
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier: b2jzV9lwRdHr05zDdkvPcy8LoeYQEYb/mQj6pBCpjow=
Subject key identifier: D2:E4:B3:F8:9E:3D:E9:00:65:02:50:B3:35:F7:B6:BF:54:A3:46:D4
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number: 6F
Signing time: Sun 01 Mar 2026 09:14:14 +0000
Manifest this update: Sun 01 Mar 2026 09:14:13 +0000
Manifest next update: Sun 08 Mar 2026 09:14:13 +0000
Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: yXJQO5MYE6ccs0paT3X3mjeyw0CtQ46hbASq3RsZrjI=)
2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Validity
Not Before: Mar 1 09:14:13 2026 GMT
Not After : Mar 8 09:14:13 2026 GMT
Subject: CN=69a40366-f859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:5e:99:59:e0:08:d0:8c:44:24:e4:82:ee:
92:dd:14:26:ec:65:78:dc:44:fb:ff:c5:ca:13:11:
a0:89:b6:78:be:4f:ec:6f:9e:52:25:f1:cf:39:00:
a3:7f:40:e1:fb:af:c4:f7:82:43:af:72:de:1e:26:
e3:f4:32:a6:92:c9:e5:16:e1:48:81:71:f9:ce:fe:
bf:b8:6d:b4:ae:4b:ca:45:7c:96:38:46:18:59:00:
59:d7:40:ef:33:48:66:4f:c5:b2:9d:84:0d:b0:cf:
97:e5:37:a5:84:66:f3:64:0c:8a:a5:fb:63:c1:0c:
94:b6:1f:98:78:5c:fa:9b:df:29:7e:35:59:0b:fe:
ba:23:8f:e6:cb:af:9e:53:42:b5:34:9e:f9:a0:90:
52:04:62:f4:1e:2c:15:87:81:de:83:a1:64:b3:3c:
92:9e:7e:51:c4:40:63:b5:68:3c:c6:5f:e8:b1:24:
ea:0a:32:ca:09:9e:5b:29:1c:f6:84:20:2e:c1:59:
da:96:89:b1:4d:e1:47:39:8b:13:28:b3:7f:a0:c0:
e9:77:e5:f4:28:d9:4a:d5:20:65:9e:1c:93:fc:55:
24:8f:ea:23:39:aa:d0:b3:f1:45:e8:73:b8:61:bc:
bf:83:4a:42:e2:ca:77:f1:e0:09:5a:d2:58:9e:07:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:B3:F8:9E:3D:E9:00:65:02:50:B3:35:F7:B6:BF:54:A3:46:D4
X509v3 Authority Key Identifier:
keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:d9:a5:e9:4a:6d:fc:85:b1:ad:1f:9e:cd:dd:41:49:3c:9d:
ba:8c:93:03:03:7c:41:54:b2:94:99:fc:ed:91:93:9b:d6:99:
af:7b:e2:36:04:27:79:22:d4:3f:2c:4b:8f:92:2c:88:6f:7b:
7a:c8:a8:60:f9:92:f5:ab:8c:12:90:ba:89:d5:12:85:e2:b1:
af:76:d7:bd:4b:65:d0:52:f9:c5:c3:ba:82:17:9e:d1:ff:a9:
a3:a1:c6:08:8b:05:e3:57:39:90:4a:0a:86:1b:56:5e:9f:67:
63:2f:4e:c2:8a:f3:49:db:db:49:e4:88:de:12:fc:3f:c0:47:
8a:09:3b:c4:6b:a8:5b:b0:e5:88:1f:87:ad:f1:14:e1:2e:3f:
50:dd:80:29:51:83:65:8b:6f:54:12:d1:f9:ad:5a:ae:7b:7c:
2b:cf:d1:76:d3:73:5b:cf:43:0d:8c:45:88:6e:fb:1a:f5:00:
ca:8b:0f:56:09:c5:22:ea:17:85:19:a7:1a:c1:4e:0f:92:30:
a7:16:6a:c2:42:c8:f1:5d:ed:2d:b1:fd:2a:6e:4b:c5:93:7c:
50:ec:95:78:29:ce:f7:28:da:b5:16:56:7b:b5:13:49:4e:16:
38:fa:79:9e:c7:20:b6:70:d3:17:b8:aa:ec:ac:78:ef:63:ed:
05:57:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:51 2026 by rpki-client