSAbGU9rT4WcKSGwmaJf8=)
8: E879EE7C144111EFB247B936C4F9AE02.roa (hash: kWS/r/1uvE2uh33BQhnK7TE/fxU21h0Qyka9IpjmAOo=)
9: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: l/w2LsKQqDZ2CCn5jWgOIAF0bJGTxkpNnwUlAl6Xl+Y=)
10: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: 2BRZTVSl8BpcjXe5d2W/ue5qmKPhQHNXNMprHWOL7Cw=)
11: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: rRStCv6LwOYU9m23O/Ra+02r0H7+4ZuKu4MCypTDG7U=)
12: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: dnj6MgMu2bT8eksz/sRKoRkxxyYLeHmRQBIr9G3sHfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 964 (0x3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Mar 1 03:03:40 2026 GMT
Not After : Mar 8 03:03:40 2026 GMT
Subject: CN=69a3ac8c-4a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:c4:d8:dc:3c:73:6d:74:c8:68:81:21:20:
82:49:98:9f:ee:14:a9:2b:de:00:a7:bd:36:cd:b1:
20:5a:2c:ae:4a:0c:ec:ac:40:89:69:10:8b:15:0e:
25:82:16:00:85:77:ef:52:8a:41:28:f6:a2:60:a4:
2a:50:c7:4f:b3:17:90:d9:f7:25:36:6e:1b:e9:8a:
39:73:51:12:1d:08:0f:98:c4:8c:27:9a:90:3a:8a:
bc:fe:7b:d0:3a:ab:a2:fc:80:b5:24:ff:42:d5:14:
86:bf:7d:4d:4a:65:52:80:94:8d:d0:d4:4d:ed:3f:
a8:b4:1a:85:f5:69:f7:ae:50:4f:b4:05:78:bd:3a:
f4:8a:ef:87:06:00:07:eb:2d:61:fc:ef:84:ec:88:
e5:b1:a2:8f:d3:1f:c9:b3:ff:9f:ce:91:32:d4:50:
94:e6:b6:ab:44:f9:7a:8b:b3:1e:a0:4a:30:35:fa:
5b:98:94:52:9d:40:98:03:72:b7:d3:44:86:24:28:
fd:6d:17:9f:17:7f:b4:6a:d2:43:e8:a1:40:c3:be:
a5:64:f9:19:ee:27:6c:8d:78:b1:5d:0e:e3:7d:ed:
73:12:22:5a:b7:08:b5:fe:c2:a3:ae:d8:5b:b3:17:
6b:68:fc:09:d9:10:72:75:4a:b8:9b:20:da:5f:37:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:6B:97:D0:EC:C5:71:87:6C:54:AE:A0:48:AA:CA:55:51:B1:D4
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9e:d4:71:9a:27:58:56:1c:73:2f:cd:2f:bb:a7:fc:06:85:
35:c9:41:d2:f4:2f:5a:3f:a5:ce:37:00:59:12:7d:7e:6a:c1:
e0:21:e3:66:b1:c8:ff:f9:43:24:18:58:04:08:3b:f6:d2:a4:
6d:d3:4d:80:c0:3a:f8:26:c8:d9:a9:da:01:69:24:d1:9d:1e:
f9:c5:a7:3c:43:4b:3d:23:46:9e:72:aa:3c:14:bb:d3:e3:63:
37:af:0f:f0:7f:88:0a:18:08:ce:7e:38:f9:a8:95:d3:8a:6e:
62:93:1b:2b:5f:df:fe:87:be:fa:84:1e:89:a0:b2:4e:fa:1e:
4a:05:13:ca:84:89:e7:a2:b9:94:d5:71:c5:f8:ef:ed:c0:c3:
03:02:4d:e8:7a:4f:a5:66:2e:c4:46:2d:7d:21:c6:59:41:a3:
3a:06:66:63:f8:1e:d0:2e:01:3e:5f:42:8a:e9:e0:c4:01:ea:
58:ff:39:88:23:4f:33:1a:85:ac:96:f2:1b:57:16:e6:2a:9a:
e6:b3:6e:49:0b:de:ee:85:a7:82:3a:3c:a9:14:91:fc:47:ca:
a7:e0:01:7a:95:b8:b5:36:dd:f7:dc:ee:0f:c7:a7:02:ba:d2:
07:13:68:9d:ad:27:fe:c1:c6:5c:32:fe:4d:f1:e7:0d:cc:4d:
2e:8b:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:44 2026 by rpki-client