
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json)
Hash identifier: nRwVeOB7aSLsCbcCE57v8M6w6hr12Qf6kAzuSqXvu08=
Subject key identifier: 74:DA:B7:B9:63:69:C1:E0:EE:D1:36:07:9D:FA:49:59:C0:07:D1:8D
Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Certificate serial: 0C46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
Manifest number: 0C29
Signing time: Fri 12 Jun 2026 18:48:38 +0000
Manifest this update: Fri 12 Jun 2026 18:48:37 +0000
Manifest next update: Fri 19 Jun 2026 18:48:37 +0000
Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: GdCo4WeLoNV0df3J6Ce0ufv+bXUOHScPfhClIs4nOLQ=)
2: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: 1aYucsJJizOrJGwERLeDG0d5XIi/bHOIooEKsMrUEo8=)
3: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: QfT2Eaqv5QPDrORQi1WneHGHYWsLdTVYS3iMbBaZBv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3142 (0xc46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Validity
Not Before: Jun 12 18:48:37 2026 GMT
Not After : Jun 19 18:48:37 2026 GMT
Subject: CN=6a2c5486-b6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:4b:06:f2:b2:56:a5:c5:3c:8d:c2:af:17:
8c:e6:51:65:52:de:de:0d:3b:f0:70:9a:41:4b:b2:
7d:6e:01:f1:46:dc:46:2b:7d:35:ed:0d:5a:0e:f7:
7a:65:35:4a:b5:99:3d:77:5c:c7:cb:9c:e4:aa:01:
39:80:f1:a8:54:b6:01:ba:a7:b9:93:a3:ea:44:11:
29:94:c9:8f:44:5a:ee:2b:ea:45:4f:f5:68:15:3c:
0a:01:ee:59:d4:99:db:c8:e8:fc:ee:3d:b1:2f:58:
c8:6a:93:34:e1:42:f6:89:07:ee:41:0a:5f:3a:6e:
55:56:45:16:76:87:7e:42:92:83:51:77:c7:c1:2a:
0c:aa:23:05:1e:e6:3f:39:e2:25:fb:67:4b:b3:6f:
01:16:d4:1a:04:9a:40:3f:78:6b:98:80:0b:cc:d0:
24:61:8d:ee:02:d5:ae:82:4e:ae:a8:d2:84:0f:c9:
5a:38:84:c0:a5:9e:7d:9e:dc:37:4c:c2:f6:01:4b:
e3:41:d7:4e:3a:cd:6b:fa:d7:0f:e7:d4:60:37:0b:
de:1d:ff:dd:d3:de:d2:33:bc:d2:ab:92:30:ef:79:
2c:8c:3a:ce:b8:69:90:71:e2:bc:b3:f8:34:c2:d7:
b6:f6:a4:e4:16:ba:b3:05:fe:25:fa:68:89:0d:8d:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:B7:B9:63:69:C1:E0:EE:D1:36:07:9D:FA:49:59:C0:07:D1:8D
X509v3 Authority Key Identifier:
keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5e:61:a2:87:01:11:99:fe:da:81:d0:49:ff:ac:53:30:92:
1c:53:f9:4e:90:fd:ad:e4:e1:01:e9:e7:29:f7:b3:98:fd:15:
33:03:ad:f6:bd:8b:ae:0c:bd:26:5b:0f:7b:62:38:01:59:2d:
59:94:37:8f:c7:ef:90:c3:d3:e4:6e:91:ab:93:e2:8b:48:42:
8c:6a:29:0f:dd:70:9e:00:a0:e9:47:55:36:03:00:9d:d1:2b:
80:96:0d:e6:9d:5c:ab:fd:d9:58:7a:79:05:45:42:3d:f4:5f:
3e:d5:4c:d6:77:36:ee:14:0b:94:0f:76:bc:6d:3f:ce:28:b8:
71:0b:10:52:d9:88:19:92:a4:a9:f2:62:a3:ce:f8:60:2d:9c:
ec:f5:4c:28:8f:d3:de:73:58:71:50:82:6e:bf:fa:22:78:c1:
63:e7:fc:ed:0d:8c:8e:e5:28:83:85:4e:8a:cb:31:52:2f:dc:
15:e6:42:32:bb:70:19:9a:f0:ca:9c:95:8c:0f:e4:a5:ce:5c:
90:42:fa:e2:c2:46:d5:97:eb:8f:84:ce:eb:3e:f2:c4:b5:3f:
bf:47:ef:34:0b:2f:25:53:07:04:e3:79:66:9b:b7:22:60:d1:
98:92:d8:f4:dd:f6:f5:ef:92:c8:e1:2b:8d:84:1c:91:b0:d0:
4f:bd:76:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:09:06 2026 by rpki-client