
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json)
Hash identifier: AKLy2bx53/yvja36VRDhQwmsX466MvilSEoUonF339o=
Subject key identifier: DE:08:C1:FE:73:94:07:5C:50:73:87:D1:6E:7D:03:5D:9E:71:6E:9C
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
Manifest number: EC
Signing time: Thu 11 Jun 2026 08:54:59 +0000
Manifest this update: Thu 11 Jun 2026 08:54:59 +0000
Manifest next update: Thu 18 Jun 2026 08:54:59 +0000
Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: TA6tNxOB9LiBeb9/7OiO3Uz3obx0luCDffCNr3AnX18=)
2: D1A10B8A5CF711F1A62649419A833773.roa (hash: prrov2NToaZdP51j0ExVb25OA7QCLLzbDCp+VWHGE34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Validity
Not Before: Jun 11 08:54:59 2026 GMT
Not After : Jun 18 08:54:59 2026 GMT
Subject: CN=6a2a77e3-25f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:44:f1:90:38:9c:23:8b:61:cb:2b:84:85:
80:4e:f3:28:27:55:38:4e:c5:f0:10:a1:b0:02:27:
86:92:c9:46:cb:1b:e3:f4:a3:7f:99:b1:87:b2:63:
67:71:5c:66:1d:23:a4:c9:f4:21:1f:67:8e:82:ae:
b7:b1:3f:b0:59:4e:4f:2a:c5:58:aa:52:5d:c8:7a:
a5:82:d1:9f:45:8a:fc:df:d6:33:bb:98:da:ea:bd:
19:7b:2c:ce:21:d5:25:ac:85:47:90:ae:be:cb:d5:
8b:2b:9d:0a:45:4b:70:c3:b5:f1:01:b0:92:97:37:
c7:ed:e6:a7:e0:ee:ec:3b:20:b0:6d:c0:ef:ba:ac:
ba:17:46:5f:e5:9f:48:2f:a1:c3:73:36:d4:f1:25:
a3:a6:4e:15:71:e6:92:49:b4:e0:75:3b:11:b2:8b:
92:76:11:4d:b7:d4:bf:92:e3:fa:3b:f7:20:e0:07:
53:2b:6b:09:99:47:59:41:bd:56:c7:41:6c:32:4f:
38:46:01:cf:f5:06:c9:db:54:93:d4:58:7e:23:0d:
fc:cb:8b:ee:b9:d0:be:0b:28:97:70:cf:6e:9f:c7:
21:df:a5:13:60:ae:03:a3:1d:fc:f9:e0:b1:cc:83:
2d:98:88:26:bc:3b:52:f0:17:0f:be:7f:ac:b0:e8:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:C1:FE:73:94:07:5C:50:73:87:D1:6E:7D:03:5D:9E:71:6E:9C
X509v3 Authority Key Identifier:
keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d7:b6:86:d1:f4:e2:c7:eb:78:f5:29:31:5f:35:dd:80:e0:
e9:36:03:db:63:85:90:2e:d6:ec:9b:ea:65:15:54:1a:c4:38:
fd:4d:70:a5:c9:88:8d:0e:a0:7f:9c:5d:39:d3:f2:d4:b2:11:
d4:00:35:95:2f:f4:cc:84:86:0c:80:0f:e4:70:9d:95:b5:5f:
dd:c1:a9:ad:2b:49:1d:00:a5:94:31:1b:fe:0c:b2:2d:4e:2a:
dd:cf:71:47:99:2c:04:3f:12:ae:ab:f0:2a:45:5a:8e:5e:ff:
81:68:7a:61:52:04:9f:c0:2e:de:65:36:1f:a5:88:9f:d0:bd:
13:d2:0f:a3:fe:40:5a:f2:8c:9f:ec:8e:44:61:e6:02:77:9e:
e0:42:e0:36:64:bb:70:a4:96:c3:8a:71:ad:1f:61:32:77:48:
c6:63:ba:78:72:7d:48:70:63:5c:d3:90:fa:cb:1d:de:b7:b0:
04:e7:92:8e:39:ef:40:df:4d:0c:b0:ec:36:98:c2:01:87:52:
b5:7f:28:4d:0b:a6:f1:b9:4e:c2:ea:5c:c8:80:3d:7c:3a:ea:
cc:ba:77:fb:4a:15:0f:39:4e:d9:d3:9c:4a:a4:c5:ed:2e:d0:
70:64:e0:f7:1b:55:99:8d:8c:88:2a:cb:ec:0b:3e:ca:13:ce:
7b:34:4d:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNCNUYxMTAvBgNVBAUTKDk0OTZCMUZDNjA2MzY0NDM3MjM5OENFQTMzOEI4MjI0
MjU5MTc1Q0IwHhcNMjYwNjExMDg1NDU5WhcNMjYwNjE4MDg1NDU5WjAYMRYwFAYD
VQQDEw02YTJhNzdlMy0yNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt19E8ZA4nCOLYcsrhIWATvMoJ1U4TsXwEKGwAieGkslGyxvj9KN/mbGHsmNn
cVxmHSOkyfQhH2eOgq63sT+wWU5PKsVYqlJdyHqlgtGfRYr839Yzu5ja6r0ZeyzO
IdUlrIVHkK6+y9WLK50KRUtww7XxAbCSlzfH7ean4O7sOyCwbcDvuqy6F0Zf5Z9I
L6HDczbU8SWjpk4VceaSSbTgdTsRsouSdhFNt9S/kuP6O/cg4AdTK2sJmUdZQb1W
x0FsMk84RgHP9QbJ21ST1Fh+Iw38y4vuudC+CyiXcM9un8ch36UTYK4Dox38+eCx
zIMtmIgmvDtS8BcPvn+ssOjGIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4Iwf5z
lAdcUHOH0W59A12ecW6cMB8GA1UdIwQYMBaAFJSWsfxgY2RDcjmM6jOLgiQlkXXL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CQTAwQzUxNDEz
NjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpFTnlPWXpxTTR1Q0pDV1Jk
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRjcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
M0I1Ri9CQTAwQzUxNDEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpF
TnlPWXpxTTR1Q0pDV1JkY3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHNe2htH04sfrePUpMV813YDg6TYD22OFkC7W7JvqZRVUGsQ4/U1wpcmIjQ6g
f5xdOdPy1LIR1AA1lS/0zISGDIAP5HCdlbVf3cGprStJHQCllDEb/gyyLU4q3c9x
R5ksBD8SrqvwKkVajl7/gWh6YVIEn8Au3mU2H6WIn9C9E9IPo/5AWvKMn+yORGHm
Anee4ELgNmS7cKSWw4pxrR9hMndIxmO6eHJ9SHBjXNOQ+ssd3rewBOeSjjnvQN9N
DLDsNpjCAYdStX8oTQum8blOwupcyIA9fDrqzLp3+0oVDzlO2dOcSqTF7S7QcGTg
9xtVmY2MiCrL7As+yhPOezRNOA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:58 2026 by rpki-client