
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
File: LZqjsNhdis2WNSgFXHSHpmkEyHk.mft (raw, json)
Hash identifier: iuCktxHxMhnbqhUqyz3ekPYKoOEosm7eA7WMo6n+jWw=
Subject key identifier: 9C:76:D0:34:1A:CF:E8:DE:6B:B5:C7:72:A4:CD:F7:90:88:42:17:A8
Authority key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
Certificate issuer: /CN=A91CD883/serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
Manifest number: 1F
Signing time: Wed 17 Jun 2026 09:04:00 +0000
Manifest this update: Wed 17 Jun 2026 09:03:59 +0000
Manifest next update: Wed 24 Jun 2026 09:03:59 +0000
Files and hashes: 1: LZqjsNhdis2WNSgFXHSHpmkEyHk.crl (hash: HS3vt9sTiODs2A74WxmW2uAx+ag1DEnjyeamiCYIARc=)
2: FFF0486A3D7C11F1AE97A9BABA833773.roa (hash: 8PBVOn5rHRwK4EpJUtLvYRy9A1Nxp+wwyWqks95ix4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Validity
Not Before: Jun 17 09:03:59 2026 GMT
Not After : Jun 24 09:03:59 2026 GMT
Subject: CN=6a326300-76da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:5b:37:7e:42:22:fd:b8:58:df:c4:ed:14:
f2:ba:d8:1b:e3:46:2e:21:ef:fc:b5:0e:5d:7e:c7:
56:84:a8:17:d6:c4:a6:56:35:b6:33:41:b6:81:ba:
e4:4d:4c:01:40:78:a5:74:65:1a:9e:2f:e4:a6:0a:
4f:f5:cd:cc:59:ef:3d:7c:2b:47:a4:9e:61:6e:fa:
97:10:be:fa:91:05:5f:1b:f5:d7:b3:9d:fe:77:e2:
38:5d:4e:96:1b:59:61:e1:17:f1:53:e7:be:90:4d:
c8:05:1d:14:9e:bd:95:fb:2e:2b:c0:2b:9d:a9:90:
97:c7:ae:ce:97:80:62:c7:77:a2:3a:14:0f:39:ad:
e3:24:3c:10:97:1f:2a:9f:8d:98:45:d7:08:a4:4e:
04:64:b7:3d:9a:07:d1:09:49:d4:73:12:c8:e6:1a:
88:94:2f:d5:06:01:68:14:99:59:71:86:db:4e:36:
85:49:a4:50:7a:d7:0c:d0:1e:e6:fa:86:83:2e:1e:
34:56:1b:fe:f4:b2:f9:a2:52:83:c6:06:9e:f0:f9:
a3:91:eb:08:fa:8d:10:ec:c6:c6:1e:1e:52:52:20:
f3:66:9f:d1:ed:2b:23:e7:2f:16:41:cd:f3:30:01:
7a:67:21:46:4d:5a:e1:f1:0f:fb:3c:a9:b2:49:d4:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:D0:34:1A:CF:E8:DE:6B:B5:C7:72:A4:CD:F7:90:88:42:17:A8
X509v3 Authority Key Identifier:
keyid:2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:95:1c:15:2b:61:15:5f:bf:06:d8:c1:d6:95:ef:12:bb:03:
79:ba:9f:a9:aa:e7:02:a0:f8:d6:20:20:c0:c3:48:8e:53:49:
53:de:3d:2d:57:63:bd:fd:57:7d:8f:6e:98:d3:fe:3d:fd:f3:
c9:c0:60:a7:07:2d:fb:bf:cf:2c:a6:12:50:59:8e:81:0d:d8:
23:b7:9b:8d:09:e9:83:3d:5f:e0:3f:49:d0:60:a2:10:d2:bf:
e6:62:4d:96:91:dc:e2:da:06:48:42:f8:7b:76:a5:19:db:05:
21:9d:d4:be:77:ef:1b:6c:5e:08:d7:27:b5:99:50:a1:21:24:
fa:b0:40:50:77:3a:ac:34:68:d6:0b:47:14:cf:f3:a6:85:e9:
18:73:67:bf:30:bd:5d:59:46:dd:28:32:ea:0b:18:af:21:d8:
f8:86:ce:c4:15:5d:20:a4:63:f6:ea:91:3c:32:15:a7:66:15:
55:07:91:f9:37:36:44:04:94:6b:37:de:b2:38:86:b4:ef:66:
17:78:98:41:40:3f:82:f9:54:bf:7d:28:d6:e8:33:51:d8:08:
8d:a9:e0:fa:07:28:d8:68:f8:f5:95:23:44:77:32:21:41:21:
a7:49:8f:d8:9a:dc:e9:a9:4b:d9:92:d2:ca:bc:a9:97:32:52:
09:70:c0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:33 2026 by rpki-client