
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
File: LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json)
Hash identifier: wkKjAIISXQNmMx33KGQDtrwrNYIy4yMqLNo0NBOx194=
Subject key identifier: D9:5F:24:C8:A9:4E:E3:21:8D:B4:24:71:7F:B8:2E:E3:DE:89:15:02
Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C
Certificate issuer: /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
Certificate serial: 105F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
Manifest number: 1810
Signing time: Tue 22 Sep 2026 17:18:25 +0000
Manifest this update: Tue 22 Sep 2026 17:18:24 +0000
Manifest next update: Tue 29 Sep 2026 17:18:24 +0000
Files and hashes: 1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: ZaGGXg9FMgu49es/k229UOZfnd3wiMrZrSXEDCyQZJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl
rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4191 (0x105f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
Validity
Not Before: Sep 22 17:18:24 2026 GMT
Not After : Sep 29 17:18:24 2026 GMT
Subject: CN=6ab2b861-a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:34:9e:e3:22:f4:ac:df:4b:47:9a:5c:f6:
73:0b:e1:f3:0b:d2:f0:d5:e4:5d:c5:9c:e0:d3:81:
db:47:79:b1:81:4e:86:74:de:f5:e1:db:35:6d:cf:
62:7b:dd:48:b7:ab:82:50:3e:a4:7d:1d:42:c2:cc:
55:be:67:50:a8:cf:e5:c2:9f:3e:c1:32:a6:db:09:
e0:40:2f:b0:5f:a1:f3:6a:8d:28:d6:01:c3:5b:30:
1b:5e:fc:2b:f4:5c:5f:e5:7b:0c:68:52:5d:69:eb:
a9:eb:07:b9:57:55:40:35:8c:ce:42:0a:90:bc:07:
e1:00:60:df:6a:b1:02:2c:2a:1d:4f:98:dd:5b:d1:
9a:9e:b0:76:68:02:47:14:cd:be:00:f5:fe:17:a2:
ee:24:f8:9e:8d:46:a5:55:cb:55:ed:95:fd:9c:62:
60:d1:da:d9:b4:ed:10:71:bd:4e:8e:ad:5f:e9:d4:
15:f4:91:f2:b5:84:6d:91:e4:40:b4:57:e5:dc:7e:
35:10:9a:a1:68:11:c5:f0:7e:5d:62:e1:1a:01:bf:
71:d4:f1:47:a6:b0:6e:8c:95:e6:b6:65:6c:07:14:
25:4c:4f:bf:64:9c:f6:0a:1b:97:77:f5:d4:89:28:
4e:48:af:5c:ae:54:11:6f:43:27:87:df:0d:14:5b:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5F:24:C8:A9:4E:E3:21:8D:B4:24:71:7F:B8:2E:E3:DE:89:15:02
X509v3 Authority Key Identifier:
keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:57:d7:8b:af:59:66:b6:40:51:77:ca:7c:eb:4c:00:f2:98:
40:41:2d:2f:b8:3f:8b:aa:9c:ea:8e:4d:36:ce:da:9c:f6:e4:
34:63:23:d5:06:e3:e6:c9:6e:fd:6e:1d:4c:3e:a6:0e:f3:1c:
5d:79:88:c9:3a:66:aa:46:7a:42:c2:b6:fc:c9:73:13:aa:82:
98:98:60:5f:ce:d3:0d:44:67:2a:7c:6b:94:92:92:e4:77:4e:
4a:42:9c:2b:a0:0d:9a:5d:be:b8:4d:9b:35:ac:8d:c4:7c:16:
39:b6:07:47:5f:7d:71:1d:9e:cd:c4:72:98:3c:2f:6c:2d:96:
96:4d:89:ac:f2:1d:df:20:39:5f:0a:c4:10:76:32:df:53:e1:
94:9b:b6:ea:0b:e0:91:c0:c3:0e:91:a5:b1:b6:19:8b:69:95:
4a:ce:fb:ce:6a:41:61:5a:17:af:e1:14:1f:58:63:23:3b:f4:
89:44:ee:5e:6e:31:fc:0c:e0:b3:9c:d6:d1:97:99:4b:8a:97:
aa:f6:df:ef:09:36:6e:a4:c0:80:38:5d:f7:48:94:1f:b3:33:
69:5c:fb:3b:68:f5:d2:d7:c4:81:03:c7:02:78:91:a0:f2:5d:
42:c0:c8:a8:44:50:2f:64:86:65:cf:5f:26:9f:fa:92:67:38:
b4:52:e6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:01:07 2026 by rpki-client