
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
File: lpDF1gn85ELDW5kW1WP58Ye2itQ.mft (raw, json)
Hash identifier: ULMMKY+I9p4Gcm6hi6Zj30U+j2SBRlNTiczmmeJMwTM=
Subject key identifier: 71:B3:7C:1C:6A:CC:D0:CB:C5:C0:01:E4:70:FC:E0:E4:16:2A:F6:AC
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Certificate issuer: /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial: 0F03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
Manifest number: 0EF9
Signing time: Fri 12 Jun 2026 17:35:52 +0000
Manifest this update: Fri 12 Jun 2026 17:35:52 +0000
Manifest next update: Fri 19 Jun 2026 17:35:52 +0000
Files and hashes: 1: lpDF1gn85ELDW5kW1WP58Ye2itQ.crl (hash: D6Rb7C6ubDk6pCYK2oWTQgkYZxITHBo2J2bttei7YN4=)
2: 6C153768CE5511EB9DD80C30C4F9AE02.roa (hash: 8GXHkMu5QhzxhDcgK/hTob055OzXskK4SzGbgPUovhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3843 (0xf03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Validity
Not Before: Jun 12 17:35:52 2026 GMT
Not After : Jun 19 17:35:52 2026 GMT
Subject: CN=6a2c4378-6168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:58:1a:50:20:47:a3:44:37:29:0d:14:f4:
f5:2b:e1:2e:38:5b:33:12:5d:a2:13:95:cc:a8:fd:
da:5e:43:ef:c1:ac:d6:4a:4d:ad:5a:46:4b:7e:ad:
e0:fc:ef:ff:01:3f:0f:b0:49:03:bc:7b:49:19:e8:
aa:49:e1:0f:e6:20:ad:6b:7e:c9:aa:6a:8f:2f:2e:
fc:f7:80:f6:1b:0b:5c:0d:12:7c:03:6d:15:0e:8a:
80:e7:19:1c:f9:ad:67:26:5c:2f:14:b5:e3:ed:b4:
1f:7a:20:6f:8d:09:e7:92:a1:08:f3:a7:68:a3:53:
ac:0c:14:94:ed:18:50:68:0f:40:c9:9a:e7:42:bb:
14:2e:f5:9a:71:54:3a:04:50:79:fe:a7:45:57:f8:
12:f8:47:89:13:2e:9c:07:9b:6f:ce:67:48:cb:e7:
26:4c:b6:9d:d5:aa:d2:5d:48:aa:63:a7:6a:90:fe:
c0:9e:f0:42:1b:e9:03:74:00:f8:11:ba:db:c8:58:
28:0b:2d:b3:9f:db:af:0c:7a:11:6a:94:70:89:e0:
b7:47:0b:bd:1c:89:57:6c:c0:bd:2d:ac:c6:37:28:
92:14:48:9b:6f:ef:9e:b8:2f:6d:06:f2:6c:ed:03:
f5:bf:8b:d3:43:30:04:fc:3a:ad:2a:82:ab:36:97:
02:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B3:7C:1C:6A:CC:D0:CB:C5:C0:01:E4:70:FC:E0:E4:16:2A:F6:AC
X509v3 Authority Key Identifier:
keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:e0:96:01:5d:33:e3:ef:b8:63:96:04:bd:4a:7b:ed:e4:
75:1f:b3:1e:67:df:eb:91:42:fc:ab:03:28:d6:aa:5d:9f:42:
89:24:e8:eb:52:d5:57:0d:ee:18:50:99:86:71:4a:7d:0b:c0:
2a:bf:a9:d9:7f:07:ce:22:0e:3a:c8:51:cd:61:9a:43:e3:43:
e9:3c:03:d2:04:a3:d4:51:96:1b:9f:9a:c5:a7:91:6e:09:e0:
76:bf:d9:a1:c6:42:01:31:af:4a:11:48:c8:d8:fa:a9:1a:02:
8d:18:bd:8e:8d:62:98:0a:22:53:b3:8d:a2:1e:68:d2:ef:50:
50:5d:03:09:15:95:03:9b:93:5c:01:c7:f8:49:01:28:c4:f4:
bf:b2:0d:f1:5b:3c:05:a5:df:f3:8f:37:07:76:d2:b1:a6:bb:
15:d7:4e:bf:2f:54:cf:1b:3f:fb:3a:bd:46:63:dc:39:8b:86:
3f:60:4e:16:24:f8:fc:64:80:31:68:47:f7:af:b8:40:22:97:
f5:82:a1:8c:6e:8a:b2:07:54:ef:a2:1f:dc:5a:74:7f:60:fe:
a0:ad:5d:1d:f3:36:cc:26:f8:b9:cc:5c:5e:df:c1:ca:df:49:
68:cc:75:eb:5f:8e:27:13:11:8c:31:b3:5a:19:dd:d3:b3:3e:
c9:8a:7c:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhFMkMxMTAvBgNVBAUTKDk2OTBDNUQ2MDlGQ0U0NDJDMzVCOTkxNkQ1NjNGOUYx
ODdCNjhBRDQwHhcNMjYwNjEyMTczNTUyWhcNMjYwNjE5MTczNTUyWjAYMRYwFAYD
VQQDEw02YTJjNDM3OC02MTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7pYGlAgR6NENykNFPT1K+EuOFszEl2iE5XMqP3aXkPvwazWSk2tWkZLfq3g
/O//AT8PsEkDvHtJGeiqSeEP5iCta37JqmqPLy7894D2GwtcDRJ8A20VDoqA5xkc
+a1nJlwvFLXj7bQfeiBvjQnnkqEI86doo1OsDBSU7RhQaA9AyZrnQrsULvWacVQ6
BFB5/qdFV/gS+EeJEy6cB5tvzmdIy+cmTLad1arSXUiqY6dqkP7AnvBCG+kDdAD4
EbrbyFgoCy2zn9uvDHoRapRwieC3Rwu9HIlXbMC9LazGNyiSFEibb++euC9tBvJs
7QP1v4vTQzAE/DqtKoKrNpcCUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGzfBxq
zNDLxcAB5HD84OQWKvasMB8GA1UdIwQYMBaAFJaQxdYJ/ORCw1uZFtVj+fGHtorU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEUyQy8wRkUxRUQwNkEy
RkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVFTERXNWtXMVdQNThZZTJp
dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xwREYxZ244NUVMRFc1a1cxV1A1OFllMml0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEUyQy8wRkUxRUQwNkEyRkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVF
TERXNWtXMVdQNThZZTJpdFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABBPglgFdM+PvuGOWBL1Ke+3kdR+zHmff65FC/KsDKNaqXZ9CiSTo61LVVw3u
GFCZhnFKfQvAKr+p2X8HziIOOshRzWGaQ+ND6TwD0gSj1FGWG5+axaeRbgngdr/Z
ocZCATGvShFIyNj6qRoCjRi9jo1imAoiU7ONoh5o0u9QUF0DCRWVA5uTXAHH+EkB
KMT0v7IN8Vs8BaXf8483B3bSsaa7FddOvy9Uzxs/+zq9RmPcOYuGP2BOFiT4/GSA
MWhH96+4QCKX9YKhjG6KsgdU76If3Fp0f2D+oK1dHfM2zCb4ucxcXt/Byt9JaMx1
61+OJxMRjDGzWhnd07M+yYp8Cw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:16:43 2026 by rpki-client