
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
File: LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json)
Hash identifier: hOeYWou2JrXwXdqLFscWhxB2Ry583+SQIo9nKhrUmWk=
Subject key identifier: 5E:3D:1C:AD:63:63:FF:06:D9:68:56:04:1C:4E:4C:39:1B:42:59:B6
Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
Certificate issuer: /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
Manifest number: 0121
Signing time: Sun 01 Mar 2026 06:42:21 +0000
Manifest this update: Sun 01 Mar 2026 06:42:20 +0000
Manifest next update: Sun 08 Mar 2026 06:42:20 +0000
Files and hashes: 1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: J5jXQPzKuEUx3QlYU/iNX4OyehNX0Pz+wQrLg5WMTxk=)
2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: Z8UDv1UV/5P3Y0FPBjtW9ftg+P9GP6R45lfE98ZqVpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Validity
Not Before: Mar 1 06:42:20 2026 GMT
Not After : Mar 8 06:42:20 2026 GMT
Subject: CN=69a3dfcd-cf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:a5:9c:84:ec:c2:f4:c5:0f:fa:75:4b:04:
bd:14:04:4e:52:17:91:9c:44:04:c3:3d:ec:78:aa:
d6:71:81:00:db:a6:27:a5:a3:e8:34:3d:0f:83:b4:
a5:ea:e5:62:f4:4f:e2:a8:f3:d4:16:9a:72:ef:27:
4e:b1:a5:ed:d2:91:25:5f:8a:4d:04:15:c5:d0:6f:
a4:2a:40:2c:c7:06:40:51:6d:f4:33:be:55:34:35:
eb:50:45:ea:89:cd:e5:1e:3d:e8:42:ed:4d:ba:7f:
e5:d9:c8:80:05:12:88:ed:be:75:b5:c9:73:57:f9:
06:a1:97:34:97:10:80:9b:71:55:79:46:cc:4a:55:
b2:13:4d:1d:a9:52:12:32:d7:12:52:7e:a7:6c:49:
15:5e:66:36:a6:32:e9:c7:5e:4d:87:19:54:1c:d4:
6e:c3:97:e1:ac:da:2b:c3:13:a3:49:2b:00:d1:0f:
b4:d7:93:af:7f:b9:b1:da:77:88:cb:32:29:60:92:
78:7a:39:c1:51:9d:31:71:15:9f:79:a5:f4:ba:11:
cb:04:e0:5f:21:b8:6e:6c:09:d5:39:14:5b:48:0c:
18:b6:df:bc:da:33:de:1a:c0:13:59:1b:35:10:5e:
78:f1:f3:c8:0e:28:1f:03:34:fe:67:df:13:11:07:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3D:1C:AD:63:63:FF:06:D9:68:56:04:1C:4E:4C:39:1B:42:59:B6
X509v3 Authority Key Identifier:
keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:70:f8:50:08:94:90:32:b0:31:65:01:aa:e0:45:24:5f:b3:
56:78:f1:1a:82:5f:40:72:d8:52:12:7a:04:97:76:7e:d8:36:
be:94:db:e0:8f:d2:2a:18:02:89:2f:c8:2b:25:fe:76:a8:06:
16:3c:73:3f:d0:b2:17:ed:53:d3:27:bf:55:46:f3:6d:63:a2:
d8:ae:e6:47:46:e1:6a:a4:75:99:ce:f5:4f:bd:25:f1:6d:fd:
63:84:4b:9d:9d:a6:2e:69:ab:d1:23:96:17:65:08:ab:86:bd:
f0:c3:db:74:95:05:db:d3:92:bc:83:62:d6:60:24:d9:35:a8:
fa:1d:38:5b:9a:8d:33:6c:ac:84:ea:73:7f:66:4b:51:ca:dd:
80:6e:fb:03:63:d8:55:47:10:dc:78:eb:7d:3c:44:b1:26:2e:
4e:80:c4:a9:bc:7d:16:e7:84:78:a1:d7:30:ca:cb:e3:2b:98:
db:0b:88:36:eb:08:03:e9:bf:1e:42:41:5b:c7:e1:01:c6:a4:
3e:08:a3:a0:82:34:49:be:c2:38:76:a2:9d:81:f5:1d:16:8d:
f3:f9:e9:f5:f4:c4:06:6c:b0:cd:ab:7f:88:f4:91:71:fc:d4:
cb:3d:14:18:3b:5c:d1:e6:7a:a7:49:40:20:04:f1:b5:28:8e:
49:d4:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:04:12 2026 by rpki-client