
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
File: LnNx4gZThK0R1DN9DS7NH2bSGco.mft (raw, json)
Hash identifier: 7Sd8T+y6PdmJRYhe0l5AA11K8dPEg2J5wJgmMGgVx1s=
Subject key identifier: F7:DB:A5:EE:E4:8C:F1:F2:81:8E:3F:F0:60:56:A0:D4:A1:53:04:CD
Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
Certificate issuer: /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Certificate serial: 02E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
Manifest number: 02E0
Signing time: Sun 01 Mar 2026 02:12:08 +0000
Manifest this update: Sun 01 Mar 2026 02:12:08 +0000
Manifest next update: Sun 08 Mar 2026 02:12:08 +0000
Files and hashes: 1: LnNx4gZThK0R1DN9DS7NH2bSGco.crl (hash: 2pExBLH/CtcpV5s89zEf8GXwQwDwn1YLGz5meuYOk/8=)
2: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (hash: x9csIWd6s8afCMS1YmHZZTrl70IFmSCSA9MRca7TL7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5753, serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Validity
Not Before: Mar 1 02:12:08 2026 GMT
Not After : Mar 8 02:12:08 2026 GMT
Subject: CN=69a3a078-b193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:60:62:2a:23:03:44:a5:87:38:76:41:84:
d8:2d:9a:dd:a5:c6:96:84:8b:b8:5b:df:eb:9c:90:
40:77:f6:ec:fd:6f:36:4c:d6:46:90:f2:7e:8e:db:
d1:87:bd:f0:50:b8:83:8e:9f:cd:65:bc:b2:5e:07:
79:67:03:a0:bf:6e:9e:98:68:fd:07:1d:88:02:ed:
46:dd:b7:6d:bc:90:9e:a3:28:fd:e6:2a:6c:97:d9:
db:14:1f:d0:60:31:0c:ea:1d:82:f2:7b:4b:6a:c7:
34:4b:43:c1:7e:93:4d:4f:99:f0:45:42:f0:21:b3:
e4:0d:6a:a1:f7:f0:54:67:36:cb:50:23:21:f7:12:
1d:66:74:b0:d2:86:d0:78:e2:f8:6b:ea:8a:94:9c:
8d:39:1b:7f:51:63:29:4e:de:cd:96:39:e8:3b:1b:
1e:7f:1e:82:04:a9:b5:28:a3:ed:67:b0:26:c5:14:
35:d4:ee:41:94:7e:63:0d:e3:1f:ce:fd:67:9f:43:
d9:a7:23:64:0f:e5:96:07:93:98:1a:00:7d:90:7d:
cc:a6:d1:88:60:93:0f:70:f1:d9:60:fc:ae:24:55:
8e:cf:a6:43:bb:07:4c:62:8d:87:83:43:ff:87:50:
53:56:7a:a5:40:9a:28:de:5e:27:5f:89:3a:10:26:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DB:A5:EE:E4:8C:F1:F2:81:8E:3F:F0:60:56:A0:D4:A1:53:04:CD
X509v3 Authority Key Identifier:
keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c4:43:d7:96:6d:06:26:04:53:7f:db:1c:e5:5b:bc:2c:8e:
f7:c5:ab:c5:fd:f2:d9:88:fd:ec:5c:53:d3:14:da:28:72:ae:
41:b7:4f:1a:78:59:36:83:13:1d:f7:dd:a2:5a:57:1c:44:07:
9e:35:02:22:97:c0:0e:a6:69:d4:80:ec:53:e6:2c:54:fa:aa:
cd:47:85:1c:43:9c:a7:7a:e6:48:28:8a:ce:cd:e5:61:c6:c4:
54:19:46:8c:f0:c6:66:f5:b2:20:77:0e:e9:8b:4c:1e:fe:b2:
5c:14:6a:7b:2c:13:d0:15:47:b4:da:ca:ac:61:8e:78:b7:14:
3a:54:bd:9b:5e:7e:76:69:db:ed:29:c7:3d:69:aa:ef:dd:c4:
97:a8:46:e2:3f:8f:fd:77:a5:25:a6:12:40:a6:f0:20:58:e7:
7e:b6:ca:89:ce:49:81:61:4d:61:d3:bb:f4:eb:fd:e6:3d:e6:
14:62:e9:3d:98:c0:41:66:80:4a:16:8a:63:56:b6:05:0c:0a:
2f:0d:0c:1d:4f:65:46:99:80:12:db:cf:6b:c3:25:fa:eb:af:
e8:fb:73:f3:39:17:6e:a7:92:95:9d:9b:d3:da:70:ad:6a:7d:
e5:5f:3a:34:10:ac:47:d7:6e:9f:b1:93:31:4e:31:cf:ed:e3:
ad:72:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:55 2026 by rpki-client