
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json)
Hash identifier: l2r26SaaGbLUlgT/rM8eiHSutdgLjy/+pIGCwyQeqvE=
Subject key identifier: 8A:4D:89:CC:D1:2F:13:24:BB:A3:AD:26:41:48:AB:92:6D:4D:E0:B5
Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70
Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
Manifest number: 0227
Signing time: Fri 17 Apr 2026 02:28:30 +0000
Manifest this update: Fri 17 Apr 2026 02:28:29 +0000
Manifest next update: Fri 24 Apr 2026 02:28:29 +0000
Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: 7jaqw+i4nE9qzJZUsOMvlVR4KVtglf93lCSRP29QVQs=)
2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: TRCit7S/Vg6OV4lqP74PVauh5l5sCF/UMjkzMFmjRuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl
rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
Validity
Not Before: Apr 17 02:28:29 2026 GMT
Not After : Apr 24 02:28:29 2026 GMT
Subject: CN=69e19acd-1306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:82:2e:60:ec:e2:be:c2:f2:df:f7:ae:30:
d6:00:36:1e:81:86:7f:ad:5e:ec:ea:b8:82:21:3e:
f9:7c:c4:30:36:f7:e2:c0:5e:32:ac:13:54:7a:5d:
f5:ef:61:20:85:a9:c7:a5:54:ff:39:0a:a6:33:84:
ed:6f:bb:21:2d:64:7e:89:76:c0:d7:b5:00:b3:36:
c3:07:1b:f9:4f:a7:fd:dd:5e:75:16:1b:89:ab:50:
bd:68:c2:51:ce:a8:7c:fc:1e:d7:1a:c1:48:7c:cd:
a4:b1:30:43:98:54:eb:56:7f:3d:67:d1:3a:62:a1:
0e:29:a3:59:9b:8a:d5:d9:38:2f:15:b3:7e:41:ef:
7b:2a:f9:7e:97:48:40:22:f3:d5:13:6d:cc:a9:b0:
74:30:75:74:64:ef:11:55:02:60:1a:2d:19:6d:1c:
5f:9a:6e:a6:b1:da:3e:7e:65:48:d2:57:29:eb:89:
d4:9a:6b:98:3e:b8:98:d6:77:5d:8b:3f:20:be:36:
0d:0a:cd:cd:db:bb:60:2d:a7:4e:fa:e4:7c:56:c5:
e4:ad:41:e7:0f:26:e4:26:38:78:2e:df:78:88:91:
65:80:31:cd:d7:33:33:89:af:a0:c3:c9:3d:7e:c8:
57:5e:39:91:e5:d7:7b:12:88:89:ad:45:9c:85:b0:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:89:CC:D1:2F:13:24:BB:A3:AD:26:41:48:AB:92:6D:4D:E0:B5
X509v3 Authority Key Identifier:
keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:60:e0:59:4e:a3:97:05:ab:74:cf:68:54:4c:e5:07:01:77:
3f:96:c2:78:9c:55:60:ca:33:9e:4f:39:9e:24:a3:dc:7b:79:
5e:b0:ad:2e:ae:6b:ad:06:a9:a4:5a:78:0c:76:46:c1:ae:f8:
13:93:45:16:54:e5:52:32:e1:dd:b3:a0:c2:75:e8:58:39:ca:
b9:d1:01:50:81:23:60:24:e5:9b:7e:7a:86:12:99:b8:60:76:
7a:35:fc:01:72:0f:aa:89:91:b2:4b:7f:5c:8a:08:9e:f3:ae:
f5:55:ba:a0:35:20:64:6d:a8:01:42:7f:14:ff:19:4f:c4:49:
c4:0e:89:d3:e8:78:ce:20:8f:64:d4:76:c2:c8:33:7b:f5:2a:
36:fd:68:2c:54:03:1a:06:94:a7:ea:40:98:2a:d4:a7:cd:21:
dc:bb:3f:53:e1:40:93:57:40:30:71:a1:b8:fe:41:e0:2b:f5:
63:fa:e2:2a:93:78:3d:45:1a:a9:e3:9a:35:d3:66:11:68:35:
00:2b:1a:df:b1:da:51:54:c3:51:64:6a:ee:1d:fb:11:61:82:
b3:21:a0:c4:16:88:d9:05:fc:bb:7b:b1:c5:19:be:61:2a:e2:
13:88:05:d7:cb:73:c2:ae:bf:53:35:b3:75:9d:52:9e:38:c7:
d2:9a:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:20 2026 by rpki-client