
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
File: LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json)
Hash identifier: MocwM3+PwG1GJIC1MwbKHvABPN+3R0/MyUCMgExR6TQ=
Subject key identifier: 9B:53:79:90:64:DD:A4:68:DD:83:6F:FE:42:0C:D3:07:30:7E:F0:17
Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
Certificate issuer: /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
Manifest number: 0115
Signing time: Mon 02 Mar 2026 02:14:38 +0000
Manifest this update: Mon 02 Mar 2026 02:14:35 +0000
Manifest next update: Mon 09 Mar 2026 02:14:35 +0000
Files and hashes: 1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: fIrqgL4vSF5UhvpIw2j+hPL+iRDFiWUe2+oSKzdiguo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Validity
Not Before: Mar 2 02:14:35 2026 GMT
Not After : Mar 9 02:14:35 2026 GMT
Subject: CN=69a4f28e-286f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:0f:ca:6d:3a:c6:dc:1b:8c:21:45:55:74:
e7:c8:86:8f:cf:5a:d6:ac:a7:8a:06:4f:30:00:3c:
2c:1d:e4:27:e8:7a:bb:b1:99:9f:06:fe:62:c7:10:
bf:df:7a:ef:58:b6:52:e1:b9:b7:4a:fb:1f:e8:a1:
4d:b3:1b:94:7d:f0:b8:08:96:2f:26:53:79:a4:c8:
e0:a7:7d:10:ec:ca:cc:96:fa:f9:44:fa:79:ef:bb:
aa:fb:5f:7c:f2:86:34:6f:42:01:32:28:97:8a:4e:
22:ed:ca:75:52:52:a6:83:69:03:a6:d2:40:62:24:
7d:d8:52:42:0b:87:c0:a8:36:a1:f9:92:8d:93:83:
07:d4:eb:65:50:e2:a2:9b:d5:79:18:86:4a:eb:7d:
d6:eb:ce:c0:04:46:9f:da:28:56:75:49:0c:ea:ca:
90:9d:59:dd:ad:b5:29:fa:c5:f9:f8:26:29:ff:90:
74:85:d6:52:42:52:99:08:ca:bb:f2:43:08:de:3b:
48:5b:2b:cf:02:47:a3:41:96:71:07:8b:c4:d6:a3:
06:3a:13:64:af:02:c2:6c:1e:98:ad:c5:3b:39:ed:
28:eb:1f:dd:4f:9e:e5:03:b8:04:11:39:d7:7c:74:
0b:63:99:1e:a3:26:8c:ed:4d:09:3a:17:42:3b:ef:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:79:90:64:DD:A4:68:DD:83:6F:FE:42:0C:D3:07:30:7E:F0:17
X509v3 Authority Key Identifier:
keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:c1:77:25:bb:b7:86:d8:76:c9:ff:51:b1:23:13:ae:75:a5:
e4:55:71:85:bf:42:56:49:0a:1f:73:20:9b:73:3d:22:52:0b:
9f:08:4a:49:dd:c3:99:32:95:0c:5b:4f:71:77:d5:87:36:19:
f4:3a:e2:bf:10:54:6a:7f:ff:30:cb:80:17:3a:3c:1e:e4:42:
aa:33:ad:09:be:80:b0:7c:f3:25:b8:de:e9:de:42:15:8e:1a:
f0:70:db:a9:c6:f9:e2:b4:a3:a1:a9:27:f8:b5:68:dc:51:2a:
30:3b:f3:8b:76:a9:3b:57:f5:c6:c7:62:c6:7f:c5:c9:81:72:
33:25:43:d2:8a:6f:1f:fa:d3:34:76:ec:e2:0f:dd:f2:47:c6:
88:86:07:78:53:28:06:f6:75:7f:cb:ef:bb:ad:c8:bf:57:dd:
00:c2:90:e5:0c:a0:1e:27:e4:6d:ff:5d:7b:f0:b6:04:c3:c8:
97:76:7e:d6:36:41:37:f2:56:92:b4:5c:cb:9c:d9:16:97:aa:
ff:e4:b0:a1:28:90:b1:b6:5f:08:fb:02:f3:84:a3:50:a0:43:
cb:d8:9a:e3:58:7f:db:aa:0d:fa:85:db:78:fa:94:02:90:5c:
81:cf:d4:08:0e:09:a5:54:82:95:2d:1e:2e:1d:87:3c:b1:8a:
33:84:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:27 2026 by rpki-client