
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json)
Hash identifier: FtGuYAjt471eukRYsONq2f2voSUIAWUUJmN9nwMmUmM=
Subject key identifier: 35:A9:5E:B5:46:77:C9:D0:85:7A:D2:20:C3:85:6A:5F:C5:B7:D7:76
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial: 0725
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
Manifest number: 125F
Signing time: Sat 28 Feb 2026 17:09:15 +0000
Manifest this update: Sat 28 Feb 2026 17:09:15 +0000
Manifest next update: Sat 07 Mar 2026 17:09:15 +0000
Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: vy4m0z43p3MEnVaYwmS06TH6Ckdd9c4gXK8nbw6r5iw=)
2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: WS2L7D6rSmUZv4mVX2/3kzXo3TWHc1j4xpO3jewhCYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829 (0x725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3
Validity
Not Before: Feb 28 17:09:15 2026 GMT
Not After : Mar 7 17:09:15 2026 GMT
Subject: CN=69a3213b-8e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:2d:10:b4:d1:2d:93:d1:64:fb:10:63:38:
27:ac:59:b9:84:db:c0:d8:f1:d3:73:5c:3b:77:92:
87:cd:14:55:65:02:63:3a:0f:10:5c:09:01:3b:91:
1e:93:a3:bc:a3:eb:00:9a:a9:1c:c3:76:ca:93:17:
53:44:48:44:52:cc:e4:3d:78:a4:3c:7e:40:35:63:
43:5e:39:4d:b9:44:f7:d6:00:f9:c6:99:f5:3a:c8:
27:c6:47:f4:2d:3c:97:ac:5a:dd:fa:9e:e2:4d:69:
09:a3:6c:01:ff:35:66:51:23:1a:35:ea:43:ec:e4:
10:a0:e0:05:95:a0:69:65:19:81:3b:71:1b:90:6d:
74:53:89:0d:ab:ed:47:8d:f5:df:56:76:bd:bc:65:
8f:3a:a9:51:2e:8a:c8:6e:d2:18:33:0f:2c:4e:9b:
20:34:4f:d7:0d:3c:20:d6:72:c6:7d:99:e6:62:a0:
73:25:6e:e0:35:39:0e:72:67:70:b9:d5:de:12:1a:
f2:7c:8d:ae:40:eb:6d:9c:bd:4e:b2:80:04:5d:29:
d3:b2:84:b2:7e:b7:69:93:a6:53:a0:3c:82:30:71:
09:c5:7b:8f:f3:a7:1b:eb:52:d3:c8:c7:0e:3f:58:
99:fc:b7:ea:e0:4e:c8:78:98:19:97:d1:4a:83:b5:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A9:5E:B5:46:77:C9:D0:85:7A:D2:20:C3:85:6A:5F:C5:B7:D7:76
X509v3 Authority Key Identifier:
keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c9:6c:86:3d:6b:9e:f8:64:db:86:b9:c3:c4:51:9e:61:ae:
d2:40:a2:8b:c8:0b:e7:33:5e:b1:c2:15:46:3b:22:1f:91:9b:
6d:87:19:21:fc:40:72:b8:46:7a:41:7e:3f:59:f3:c0:a8:de:
ab:dc:db:37:98:9d:f7:1d:4c:5f:01:6e:be:fc:65:01:82:a4:
5c:2d:4d:3b:b8:a8:37:1a:eb:78:b6:bb:66:7e:30:9f:3b:4a:
e1:d2:7f:72:3d:64:66:27:c9:85:2f:da:ef:a2:e3:0e:b6:ef:
4f:74:ec:71:c9:3a:07:13:be:66:b4:cc:16:5d:18:e3:80:ac:
ad:44:9d:89:61:01:87:2b:2f:ec:a0:d8:af:3a:90:8b:df:f8:
9c:eb:1f:f3:df:2c:ce:51:9b:aa:ab:e6:29:84:f5:37:6e:39:
73:ac:30:0e:bc:af:ca:b4:eb:cb:a3:f9:d5:d9:6a:ff:ea:53:
e8:07:86:b7:7f:8c:41:fb:8f:28:d4:a2:59:11:3c:05:8e:26:
03:d2:75:22:21:1d:a2:06:1c:22:9a:38:85:7e:ef:84:8c:7a:
c4:7d:e0:e3:84:53:49:91:7a:10:d1:86:f0:87:8c:83:e7:b5:
0c:27:e7:7a:fd:8b:30:fd:96:1c:ae:d1:5a:7c:9c:28:b9:97:
1c:54:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:49 2026 by rpki-client