
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier: 2mk160IDP1d+wL7VFWjaNw4lacJV9QjbQXLL4Y0D2to=
Subject key identifier: 1F:EB:8E:CD:63:42:A6:13:4F:72:EA:B1:45:1E:8F:25:43:4F:24:B4
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number: BA
Signing time: Wed 15 Apr 2026 06:37:44 +0000
Manifest this update: Wed 15 Apr 2026 06:37:43 +0000
Manifest next update: Wed 22 Apr 2026 06:37:43 +0000
Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: T/9eHUVkt+L3nKb4lP42MZ6nWtB049hyUSl6keF9s5g=)
2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: xXN9mX48NmFk2vcx7rwVXSG4y30L3OeYK6lw11JbwLA=)
3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: e1py/Dvzt5ULhjodeT2xOCGPBlZKvYaIHOb5jKyG0BQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Validity
Not Before: Apr 15 06:37:43 2026 GMT
Not After : Apr 22 06:37:43 2026 GMT
Subject: CN=69df3237-5984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:0c:90:04:8e:c9:16:b8:e9:65:c1:fe:3b:
e0:6c:81:20:eb:5c:3b:13:16:38:4c:6e:4f:9a:65:
d0:a2:a6:e4:4e:22:17:77:24:60:e2:01:50:3a:89:
9f:0a:6e:fd:28:1c:cc:7a:46:31:61:7c:cb:ad:0b:
28:e1:d7:b0:bb:61:32:42:64:62:c8:79:c0:a3:2f:
21:ed:87:b3:34:8d:43:ed:48:77:4e:a1:e2:37:79:
01:a6:a4:69:aa:3d:d0:67:9b:62:3e:fc:e5:ec:ba:
60:6e:0f:c8:dd:b8:1f:1f:47:04:7f:95:67:02:5d:
15:6e:ea:12:ba:13:21:02:1b:05:80:65:e6:5a:87:
fb:92:5a:b6:4a:83:20:9e:d0:9c:be:5d:88:b9:e1:
a0:9e:73:df:a8:3e:02:0a:9d:f4:a5:5a:4f:a9:a7:
1d:1f:80:81:0f:48:c9:a6:51:44:1c:e0:46:a2:7f:
64:32:7a:21:70:4e:a5:29:09:01:18:03:f9:13:60:
75:90:e3:93:af:fa:c6:79:36:c1:7c:2a:25:43:7f:
25:75:cd:06:08:9b:92:ea:95:9b:2c:b7:5c:27:77:
45:18:f8:d6:2c:41:e0:2b:f3:09:0f:93:0e:ef:dc:
3a:55:f4:e2:07:78:ea:53:0c:de:b7:52:da:10:09:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EB:8E:CD:63:42:A6:13:4F:72:EA:B1:45:1E:8F:25:43:4F:24:B4
X509v3 Authority Key Identifier:
keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:9b:39:0d:12:ae:13:e8:fd:61:d3:6a:97:6a:21:e0:e7:63:
52:ec:9f:98:dd:c5:78:e4:cc:e7:fe:25:91:a4:40:71:cd:0f:
ec:a6:93:b0:47:78:62:c2:2c:02:7a:59:91:17:39:fb:71:30:
72:f1:97:ef:04:69:9d:77:37:7f:8b:b5:49:f6:f7:36:cc:69:
36:00:9d:26:c4:9b:b3:26:48:b0:9b:eb:51:0c:e8:9c:80:18:
0b:73:2b:cd:a1:75:e4:f0:99:19:83:e0:81:48:0c:97:67:e8:
42:6b:40:bc:f9:f0:43:72:a2:95:45:ca:18:92:cb:fa:a6:ec:
e7:2d:01:f4:24:5b:d0:fd:23:f4:00:fa:62:21:92:8e:70:50:
a4:0b:01:b5:4b:02:6d:90:9a:21:2b:8c:e9:a9:84:35:43:41:
e2:b8:29:15:8d:51:36:7c:1d:69:b2:5e:c1:c4:74:a8:81:5e:
f9:4c:79:54:1c:25:c4:8b:dc:54:46:2b:03:fc:76:85:f8:62:
10:76:44:7f:f6:e5:31:5d:e5:59:97:cb:66:59:94:e4:f0:61:
51:f8:ae:ac:57:91:df:a6:00:86:77:f1:5f:f1:90:d3:44:ec:
31:2b:bd:c5:99:94:95:0f:52:15:ff:27:ea:67:c0:bb:6d:f1:
49:92:8b:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0
NjZDQzRCMEEwHhcNMjYwNDE1MDYzNzQzWhcNMjYwNDIyMDYzNzQzWjAYMRYwFAYD
VQQDEw02OWRmMzIzNy01OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZAMkASOyRa46WXB/jvgbIEg61w7ExY4TG5PmmXQoqbkTiIXdyRg4gFQOomf
Cm79KBzMekYxYXzLrQso4dewu2EyQmRiyHnAoy8h7YezNI1D7Uh3TqHiN3kBpqRp
qj3QZ5tiPvzl7Lpgbg/I3bgfH0cEf5VnAl0VbuoSuhMhAhsFgGXmWof7klq2SoMg
ntCcvl2IueGgnnPfqD4CCp30pVpPqacdH4CBD0jJplFEHOBGon9kMnohcE6lKQkB
GAP5E2B1kOOTr/rGeTbBfColQ38ldc0GCJuS6pWbLLdcJ3dFGPjWLEHgK/MJD5MO
79w6VfTiB3jqUwzet1LaEAljNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/rjs1j
QqYTT3LqsUUejyVDTyS0MB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx
RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzdBQi8yNjQ4NDU5MDIxRjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1
RkVxbThMWmtOc3BHYk1Td28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhJs5DRKuE+j9YdNql2oh4OdjUuyfmN3FeOTM5/4lkaRAcc0P7KaTsEd4YsIs
AnpZkRc5+3EwcvGX7wRpnXc3f4u1Sfb3NsxpNgCdJsSbsyZIsJvrUQzonIAYC3Mr
zaF15PCZGYPggUgMl2foQmtAvPnwQ3KilUXKGJLL+qbs5y0B9CRb0P0j9AD6YiGS
jnBQpAsBtUsCbZCaISuM6amENUNB4rgpFY1RNnwdabJewcR0qIFe+Ux5VBwlxIvc
VEYrA/x2hfhiEHZEf/blMV3lWZfLZlmU5PBhUfiurFeR36YAhnfxX/GQ00TsMSu9
xZmUlQ9SFf8n6mfAu23xSZKLTA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:57:07 2026 by rpki-client