
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier: 0knaBO9sTfRFbCXrxSVlA1CPHVqVyVF2oikT1MtCLIo=
Subject key identifier: DE:35:57:EE:0B:3C:BA:6D:B9:E2:05:0D:80:F6:9E:88:3C:00:9D:CE
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial: 017D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number: 0176
Signing time: Fri 17 Apr 2026 04:25:26 +0000
Manifest this update: Fri 17 Apr 2026 04:25:26 +0000
Manifest next update: Fri 24 Apr 2026 04:25:26 +0000
Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: XN+GCB5JnVGHQ9+n+O10ypJOnED56m5d+uI3IxrbCI8=)
2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: /cyIS7He6/hUkUatIHzzKlcuqjzcEKY9CwicKq3CtKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Validity
Not Before: Apr 17 04:25:26 2026 GMT
Not After : Apr 24 04:25:26 2026 GMT
Subject: CN=69e1b636-1339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:10:cd:28:ec:8b:6c:5e:3b:cb:5c:34:d4:
4b:61:7e:e0:38:58:58:e2:77:7c:58:d0:fd:44:6f:
b1:35:d0:60:b6:15:d2:1b:97:7a:c6:21:fe:1a:3a:
b6:98:1f:1d:8b:7d:55:9c:77:e3:00:ea:a3:d8:f4:
16:b7:62:b5:70:7f:c9:08:c3:fe:93:f0:df:a5:92:
49:18:1e:32:fd:9a:3f:d2:fe:17:a3:84:7f:b5:b2:
8b:ac:34:dc:ff:42:91:04:83:06:7c:81:b9:b4:09:
73:38:ab:c6:ce:48:5c:af:30:b5:51:34:74:2c:98:
3c:4c:23:08:2e:93:95:e9:98:d6:8a:21:75:71:f4:
77:43:4c:f8:65:07:e7:26:79:1a:ef:99:5f:59:36:
fc:a0:1a:a0:c1:70:87:1d:7b:31:6a:19:80:90:14:
b8:2d:73:1d:7a:67:c7:2c:12:aa:8c:75:92:23:59:
47:d0:62:2a:59:68:58:d9:f9:76:eb:6b:4b:88:c2:
ac:06:6b:3f:e7:5d:ca:93:f2:a0:8c:8b:f4:b6:be:
ce:56:b5:5c:c0:97:31:0d:a7:d2:65:d0:87:f5:2b:
8a:d1:8f:55:37:df:84:0a:70:6d:6d:10:5b:72:6d:
84:06:96:fb:83:8e:f3:4e:59:9b:09:ee:6e:c6:f8:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:57:EE:0B:3C:BA:6D:B9:E2:05:0D:80:F6:9E:88:3C:00:9D:CE
X509v3 Authority Key Identifier:
keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e8:15:ff:1e:91:01:77:d2:d6:dd:d8:f3:c8:74:90:5d:cf:
8f:57:ba:9f:ff:7d:9d:6f:98:b3:73:96:21:e0:d3:c7:e8:62:
d5:1e:b6:99:cf:85:1b:0e:7d:9f:76:6e:63:24:57:30:2b:0e:
76:90:a0:cc:26:69:8c:59:b3:db:51:65:4b:a1:97:77:1f:de:
5f:4b:e8:89:7d:20:81:0f:4f:8c:f4:8f:22:d9:e7:b2:e6:30:
f9:2a:76:f9:06:92:9f:de:57:7f:0d:d0:0f:e6:f2:77:12:73:
69:fd:5e:a4:fb:44:f6:96:38:85:99:62:92:15:08:26:bf:e8:
4b:c3:0f:fc:b9:e8:02:c8:2e:0b:af:cf:8a:cf:94:cf:f6:21:
91:4d:b3:c6:7a:32:f3:2f:de:96:5c:33:e7:52:b3:22:eb:d6:
70:8c:50:83:d4:f7:54:5b:b3:d4:65:4d:ae:a8:07:e2:01:ed:
23:33:11:ee:2e:db:9c:b5:3a:5b:a0:a5:00:1e:50:01:71:20:
8d:63:ec:d2:15:f1:55:c5:d0:34:fd:3a:5a:49:80:77:f3:37:
72:7a:00:fb:c8:d1:05:bf:28:bd:ae:63:fa:ec:a0:4b:5d:61:
64:05:53:f7:a7:98:44:9b:49:74:de:8f:6a:15:5e:c3:7f:df:
ae:2e:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:41 2026 by rpki-client