
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: 5OZb4GIsSnk1Bcg4M6yTGjfhkz9e1VuzSc8kV1RSeWE=
Subject key identifier: EE:63:3F:0B:11:DA:AC:37:0B:4E:F9:33:DE:C5:1A:E5:F8:2B:4B:DC
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 0885
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 087B
Signing time: Thu 16 Apr 2026 20:31:30 +0000
Manifest this update: Thu 16 Apr 2026 20:31:29 +0000
Manifest next update: Thu 23 Apr 2026 20:31:29 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: 5mGPMsjNnM/5nRtSJXTYdM4HitnMKb7G+6Cwgo7cy0I=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: 3luUYeTT67yCKVIevcEjzS34/Ev6QIZEGseKDtPOfG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Apr 16 20:31:29 2026 GMT
Not After : Apr 23 20:31:29 2026 GMT
Subject: CN=69e14722-dc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:d0:cf:81:d2:9a:16:43:6f:e4:c3:0d:bd:
1f:e5:00:d3:a4:55:80:5a:ef:bd:5f:36:96:4c:cd:
0b:b0:fe:be:19:09:8b:b4:fd:c1:f8:a7:63:91:3f:
01:11:2b:22:2f:3f:af:0c:07:68:45:6e:4c:46:2a:
e8:7e:07:b4:76:d8:d0:0c:87:e0:ca:92:de:f7:34:
3b:3a:09:2c:ac:ad:f2:65:93:4e:a4:11:12:10:b3:
56:7e:61:5a:a8:de:88:6c:81:fe:3f:a2:70:97:19:
8f:28:26:74:83:aa:0e:ef:7e:ec:36:20:ae:2c:1f:
ea:da:0d:dd:5d:31:5c:4e:ee:f7:7e:01:38:18:ef:
38:e9:15:a2:48:c3:a2:d5:de:50:c0:d4:00:99:c5:
1f:19:a4:71:cc:e0:d3:bd:7e:dd:a7:79:e2:f9:19:
ad:bb:99:3b:7d:ca:dc:1c:76:76:b6:c0:e7:f6:48:
90:f7:73:ee:c1:f8:5d:47:18:57:35:b0:2e:75:4a:
b5:06:06:50:b4:71:86:be:f1:be:5b:6c:f5:a1:7c:
2b:ae:4a:e4:af:29:0b:18:3e:ac:ce:ed:c3:4d:8a:
43:4c:97:68:a9:3c:df:fb:ec:e6:a3:49:83:e8:5b:
6b:44:fd:42:7e:53:25:34:bf:09:df:23:a7:a3:60:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:63:3F:0B:11:DA:AC:37:0B:4E:F9:33:DE:C5:1A:E5:F8:2B:4B:DC
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e9:09:96:ac:a4:4a:bf:39:26:57:5b:9f:08:1b:8e:34:63:
69:51:8a:4e:ca:d2:2e:44:2f:2c:f2:ca:e6:2d:7d:0a:2a:d2:
ff:c0:78:ba:a8:9e:10:67:94:66:92:33:73:c3:35:78:fb:bd:
0b:cb:ae:2c:ea:c1:67:8d:7e:96:2f:d3:b7:2f:4b:3d:f6:ed:
21:4b:5a:7f:11:b7:7e:1c:77:f5:35:fc:42:d1:1a:4a:ec:07:
49:0a:4d:38:9f:ca:cc:8d:82:56:b6:28:ba:17:d7:cf:67:30:
54:f1:7b:87:4d:ae:e8:90:a2:67:88:77:05:00:b0:69:06:7f:
d7:51:13:c0:4f:96:0e:f4:d2:f6:af:ef:30:5e:cf:8f:39:4e:
5a:76:0c:99:b5:64:84:11:11:da:39:7e:61:4a:51:49:4c:e4:
bb:ea:05:6a:65:43:1a:5c:10:b9:c4:71:34:9c:c4:f4:d7:72:
b0:ff:60:46:48:d6:46:7f:43:1f:b2:d5:ff:73:7a:f5:96:ad:
36:d8:d4:d8:ee:82:ad:8c:6c:61:b4:a8:f0:d0:f9:19:9c:a1:
27:fa:53:32:24:d5:74:83:f6:27:7b:8e:61:60:e9:01:33:58:
72:05:b8:07:c3:7d:dd:e6:fb:a7:36:ee:8c:8f:d3:3e:f7:bd:
5d:b9:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:16 2026 by rpki-client