
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json)
Hash identifier: vKwLDp6L8iNVU0PVH2xD2GWQYPQqAML17FvLU7iR+X0=
Subject key identifier: 3A:FD:29:41:9E:81:38:82:F7:67:BD:62:13:A2:D4:83:09:8E:40:4D
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
Manifest number: 129E
Signing time: Fri 12 Jun 2026 17:01:00 +0000
Manifest this update: Fri 12 Jun 2026 17:00:59 +0000
Manifest next update: Fri 19 Jun 2026 17:00:59 +0000
Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: rnDOee0nYcltlkk0N7Kfk6C92d7ZwzBTQ9lnb7N4BEk=)
2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: Fr+3c6RpSKSYZINS3tB5kOz0vDzbNjiqKIyeQ9IGWSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3
Validity
Not Before: Jun 12 17:00:59 2026 GMT
Not After : Jun 19 17:00:59 2026 GMT
Subject: CN=6a2c3b4c-e918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:57:b3:01:3e:82:1a:65:ea:80:92:ff:57:
7d:ca:c6:c7:01:80:e3:c0:d3:c5:cc:53:ba:fd:cb:
a5:29:b6:60:41:f4:c7:f3:76:fd:7f:78:2d:91:0f:
a2:ef:8a:f1:e7:dd:af:25:ef:1e:ac:84:45:ee:67:
f5:e3:22:2d:e2:39:68:c8:77:17:b7:fb:9b:0a:a0:
83:b9:cd:e7:d7:ed:66:da:95:ac:15:d6:1e:d7:3d:
78:c5:5d:54:d6:28:07:12:49:c7:10:46:83:2b:42:
2d:af:5a:3b:f2:70:b0:e3:3f:19:69:80:c6:3e:cb:
ce:25:87:fd:6d:96:d7:90:c4:e1:3d:3a:b4:30:3a:
bf:57:2b:14:55:fa:0d:45:d1:2f:0e:00:75:a8:d7:
a1:06:f1:1f:5f:e5:ed:cf:7e:2e:23:96:8f:a7:4d:
dc:68:c3:b0:e2:11:fa:de:46:aa:51:94:f8:a4:84:
c1:7f:0f:ef:4f:9d:03:00:7e:46:a2:68:6b:c0:5e:
3d:f5:6c:7e:26:34:7f:b5:54:73:c2:d5:bf:40:2e:
af:18:bf:fb:b7:26:16:12:84:85:9d:6b:dc:35:0d:
e2:ef:00:cf:4c:ee:b4:f9:79:f1:99:c1:6d:fb:69:
ec:8b:a0:58:08:0e:79:bc:35:bd:e0:d5:45:41:b2:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FD:29:41:9E:81:38:82:F7:67:BD:62:13:A2:D4:83:09:8E:40:4D
X509v3 Authority Key Identifier:
keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cb:54:7c:1c:c8:89:d6:08:ea:d2:9c:65:36:1a:75:85:b1:
59:29:eb:6f:c3:da:2f:cd:1c:13:38:d3:49:d8:90:fb:7a:fe:
63:89:6c:e5:25:ba:e2:96:4a:4a:a5:8f:52:8d:53:44:85:3e:
82:d9:f3:12:80:d3:51:e3:15:4b:9d:19:a5:8e:2f:ab:fe:92:
d9:87:a9:c0:58:92:43:c5:c5:7c:74:ac:b8:40:52:00:8c:25:
47:f5:3d:3f:78:47:d8:21:11:b8:f5:11:fa:c4:69:6d:d6:23:
67:6b:ff:76:7f:25:53:d3:20:40:36:4a:62:15:2e:6e:d5:31:
cd:47:b9:dd:9f:0e:58:10:ca:7f:3b:2c:33:23:78:87:0f:3b:
79:c6:4b:52:ae:a9:d6:6f:50:d2:8a:63:ec:9e:a6:5a:c4:c2:
e5:34:b3:28:b8:a0:b4:83:b2:d9:18:fc:91:c7:ec:d9:9d:92:
73:72:0c:3d:82:24:2f:32:a0:1d:2b:42:de:36:68:f7:e6:81:
c7:ce:12:92:f0:a6:c0:19:8b:e2:35:47:c8:72:c3:dc:b9:ce:
f5:22:f4:df:09:95:92:15:96:79:bb:45:41:d5:52:c9:2c:9e:
08:b5:4e:58:04:43:d9:cd:cf:7b:1b:81:03:b4:8c:47:72:94:
17:7e:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:08 2026 by rpki-client