
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
File: 9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json)
Hash identifier: P4zHtKvUnzDFLlKYq7eOaH26ZtPYlv43Jl+N7fR6KJY=
Subject key identifier: B1:CE:E9:61:F1:C0:CB:84:3E:CF:83:8C:85:3C:79:6A:36:EC:3C:98
Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Certificate issuer: /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
Manifest number: 01D7
Signing time: Fri 17 Apr 2026 03:18:02 +0000
Manifest this update: Fri 17 Apr 2026 03:18:01 +0000
Manifest next update: Fri 24 Apr 2026 03:18:01 +0000
Files and hashes: 1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: EnZPq3wtbz1yikwb2ylVPOx2rdzQrWwfKebnKqPKcPM=)
2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: 8cmE8F4UCrlxdeOGd34FNofKondX/VjcSsTipjEaDj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Validity
Not Before: Apr 17 03:18:01 2026 GMT
Not After : Apr 24 03:18:01 2026 GMT
Subject: CN=69e1a66a-ff45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:26:58:31:47:83:77:77:6f:bf:53:aa:c9:
d7:95:90:e7:c2:be:f2:18:02:17:a3:e9:b5:e5:16:
fc:0b:ba:23:80:57:28:8a:33:4c:ca:21:01:00:8e:
77:96:0f:b8:17:8a:47:89:d1:87:67:b4:5f:84:70:
c7:63:a5:8d:71:1e:be:ae:a1:4e:b3:1a:bf:70:6d:
c2:fd:2d:02:61:88:86:e7:48:f6:40:ff:be:cc:88:
cd:2b:7b:fb:25:90:35:da:19:41:ab:15:3e:76:a3:
2b:0b:7d:4b:49:1d:02:c7:89:ac:7e:51:3f:48:4c:
13:a0:83:40:bd:3d:11:3e:b7:7a:12:01:aa:ac:2f:
30:6a:26:e4:f5:97:75:18:ea:59:c3:6b:57:02:98:
7e:db:1b:04:55:c5:74:a0:11:5a:62:16:75:be:ec:
3a:6c:70:43:35:02:04:cd:a1:6f:05:df:9b:6a:23:
14:48:d1:97:4f:83:8a:84:9b:dc:db:96:cf:8e:83:
9b:f6:cf:a5:12:64:3e:78:27:47:9b:17:14:a6:02:
bb:05:45:77:77:32:48:5e:9a:02:a8:18:05:82:35:
f8:3e:f4:30:4a:a3:a9:3b:a3:83:0c:a8:c9:ca:12:
5b:62:f5:97:73:bf:43:5e:f1:11:cd:83:2f:2c:d7:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:E9:61:F1:C0:CB:84:3E:CF:83:8C:85:3C:79:6A:36:EC:3C:98
X509v3 Authority Key Identifier:
keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:7c:e6:1a:c9:0a:d0:8e:50:7a:c3:a7:de:24:0c:e6:24:f5:
36:64:f5:4a:54:6d:cd:23:8f:90:86:a7:31:ee:bb:5e:c7:c8:
06:6b:51:d0:2e:b2:00:cd:1a:03:b0:23:68:51:95:20:31:4b:
20:92:97:57:2e:c5:20:97:03:1c:3b:4b:e0:70:fe:1e:3d:49:
bd:c2:80:22:9d:96:b0:da:87:b2:f4:52:08:03:50:8c:39:d7:
c3:d2:ef:07:d8:18:41:80:c8:d9:31:3f:0a:7c:46:3e:a7:09:
93:1d:e0:70:23:65:d8:13:e3:f8:79:03:8f:9d:85:ec:9b:fd:
38:48:95:e7:f1:ea:f9:ab:f9:0e:ba:d4:31:a2:73:a4:8b:9a:
63:42:25:47:f8:29:bb:7b:be:cc:ef:a9:57:84:d4:69:49:bf:
c5:f4:69:39:83:05:ad:fa:ed:a9:86:9e:b3:96:31:e9:e4:fd:
65:24:e4:a8:f4:91:5a:bf:2c:7e:f9:26:c3:2a:d9:25:89:e1:
fc:4d:52:1f:73:71:62:d4:98:31:be:9d:6a:a8:a0:d8:a3:d0:
8c:06:5e:9a:ca:58:84:4f:53:40:be:4d:3b:27:3b:92:5c:73:
89:7a:fa:3e:e6:16:36:ba:a8:d9:5d:5f:b0:33:34:96:c7:81:
0f:39:38:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ1NUIxMTAvBgNVBAUTKEY1NDRFNkZFRUEwRkU2QjlERjdCMURBM0Q5QTU5MkZD
QjhBQ0E2MjkwHhcNMjYwNDE3MDMxODAxWhcNMjYwNDI0MDMxODAxWjAYMRYwFAYD
VQQDEw02OWUxYTY2YS1mZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzHEmWDFHg3d3b79TqsnXlZDnwr7yGAIXo+m15Rb8C7ojgFcoijNMyiEBAI53
lg+4F4pHidGHZ7RfhHDHY6WNcR6+rqFOsxq/cG3C/S0CYYiG50j2QP++zIjNK3v7
JZA12hlBqxU+dqMrC31LSR0Cx4msflE/SEwToINAvT0RPrd6EgGqrC8waibk9Zd1
GOpZw2tXAph+2xsEVcV0oBFaYhZ1vuw6bHBDNQIEzaFvBd+baiMUSNGXT4OKhJvc
25bPjoOb9s+lEmQ+eCdHmxcUpgK7BUV3dzJIXpoCqBgFgjX4PvQwSqOpO6ODDKjJ
yhJbYvWXc79DXvERzYMvLNfWVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHO6WHx
wMuEPs+DjIU8eWo27DyYMB8GA1UdIwQYMBaAFPVE5v7qD+a533sdo9mlkvy4rKYp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU1Qi84RjQzNDlDODZE
NzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVybmZleDJqMmFXU19MaXNw
aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlVVG1fdW9QNXJuZmV4MmoyYVdTX0xpc3Bpay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDU1Qi84RjQzNDlDODZENzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVy
bmZleDJqMmFXU19MaXNwaWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARXzmGskK0I5QesOn3iQM5iT1NmT1SlRtzSOPkIanMe67XsfIBmtR0C6yAM0a
A7AjaFGVIDFLIJKXVy7FIJcDHDtL4HD+Hj1JvcKAIp2WsNqHsvRSCANQjDnXw9Lv
B9gYQYDI2TE/CnxGPqcJkx3gcCNl2BPj+HkDj52F7Jv9OEiV5/Hq+av5DrrUMaJz
pIuaY0IlR/gpu3u+zO+pV4TUaUm/xfRpOYMFrfrtqYaes5Yx6eT9ZSTkqPSRWr8s
fvkmwyrZJYnh/E1SH3NxYtSYMb6daqig2KPQjAZemspYhE9TQL5NOyc7klxziXr6
PuYWNrqo2V1fsDM0lseBDzk4HQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:00:53 2026 by rpki-client