
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier: RSQ6vz9au6t7ubVzTz8/pq780OKftJeflQ3iRmMi6mY=
Subject key identifier: FE:F2:1A:6C:6C:04:4B:16:3E:75:2F:1E:7D:4A:57:83:24:30:4C:DC
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number: 1D
Signing time: Sun 01 Mar 2026 10:22:53 +0000
Manifest this update: Sun 01 Mar 2026 10:22:52 +0000
Manifest next update: Sun 08 Mar 2026 10:22:52 +0000
Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: 4dFf0BEjcl25Zsdlwz8wy3MukfIN8rjFfIgAmatyi5g=)
2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Validity
Not Before: Mar 1 10:22:52 2026 GMT
Not After : Mar 8 10:22:52 2026 GMT
Subject: CN=69a4137c-0413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:d8:9e:ed:e8:6e:96:54:b2:fd:b6:50:b5:
8e:1d:da:0f:d3:69:64:91:85:25:69:2c:f0:5e:fd:
1a:34:25:4f:29:77:de:ec:8e:a2:2c:6b:bf:a7:6f:
8f:0e:fe:3d:81:d7:00:f7:89:07:aa:3b:ae:c8:a7:
d0:8b:32:72:49:7b:f7:16:45:82:bb:b9:74:91:94:
f3:38:57:5c:4f:73:c5:95:2e:15:78:53:73:f2:aa:
3a:38:b4:a6:d0:60:40:70:1d:04:fb:0a:40:0d:e3:
fe:91:95:a1:73:18:a4:8b:45:69:97:6d:ec:47:4b:
81:35:87:66:d8:ae:e0:eb:11:ae:9c:63:70:1b:8c:
b0:75:02:91:e7:5f:6b:cd:03:26:87:d5:ff:9a:d9:
3e:c2:4d:50:68:32:ea:7b:d6:02:42:85:79:41:b9:
2e:9d:8a:63:d0:c6:7e:f1:a1:71:d5:b0:c8:61:21:
55:6b:66:76:57:5e:39:f4:f5:46:2f:6c:ef:77:2e:
f7:ba:28:2f:7d:0b:84:29:2f:e1:8a:40:a7:13:1a:
42:b7:88:24:e3:1b:93:11:53:f4:eb:cf:ae:5d:4f:
05:f2:9e:d5:d4:3d:93:79:fc:96:59:85:36:71:4d:
c2:04:20:03:3b:85:c4:fe:70:71:c4:4c:86:79:1f:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F2:1A:6C:6C:04:4B:16:3E:75:2F:1E:7D:4A:57:83:24:30:4C:DC
X509v3 Authority Key Identifier:
keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ec:eb:7a:7a:00:6f:76:f7:10:72:d2:25:62:24:a2:a2:5e:
28:e2:46:b9:61:e2:15:29:4b:75:6e:49:70:c4:4b:b3:3b:d8:
02:a6:a0:e7:ac:0f:56:0c:6f:a7:23:b1:ca:f5:88:c7:58:dd:
38:ab:79:a6:df:67:de:5a:1b:ba:b9:ea:83:4e:73:b6:18:54:
1d:1a:30:7f:03:7b:18:95:27:94:3c:8d:60:b1:aa:99:2b:5f:
49:4f:c2:cf:66:be:0d:d0:2b:f6:7c:36:f8:c5:87:b5:55:0b:
b2:d7:17:23:ad:84:f1:75:2e:fc:2d:15:cf:dc:36:33:3e:e6:
a5:78:d8:66:3c:29:03:80:ae:a2:e7:92:0f:08:1e:de:21:88:
19:d0:19:9e:10:27:d5:9d:b7:67:b4:b7:a7:e9:b0:aa:a0:fb:
06:43:b7:93:98:3e:88:dd:35:d9:46:bf:53:da:11:0c:04:fa:
75:fe:94:50:eb:c4:eb:91:8b:00:9b:7e:7d:1d:9e:e5:b4:28:
c3:82:48:17:b9:f2:d3:44:7e:8e:0f:ed:0c:98:c2:67:24:2b:
c5:24:be:e9:bb:9b:19:a4:e7:d5:27:73:19:40:e0:d5:f0:ce:
da:14:38:5d:04:44:c3:f3:6d:79:bb:c2:0c:62:78:99:8f:78:
67:a2:5d:02
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
OEZGRjExMC8GA1UEBRMoMkQxODY5QjczRUExRTg4RUIxMkJFNjlGMUMwRDRFN0My
MTk2QTMzRTAeFw0yNjAzMDExMDIyNTJaFw0yNjAzMDgxMDIyNTJaMBgxFjAUBgNV
BAMTDTY5YTQxMzdjLTA0MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCm8Nie7ehullSy/bZQtY4d2g/TaWSRhSVpLPBe/Ro0JU8pd97sjqIsa7+nb48O
/j2B1wD3iQeqO67Ip9CLMnJJe/cWRYK7uXSRlPM4V1xPc8WVLhV4U3Pyqjo4tKbQ
YEBwHQT7CkAN4/6RlaFzGKSLRWmXbexHS4E1h2bYruDrEa6cY3AbjLB1ApHnX2vN
AyaH1f+a2T7CTVBoMup71gJChXlBuS6dimPQxn7xoXHVsMhhIVVrZnZXXjn09UYv
bO93Lve6KC99C4QpL+GKQKcTGkK3iCTjG5MRU/Trz65dTwXyntXUPZN5/JZZhTZx
TcIEIAM7hcT+cHHETIZ5H3ujAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/vIabGwE
SxY+dS8efUpXgyQwTNwwHwYDVR0jBBgwFoAULRhptz6h6I6xK+afHA1OfCGWoz4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzUwMzU3Q0YwRUVE
MTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2eEstYWZIQTFPZkNHV296
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTFJocHR6Nmg2STZ4Sy1hZkhBMU9mQ0dXb3o0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4
RkZGLzUwMzU3Q0YwRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2
eEstYWZIQTFPZkNHV296NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCN7Ot6egBvdvcQctIlYiSiol4o4ka5YeIVKUt1bklwxEuzO9gCpqDnrA9WDG+n
I7HK9YjHWN04q3mm32feWhu6ueqDTnO2GFQdGjB/A3sYlSeUPI1gsaqZK19JT8LP
Zr4N0Cv2fDb4xYe1VQuy1xcjrYTxdS78LRXP3DYzPualeNhmPCkDgK6i55IPCB7e
IYgZ0BmeECfVnbdntLen6bCqoPsGQ7eTmD6I3TXZRr9T2hEMBPp1/pRQ68TrkYsA
m359HZ7ltCjDgkgXufLTRH6OD+0MmMJnJCvFJL7pu5sZpOfVJ3MZQODV8M7aFDhd
BETD8215u8IMYniZj3hnol0C
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:10 2026 by rpki-client