
$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json)
Hash identifier: LzGVxw4tYWiBdwOkx1bicEPRB1Y0x1muHUq9U4DgRH0=
Subject key identifier: C1:AA:24:36:A3:A6:EE:D1:B4:3B:52:B0:7E:D3:93:39:4F:1A:38:5E
Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Certificate serial: 0610
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
Manifest number: 05F7
Signing time: Sat 04 Apr 2026 22:46:18 +0000
Manifest this update: Sat 04 Apr 2026 22:46:17 +0000
Manifest next update: Sat 11 Apr 2026 22:46:17 +0000
Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: 4GpeBJWMx2m6YdZDbPtnWyIqVbn0prJ4g1NWku0nQLk=)
2: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: LMoK6W32MRhH2sWdtFfKukoaxVo2lgpAN0mzc0aoUcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552 (0x610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Validity
Not Before: Apr 4 22:46:17 2026 GMT
Not After : Apr 11 22:46:17 2026 GMT
Subject: CN=69d194b9-fc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:47:b1:6c:9e:80:3b:3c:83:39:f6:5c:f4:
80:df:54:86:ae:73:b7:9e:d9:12:0b:c5:e9:36:7c:
c4:91:8a:f8:c1:2a:8e:36:bc:28:c5:c6:5e:79:af:
18:6c:94:15:47:22:de:16:86:a0:b7:7b:93:e1:4c:
09:88:3c:8b:52:fe:bd:f8:5e:3f:b7:e0:9b:9c:8b:
52:56:40:ed:7d:14:57:70:dd:08:95:15:e6:95:3b:
4d:98:27:d9:31:99:e2:2b:81:a1:00:91:97:ec:52:
24:7e:e5:02:f9:4a:95:26:89:3d:ec:94:92:cb:e2:
af:3f:72:dc:f4:eb:2b:a5:98:98:e9:4f:2f:26:1d:
fc:ed:ec:bb:71:15:f7:f4:19:53:c8:91:c3:e5:3f:
36:ec:34:8c:bb:29:39:36:fd:58:98:08:15:85:a6:
e2:2f:10:71:48:c3:97:d0:b6:60:28:ae:f2:d2:d3:
31:74:c0:b8:7a:e9:11:5a:5e:56:0b:4d:38:3d:28:
cf:13:f0:2d:85:7a:be:ed:f2:89:9f:07:65:98:24:
2f:f3:09:9c:1f:c0:82:9a:f5:9b:8e:9e:0b:bb:cd:
20:98:12:79:37:05:9a:80:fd:5b:12:28:3c:01:c0:
5e:07:8a:eb:f4:d8:8a:29:da:14:b5:b4:fd:79:30:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:24:36:A3:A6:EE:D1:B4:3B:52:B0:7E:D3:93:39:4F:1A:38:5E
X509v3 Authority Key Identifier:
keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:37:01:5e:b8:1f:bf:d6:96:94:e4:be:78:f7:b6:68:7f:12:
2e:16:5b:67:ea:1a:da:7c:79:9e:b8:95:b4:c3:f5:69:96:4e:
13:0d:97:29:e1:f6:41:83:23:9c:23:c9:e4:b7:c5:e8:62:11:
3e:a0:40:fe:7c:26:7c:22:04:b0:0f:3a:fc:1f:db:5d:9e:80:
dc:20:1e:b7:2b:e0:34:23:37:f1:7e:fe:30:6c:d9:7d:b8:b7:
0c:6a:88:4a:a6:4c:d3:e2:ef:8c:61:e9:7c:4d:b2:b3:54:97:
c9:f3:bd:61:51:74:f3:73:49:1e:e8:da:f3:bd:6a:18:03:9e:
18:21:1d:26:e1:7b:2f:9b:c8:f9:05:8d:9b:12:db:e6:ce:21:
b3:23:d6:a8:bb:b6:c3:7f:4d:40:58:65:c7:d8:d4:25:04:40:
48:48:b2:af:34:d9:a9:6c:74:c2:e2:e0:ba:c8:e3:34:64:33:
d1:c0:5b:4b:55:aa:d5:12:43:f7:bf:82:57:a2:44:5f:64:62:
f4:bf:67:fb:57:2a:fe:84:0f:d2:ff:16:14:37:a8:c7:ca:e1:
41:07:f5:e9:b1:3b:10:8b:61:b0:58:61:40:78:ad:76:31:e8:
b2:55:28:da:b5:b5:4e:3e:01:75:68:86:1e:f3:70:88:de:ad:
c4:85:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:44 2026 by rpki-client