
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json)
Hash identifier: TClCmo1jJj6ksV29fC/Y1auC1QlGPYslR69Fw9qHKKA=
Subject key identifier: 8F:F1:EB:6D:01:69:67:DC:F4:BC:48:29:59:EE:11:EB:8C:50:C7:1E
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
Manifest number: CC
Signing time: Fri 17 Apr 2026 06:38:12 +0000
Manifest this update: Fri 17 Apr 2026 06:38:11 +0000
Manifest next update: Fri 24 Apr 2026 06:38:11 +0000
Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: dtmZ9zAsanmdXxa3LvfBP6RyfveknqD1265ihcepGfw=)
2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: vDtAe0YTSyL7kgoQAACefENkKxeqw/YNxKaiQNIECVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Validity
Not Before: Apr 17 06:38:11 2026 GMT
Not After : Apr 24 06:38:11 2026 GMT
Subject: CN=69e1d554-a8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:b3:f1:39:6c:5b:70:5f:6e:93:73:d2:18:
83:a0:2c:d3:dc:d2:b4:63:4b:e6:78:aa:8d:97:3d:
3d:c2:23:d5:61:d0:c1:18:f4:e3:c5:ab:47:ae:b3:
27:9d:9c:42:80:8f:d1:1d:eb:35:d4:da:0e:49:fa:
84:c6:2c:76:c9:22:d9:d1:32:7f:49:7d:d1:25:4f:
2d:a3:bd:cf:21:69:61:71:91:5c:0b:c5:2e:84:21:
69:68:32:87:e5:bd:38:e2:58:b6:d1:2d:69:7e:9e:
21:84:f0:1e:48:b1:91:9d:cf:e8:3c:82:c2:f0:43:
e3:4d:b9:ee:3d:a4:50:e4:92:0c:a0:fa:b6:bf:16:
e3:66:14:c6:47:ea:20:95:04:cd:4d:61:f0:af:6f:
59:ce:b7:61:ca:f8:21:d8:f1:56:7f:ec:df:a8:68:
5e:c7:c7:d7:dc:3e:ee:af:99:03:b7:c8:66:86:f4:
79:62:11:4b:87:c3:56:cf:f2:a2:0d:79:1e:4a:63:
c0:3c:94:5f:bb:ef:d3:b9:8b:02:ce:c2:42:3a:d7:
43:05:8b:d5:b1:01:2b:41:97:e8:53:17:9a:d1:86:
bd:38:1a:91:b7:e3:77:d6:06:b3:b9:a4:44:de:98:
09:2d:9c:35:43:c8:a1:1a:01:9f:57:12:91:a6:f6:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:EB:6D:01:69:67:DC:F4:BC:48:29:59:EE:11:EB:8C:50:C7:1E
X509v3 Authority Key Identifier:
keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8b:4a:99:f0:4d:f8:c0:b3:c7:0f:fe:b0:7f:83:00:43:47:
43:91:f7:4e:53:a7:9f:c3:48:75:18:9c:99:61:87:9d:f7:54:
c5:a7:aa:09:81:e0:76:ae:8d:3d:8e:62:8c:6a:c0:42:bf:57:
e8:f9:df:e8:ef:37:d1:cc:7b:0f:1b:cf:46:01:fc:2d:f4:cf:
e8:87:5b:7c:4f:f3:7b:5c:4c:f3:68:5c:1d:67:ad:ef:32:15:
4f:42:b1:7b:82:87:12:ed:8a:08:00:04:e6:f2:78:06:bc:f5:
73:b5:65:cb:3a:c6:e1:37:d5:2b:df:b5:6f:7d:13:e9:2f:cf:
9b:bf:fe:b0:f4:8d:3d:61:13:91:c5:c7:77:4e:ec:98:58:55:
08:b9:8f:a0:9a:6b:1f:5a:35:07:99:78:63:52:7b:d2:3a:2c:
5d:aa:47:d6:96:d3:49:04:37:13:20:2c:30:0f:b9:a3:ae:38:
62:a8:e8:ff:95:e2:52:c1:59:31:a1:2e:0b:39:35:83:28:59:
b2:29:bd:c4:fa:91:4b:68:1a:b3:8a:7d:53:a8:ea:2f:25:61:
2e:e7:ad:0a:96:3a:ad:10:c8:00:21:45:b8:69:70:44:b9:f8:
e6:4f:4a:12:40:54:cf:c3:b9:d1:8b:16:89:ff:22:92:f3:74:
e0:f5:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:24 2026 by rpki-client