
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: mvH+RXB0DuMYCY9UxD8cXYlNgdO0ZnQRJJOtPX6Z+9s=
Subject key identifier: AE:D6:49:06:49:3B:90:EF:F5:B6:39:6C:8D:B5:09:A1:29:99:AB:CF
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 0869
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 0861
Signing time: Sat 28 Feb 2026 21:00:46 +0000
Manifest this update: Sat 28 Feb 2026 21:00:45 +0000
Manifest next update: Sat 07 Mar 2026 21:00:45 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: JyVT4VxM0JASPDdq5rs+mbSsYuXiyUf6JsUkUO8fbcU=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: FrUF8k+q0iQX/Bos2myD8zLROjp2eOpyug9lyw9AGzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153 (0x869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Feb 28 21:00:45 2026 GMT
Not After : Mar 7 21:00:45 2026 GMT
Subject: CN=69a3577d-0828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:b4:0a:9b:51:3d:45:1a:f1:b2:cd:cb:db:
3c:a2:80:6a:55:72:b3:01:17:e4:97:e2:fc:99:58:
d3:c7:7c:5c:40:1d:8b:52:73:cc:b6:76:70:a5:4b:
83:8d:8c:43:5d:ba:49:7b:7a:f0:49:9d:99:77:47:
24:76:26:93:41:82:cd:46:9f:18:0c:7c:0b:63:bf:
14:18:51:cb:7f:60:bc:7e:a6:f3:1c:da:8a:52:77:
6f:73:17:ae:47:af:96:6b:e1:ec:21:8c:4b:35:73:
1b:68:42:06:92:1d:04:70:7e:b5:1a:75:7e:56:68:
1b:4f:5d:f3:4e:78:0c:b9:ca:91:29:fd:19:a5:d2:
13:61:95:1b:7d:a3:dd:b8:eb:ee:bf:a8:a1:3a:fe:
40:5c:c4:5f:17:81:4b:f3:a3:92:94:ff:68:e1:70:
68:81:ab:b2:c6:56:d7:94:44:0e:a1:59:da:56:3f:
1f:a5:8a:b8:f9:c4:f2:a3:63:de:63:fc:ac:8e:e6:
b1:b5:ea:4c:e8:d5:0e:e4:06:9c:47:5f:53:4d:bb:
0b:b9:a0:47:24:6c:03:e3:d1:f5:82:28:68:18:1e:
98:93:eb:9f:fd:ed:1d:50:bc:3f:80:c0:c6:39:45:
a8:48:16:5e:01:57:33:23:94:ad:d7:6d:7f:ff:41:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:49:06:49:3B:90:EF:F5:B6:39:6C:8D:B5:09:A1:29:99:AB:CF
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:76:87:42:e8:f0:05:4e:06:c6:ee:22:80:75:10:6a:29:93:
a9:70:c5:27:15:01:7d:27:64:72:6f:8f:9b:90:52:68:ee:46:
73:40:14:e6:c7:ab:d8:da:77:05:97:80:60:6d:e6:a6:92:9f:
bd:6b:7d:4b:21:f7:5e:a4:50:fd:24:b7:4f:be:d2:13:c6:73:
36:1d:83:82:30:15:26:77:3f:27:80:bd:9a:4c:57:3b:27:b0:
01:3f:aa:df:91:94:65:e6:c6:e4:8a:0b:8f:fe:54:5a:43:91:
8d:a6:ea:87:d1:c7:03:1e:eb:ca:da:fa:18:b9:4e:d1:12:12:
c2:cf:a6:c8:50:86:42:d4:5d:43:51:55:26:31:76:da:0e:2d:
c6:9a:a7:78:e5:6c:44:c7:30:7b:1d:01:1f:b6:19:6d:2d:0c:
a1:72:66:f7:8c:9d:53:40:16:7e:19:1f:61:d3:27:5a:ba:ed:
ab:3c:1c:41:0d:a0:ae:a1:68:de:3c:3f:90:6f:3b:74:47:f8:
ca:f1:d3:02:17:4f:35:39:29:c0:f2:de:9f:1d:08:3c:a3:36:
3c:ba:09:74:a8:03:6e:af:f2:7a:b3:53:24:3a:d5:12:ef:80:
2f:2d:a5:fa:a0:1f:21:48:e8:28:d8:20:2e:8b:de:79:a5:b9:
d9:40:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:22 2026 by rpki-client