
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
File: lNLPRKNppCI0T3ZXg78B6YKpxAE.mft (raw, json)
Hash identifier: ROUOnquIEcRrZDBXK8qKZqbK264GBb/5drUZhZlmp60=
Subject key identifier: 15:0F:4F:74:35:AA:48:60:34:09:32:75:75:DC:32:CD:A6:CE:DF:E7
Authority key identifier: 94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01
Certificate issuer: /CN=A91D2A10/serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
Manifest number: 0B
Signing time: Sun 05 Apr 2026 08:26:40 +0000
Manifest this update: Sun 05 Apr 2026 08:26:40 +0000
Manifest next update: Sun 12 Apr 2026 08:26:40 +0000
Files and hashes: 1: lNLPRKNppCI0T3ZXg78B6YKpxAE.crl (hash: qWb5d82dDtGhbqqqy1mbGPC2fKtY2++Wd3EpUNHbIaM=)
2: A1E11254233211F193BBD607A5833773.roa (hash: rPfxNiEyt72l+zUUADrrIDao6HH3IxiY1LfJRw6lyTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl
rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A10, serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
Validity
Not Before: Apr 5 08:26:40 2026 GMT
Not After : Apr 12 08:26:40 2026 GMT
Subject: CN=69d21cc0-9326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:24:bf:26:d7:93:0f:76:9f:49:ea:3b:b1:
79:26:46:0c:ae:fe:1c:81:1b:5b:a1:64:83:46:5b:
b1:c4:c3:ef:d5:cf:19:ff:e7:70:c4:6d:05:93:96:
16:f5:30:05:af:17:e2:52:43:38:05:55:88:f6:35:
07:43:4d:0c:9e:c5:70:92:8a:0d:d7:fc:fe:06:52:
24:51:55:f7:f7:9b:f1:aa:9d:d4:74:3d:62:b7:e9:
bc:14:07:04:5c:dd:f1:b7:80:55:ed:f8:df:85:7e:
49:88:b1:a3:6a:de:5e:93:a4:4c:7b:35:1a:97:a0:
32:92:f7:ef:fe:a7:26:5e:d3:21:34:4c:33:af:49:
18:30:f2:9a:da:25:7f:90:d4:bc:3a:20:83:f5:3c:
cf:6e:d4:53:ec:df:fa:6e:41:f5:88:95:04:5a:8b:
7e:8b:30:92:e0:9b:2f:62:db:ab:dc:2d:f7:28:28:
81:1d:7f:1f:c5:9c:8b:d0:b2:9d:34:95:f6:c6:23:
a0:3d:c9:e8:e5:a7:2e:98:6f:57:85:f1:08:43:85:
1d:98:92:12:c2:a6:6e:a3:60:a3:2a:cf:3a:7c:6e:
26:c2:26:60:3a:52:16:31:a4:41:d3:4b:06:8c:67:
41:7e:45:12:6c:05:20:21:f0:67:f2:3b:d5:b9:9b:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0F:4F:74:35:AA:48:60:34:09:32:75:75:DC:32:CD:A6:CE:DF:E7
X509v3 Authority Key Identifier:
keyid:94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:61:81:c2:d5:23:40:d4:41:b0:f6:23:02:41:03:c3:4a:35:
fc:36:cd:df:15:58:a8:ba:19:9b:d3:ef:73:2a:4c:c3:aa:21:
af:4b:99:d0:f1:3a:15:30:ad:60:67:8a:12:1e:bd:3d:83:36:
52:33:28:b4:16:cd:bc:fd:71:2e:33:51:dc:e7:18:a9:85:ca:
84:42:ee:cc:b6:c3:06:dd:3c:5d:4d:51:eb:36:d8:83:af:74:
ab:67:09:76:19:08:05:13:27:33:d3:28:ca:13:a0:b4:82:d4:
74:18:2c:a4:34:47:65:88:61:93:1b:46:93:5d:b0:82:92:1a:
12:6b:e6:ac:95:78:35:22:5e:e9:19:d8:82:ae:ec:58:11:ab:
95:75:d6:60:f4:92:4b:90:13:83:7d:0a:c9:48:2a:0f:14:d5:
06:8b:75:4c:50:99:66:70:76:89:65:57:aa:39:04:b3:9b:2d:
7d:99:04:4f:3c:c8:44:d5:d1:8d:d1:f6:33:91:fa:f3:68:e5:
75:24:fc:5e:db:50:9a:64:4a:43:ea:b4:57:da:d5:6c:e6:25:
6e:b4:dd:ed:f6:0f:f4:d7:8c:0b:6a:28:40:90:8a:52:60:c7:
c1:85:10:32:a2:2e:98:e2:66:6a:e8:86:61:b4:18:01:30:e9:
ed:d5:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:45 2026 by rpki-client