
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json)
Hash identifier: Ule1X/KBDb4Wx038bnLftEHkudrkNUtk1+s5zsBB/l0=
Subject key identifier: 69:32:8E:B8:10:C3:3B:D2:C5:2B:4C:D2:4D:BA:B1:2B:B5:D1:1A:C9
Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
Manifest number: 0188
Signing time: Mon 02 Mar 2026 00:47:47 +0000
Manifest this update: Mon 02 Mar 2026 00:47:45 +0000
Manifest next update: Mon 09 Mar 2026 00:47:45 +0000
Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: dHzBrozT3LMsLhCBNlo2KhjLMlPx2LeeLBwkAxRc3K0=)
2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: ZHeLDVTIHFJ7UjPrvmwH6xelh/2KaloiHRyyvC19Dlw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Validity
Not Before: Mar 2 00:47:45 2026 GMT
Not After : Mar 9 00:47:45 2026 GMT
Subject: CN=69a4de33-8fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:f6:46:3b:70:db:11:75:36:5d:f7:0b:87:
26:11:13:c2:18:16:fa:2e:9d:61:f9:72:34:f5:1e:
c0:1f:33:2e:6e:21:17:2f:24:3b:ee:d9:1d:02:6d:
6c:37:c3:40:9b:92:10:85:77:55:f4:1f:46:76:11:
ce:50:c9:d5:15:4e:f9:98:7b:61:e7:9f:44:1e:02:
61:19:b5:e5:03:65:b2:2f:e0:df:82:38:4a:b3:56:
af:77:8c:e6:8b:ac:b2:a3:ec:29:7f:7a:00:c3:bb:
29:4b:e6:cc:a5:4d:99:5b:31:0a:f4:14:34:e1:26:
94:93:ef:5c:e0:5a:47:93:dd:dd:69:a2:43:7d:e3:
47:b5:45:96:b3:30:e5:3b:17:05:bb:59:e9:ab:76:
ce:f6:52:c3:99:25:bd:27:03:ba:28:2a:d6:91:cc:
9f:7d:eb:42:b7:0f:4c:bd:37:a6:a4:59:42:92:ce:
33:7c:ef:02:f6:24:7b:56:e0:5b:4c:e6:53:97:30:
e5:87:39:84:72:c9:a9:43:d3:d2:9c:7b:11:36:f3:
77:92:eb:df:62:25:6f:37:4a:be:03:27:7a:38:74:
7f:1b:cc:2f:42:71:32:40:89:91:bc:9d:eb:f1:47:
0c:86:cd:52:35:46:ba:66:dd:e3:a1:99:b9:7d:06:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:8E:B8:10:C3:3B:D2:C5:2B:4C:D2:4D:BA:B1:2B:B5:D1:1A:C9
X509v3 Authority Key Identifier:
keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d5:d9:59:74:fd:dc:61:81:26:94:29:bf:14:88:29:cf:61:
bc:c0:f0:e2:be:3f:e7:a8:11:ff:41:0e:71:13:6f:a8:15:dd:
e6:d9:18:7d:a5:81:a8:50:2c:94:25:32:7b:a4:c5:ad:32:a5:
ac:94:28:a5:c9:c7:71:b0:ba:70:04:5f:57:0d:95:94:b8:f7:
a3:7a:d8:e9:0c:87:b4:6e:bf:4d:f1:9e:52:11:6e:95:0d:94:
ad:3c:a1:c4:c6:60:18:ce:59:67:58:15:48:b3:d8:a4:fe:87:
87:b9:66:35:38:b4:0a:12:76:63:3f:6b:ae:d0:38:ed:c8:28:
7c:d5:8d:44:29:a7:6f:8b:0e:bd:e1:dc:dc:83:cc:33:61:f1:
1c:90:20:ee:9a:db:2a:06:81:01:3e:65:4f:9d:73:13:a0:e8:
76:bf:93:e0:5d:15:11:39:f8:b8:19:62:9e:76:d3:24:4b:16:
88:90:63:a1:f9:2f:81:51:ff:12:06:a7:6e:b5:a8:99:15:9d:
6f:c9:c3:09:97:37:49:77:82:0f:54:dc:26:bb:f9:f9:32:ad:
a2:d3:ab:60:d8:47:61:4a:ed:07:43:71:7a:c9:60:58:cc:43:
13:1e:92:df:5f:ee:e0:6a:cc:90:61:d0:54:61:42:f0:1a:7a:
6f:3e:e4:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4
QUE5Mzg2MEIwHhcNMjYwMzAyMDA0NzQ1WhcNMjYwMzA5MDA0NzQ1WjAYMRYwFAYD
VQQDEw02OWE0ZGUzMy04ZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAug32Rjtw2xF1Nl33C4cmERPCGBb6Lp1h+XI09R7AHzMubiEXLyQ77tkdAm1s
N8NAm5IQhXdV9B9GdhHOUMnVFU75mHth559EHgJhGbXlA2WyL+DfgjhKs1avd4zm
i6yyo+wpf3oAw7spS+bMpU2ZWzEK9BQ04SaUk+9c4FpHk93daaJDfeNHtUWWszDl
OxcFu1npq3bO9lLDmSW9JwO6KCrWkcyffetCtw9MvTempFlCks4zfO8C9iR7VuBb
TOZTlzDlhzmEcsmpQ9PSnHsRNvN3kuvfYiVvN0q+Ayd6OHR/G8wvQnEyQImRvJ3r
8UcMhs1SNUa6Zt3joZm5fQYSDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkyjrgQ
wzvSxStM0k26sSu10RrJMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw
NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv
a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfNXZWXT93GGBJpQpvxSIKc9hvMDw4r4/56gR/0EOcRNvqBXd5tkYfaWBqFAs
lCUye6TFrTKlrJQopcnHcbC6cARfVw2VlLj3o3rY6QyHtG6/TfGeUhFulQ2UrTyh
xMZgGM5ZZ1gVSLPYpP6Hh7lmNTi0ChJ2Yz9rrtA47cgofNWNRCmnb4sOveHc3IPM
M2HxHJAg7prbKgaBAT5lT51zE6Dodr+T4F0VETn4uBlinnbTJEsWiJBjofkvgVH/
EganbrWomRWdb8nDCZc3SXeCD1TcJrv5+TKtotOrYNhHYUrtB0NxeslgWMxDEx6S
31/u4GrMkGHQVGFC8Bp6bz7kuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:36 2026 by rpki-client