
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
File: LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json)
Hash identifier: km9j1VjEI9D2dEA/24LP+/QJqC4ss/0+82DYwXhNop8=
Subject key identifier: AF:6C:4D:81:A0:25:E2:EE:72:6B:2A:FA:AD:68:FC:D8:A3:01:BE:86
Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
Certificate issuer: /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
Manifest number: 014C
Signing time: Fri 12 Jun 2026 19:10:22 +0000
Manifest this update: Fri 12 Jun 2026 19:10:22 +0000
Manifest next update: Fri 19 Jun 2026 19:10:22 +0000
Files and hashes: 1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: VTODLQxk2i814PKePzc7G4iFWU6LsY3krMDaWj3VdCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Validity
Not Before: Jun 12 19:10:22 2026 GMT
Not After : Jun 19 19:10:22 2026 GMT
Subject: CN=6a2c599e-b3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:06:1a:52:a3:22:15:85:82:4f:9a:16:eb:
87:9b:5b:f8:8e:d4:1e:bf:26:28:63:1a:13:43:55:
f8:a5:13:1f:b8:46:e6:6f:53:be:99:f9:be:d2:e1:
56:14:fd:cf:15:df:9a:3c:ea:a7:ac:60:fc:54:19:
67:01:71:24:80:d4:fe:c2:27:5c:9b:d8:24:28:8d:
ce:1e:2b:fa:7c:b7:fc:d8:a3:d4:59:7c:2f:ad:b0:
ae:84:b2:0a:c9:e7:ee:4b:2c:c5:ed:b7:af:bd:77:
7c:b5:80:9c:91:34:32:08:92:d3:a4:f2:f5:0b:59:
06:a4:ad:93:5c:37:16:f2:33:2e:5f:26:b3:2c:bd:
a7:6b:b7:33:99:05:51:ae:56:ed:1d:3f:7e:c6:7e:
91:69:62:b0:b6:e7:94:7c:5c:7d:9a:6c:60:32:6e:
a0:87:b1:ac:fb:0c:36:0e:84:1a:5c:39:8a:57:d1:
c9:8f:80:19:f9:47:20:cf:28:36:d4:51:b3:c1:e0:
4d:72:52:f6:7d:cd:fd:8a:b8:04:91:8a:6d:79:86:
e0:4a:89:0f:20:b7:99:21:be:53:1f:dd:1b:67:56:
7f:0d:61:21:8a:bd:93:98:a0:06:1d:84:20:43:a2:
95:00:91:2f:08:5c:a6:4b:82:bd:c1:be:0a:43:e3:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:4D:81:A0:25:E2:EE:72:6B:2A:FA:AD:68:FC:D8:A3:01:BE:86
X509v3 Authority Key Identifier:
keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:31:90:fe:a2:1c:60:bf:46:56:d2:23:3e:52:6d:43:20:21:
8f:f1:53:ce:c3:ab:52:8f:dd:79:84:f3:01:ff:2b:f5:e2:57:
db:ed:fe:fa:f6:3d:4b:79:61:ee:3c:ec:c0:01:24:e6:4f:da:
b5:44:c3:e5:50:bf:81:ff:56:d3:a6:1d:cb:2d:08:23:f9:18:
61:84:66:0d:5d:26:55:06:3c:ec:6b:f4:9c:bc:aa:ea:87:64:
53:b4:77:d9:c2:e9:44:6b:41:00:1f:93:7a:c5:fb:44:21:1a:
0b:68:6b:36:54:e2:7b:60:69:53:a9:59:59:c8:b5:eb:0b:65:
68:9b:fd:25:29:d3:fa:7f:7b:e0:90:e8:03:18:55:d3:20:c7:
4a:ba:01:c4:c9:39:18:e2:3c:e0:55:a8:97:49:5d:42:06:77:
a8:cc:9c:b4:83:02:07:65:43:2b:89:b3:65:04:5d:ac:38:05:
65:5b:c2:de:37:fa:16:b8:9a:91:96:60:8e:1d:11:03:13:e7:
e9:bb:a9:54:c5:f6:a5:de:4a:6c:ae:ed:83:4b:de:ac:4f:6b:
be:96:0f:34:28:f9:94:ce:80:49:5d:b6:b8:71:6d:2b:11:28:
86:65:25:28:52:39:66:55:a7:52:5e:d4:5b:6f:96:13:a2:1c:
87:ca:24:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDQTExMTAvBgNVBAUTKDJDN0I1RDg0NzIwMDNDRjM0MzZBQ0ZFNUI2MUU4OUVD
OEIxQUQ4QUIwHhcNMjYwNjEyMTkxMDIyWhcNMjYwNjE5MTkxMDIyWjAYMRYwFAYD
VQQDEw02YTJjNTk5ZS1iM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1XEGGlKjIhWFgk+aFuuHm1v4jtQevyYoYxoTQ1X4pRMfuEbmb1O+mfm+0uFW
FP3PFd+aPOqnrGD8VBlnAXEkgNT+widcm9gkKI3OHiv6fLf82KPUWXwvrbCuhLIK
yefuSyzF7bevvXd8tYCckTQyCJLTpPL1C1kGpK2TXDcW8jMuXyazLL2na7czmQVR
rlbtHT9+xn6RaWKwtueUfFx9mmxgMm6gh7Gs+ww2DoQaXDmKV9HJj4AZ+Ucgzyg2
1FGzweBNclL2fc39irgEkYpteYbgSokPILeZIb5TH90bZ1Z/DWEhir2TmKAGHYQg
Q6KVAJEvCFymS4K9wb4KQ+OlwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9sTYGg
JeLucmsq+q1o/NijAb6GMB8GA1UdIwQYMBaAFCx7XYRyADzzQ2rP5bYeieyLGtir
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS80RTExRjRENjcx
OTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQTkRhc19sdGg2SjdJc2Ey
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xIdGRoSElBUFBORGFzX2x0aDZKN0lzYTJLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MENBMS80RTExRjRENjcxOTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQ
TkRhc19sdGg2SjdJc2EyS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVTGQ/qIcYL9GVtIjPlJtQyAhj/FTzsOrUo/deYTzAf8r9eJX2+3++vY9S3lh
7jzswAEk5k/atUTD5VC/gf9W06Ydyy0II/kYYYRmDV0mVQY87Gv0nLyq6odkU7R3
2cLpRGtBAB+TesX7RCEaC2hrNlTie2BpU6lZWci16wtlaJv9JSnT+n974JDoAxhV
0yDHSroBxMk5GOI84FWol0ldQgZ3qMyctIMCB2VDK4mzZQRdrDgFZVvC3jf6Fria
kZZgjh0RAxPn6bupVMX2pd5KbK7tg0verE9rvpYPNCj5lM6ASV22uHFtKxEohmUl
KFI5ZlWnUl7UW2+WE6Ich8okPA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:37:11 2026 by rpki-client