
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json)
Hash identifier: Xdy/ziO8Kf/0lo1VVMAbs6nWTf0B3zoUxCb+m446DBs=
Subject key identifier: A1:35:A9:1E:3F:7C:98:13:A9:0F:3F:68:79:B5:2C:3B:BF:23:F1:CE
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial: 028B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
Manifest number: 0273
Signing time: Thu 03 Sep 2026 02:20:42 +0000
Manifest this update: Thu 03 Sep 2026 02:20:41 +0000
Manifest next update: Thu 10 Sep 2026 02:20:41 +0000
Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: k8ElrQt40fHCDlkA+j2+747tXLMNmut39JH6wbYgOQg=)
2: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: rfwEqLrDjbcvE+bR4EvFurgv5hC+mKm1jwiX/9EN/YI=)
3: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: OiUHSUASobIiQA2wqGL1RqWQ+8k9gLvxBOEIYXiz5RM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Validity
Not Before: Sep 3 02:20:41 2026 GMT
Not After : Sep 10 02:20:41 2026 GMT
Subject: CN=6a98d97a-00ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:70:98:d0:06:66:eb:7a:32:da:07:09:82:
93:e5:d0:fb:79:47:b0:ed:76:81:80:83:8f:ec:86:
e3:17:39:d3:79:b9:33:13:31:66:e5:d9:a2:65:4d:
62:91:82:60:0f:90:5c:27:e6:02:1f:9d:f0:18:5b:
46:6e:8c:e3:ae:58:7f:d1:6d:3a:91:e2:c1:7f:5e:
14:7e:c3:5d:76:18:5e:69:3f:7c:75:37:f8:ab:05:
a2:e2:43:da:78:0f:dc:7c:dd:85:c8:6a:b1:8e:5a:
a8:1a:af:f9:58:9e:8f:02:9c:8f:ad:ef:bd:42:7b:
08:e4:4a:4c:84:2a:ec:9d:f6:13:a0:04:60:8f:46:
8d:5b:2a:20:35:96:2d:6c:44:ab:6c:65:2c:34:ef:
e0:16:f6:24:fa:8e:50:5b:9c:cb:e9:93:b5:58:b1:
3e:76:ab:7a:12:5d:e3:eb:fa:d8:f6:51:e7:03:2b:
79:57:84:90:98:42:4b:87:7d:0f:87:c5:a5:48:17:
1a:5f:44:e6:e3:b4:df:91:90:d0:5d:12:82:ad:5d:
20:36:ac:a2:b3:ac:e4:bf:76:7f:ef:01:11:7a:32:
7c:72:65:19:6f:02:86:9e:1d:42:92:a2:86:20:26:
30:a6:db:eb:9d:9e:e3:31:85:18:c6:2e:7e:17:be:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:35:A9:1E:3F:7C:98:13:A9:0F:3F:68:79:B5:2C:3B:BF:23:F1:CE
X509v3 Authority Key Identifier:
keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3b:5d:b3:5c:75:15:c6:3d:87:89:45:af:3c:e0:0c:0c:6b:
50:3c:12:5e:1e:e1:f8:2f:04:72:ed:6e:46:74:e0:d8:9b:43:
84:7f:8d:69:65:44:35:6a:36:6d:07:a5:e7:4c:bf:5f:52:d3:
74:a8:c5:f1:a0:1b:88:a6:8f:04:e1:19:97:cd:a6:12:96:85:
18:77:fc:01:24:99:e8:47:a5:ce:65:fd:8b:57:e9:7f:4e:ee:
6c:8d:c2:03:8e:11:f9:32:8c:f4:7a:86:9d:a7:5a:2b:95:0b:
d2:65:44:bc:ac:ed:f8:53:0d:4e:e0:4f:84:4a:2f:77:97:21:
69:96:e9:b5:00:0f:e0:26:21:36:f9:d9:54:90:10:c7:b5:b2:
59:a2:4b:c6:b5:26:f5:ba:a9:a9:c9:d3:6d:d5:00:68:e6:4f:
73:ae:e1:05:37:1e:39:c1:d2:e4:5d:3d:df:26:ed:f0:1f:1a:
95:10:5e:18:9c:06:e6:7b:03:c6:a4:a0:e2:4b:3d:cd:7b:1f:
91:bd:b6:66:60:4e:0a:85:43:7b:c2:42:f3:70:20:6b:3e:89:
e8:fd:89:0a:ff:a8:4e:7a:e1:c0:2b:30:2a:f6:5b:4e:5a:3d:
68:1d:cf:be:13:33:12:88:be:7d:32:46:82:1a:23:7d:b8:ee:
33:9f:6d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:09:03 2026 by rpki-client