
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
File: ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json)
Hash identifier: hPFl4uwIAnAiHezeLi6UIkjks0nsFRpR1F+HDcSDFq8=
Subject key identifier: 5F:E9:E4:83:AE:AD:96:66:DF:5E:E7:F4:F6:E7:C8:18:09:F0:0A:13
Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
Certificate issuer: /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
Manifest number: 0116
Signing time: Sun 05 Apr 2026 05:15:16 +0000
Manifest this update: Sun 05 Apr 2026 05:15:16 +0000
Manifest next update: Sun 12 Apr 2026 05:15:16 +0000
Files and hashes: 1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: 3BZNifWbspGenPMohpkiFH7HVYXIbxob6RVxfcqzCS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Validity
Not Before: Apr 5 05:15:16 2026 GMT
Not After : Apr 12 05:15:16 2026 GMT
Subject: CN=69d1efe4-4da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:57:60:20:8f:5f:58:d9:d2:d2:c9:43:5d:
b0:d4:0e:5c:af:5d:f8:73:54:6a:9a:a9:d6:a6:f9:
a6:b0:2c:32:74:68:c8:66:fb:ba:c6:59:65:27:e1:
e8:b1:26:2c:af:4e:ee:ca:5f:87:39:f7:e5:95:2f:
80:7e:f8:7b:67:ce:0a:b7:4b:49:c1:f8:2a:08:b3:
50:05:17:24:fd:db:e2:19:30:cb:0d:8c:13:22:01:
a0:04:53:de:7c:20:b7:b0:53:fa:45:89:66:57:74:
47:6a:33:50:c7:e8:07:b0:fe:64:e3:d8:1e:46:b6:
98:d8:a5:69:96:b7:6d:59:5c:13:ac:fe:e8:8e:5c:
e9:31:ac:32:ff:d1:43:56:14:d9:f8:73:31:e8:3b:
8a:ca:b4:fd:72:47:3d:64:69:72:85:0a:0e:46:bb:
85:63:c7:e4:3a:5e:5a:3d:ee:6c:ee:c6:fe:fa:94:
f5:85:72:74:c2:a9:9b:c7:11:2c:7d:b2:72:b9:dc:
2f:6e:0f:24:0a:56:17:3a:5a:c2:b1:5c:b5:48:98:
12:65:78:50:b0:4b:23:35:c5:23:fe:93:2a:ee:dc:
74:a1:8a:3d:9b:5f:eb:34:5c:ed:36:70:34:b6:84:
09:59:38:19:4a:b7:93:f1:54:e8:87:85:6e:0a:d2:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E9:E4:83:AE:AD:96:66:DF:5E:E7:F4:F6:E7:C8:18:09:F0:0A:13
X509v3 Authority Key Identifier:
keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:6c:20:d9:15:4d:ab:12:73:47:a0:8c:4b:5f:9f:42:0c:b2:
83:b4:dc:06:a1:8c:e8:ed:37:ff:d4:59:43:f3:58:71:98:ce:
d7:fd:cd:bf:74:f6:60:b3:af:f5:58:48:0c:48:3a:fc:9a:79:
73:4d:8d:88:b8:5d:de:11:e4:29:d9:b5:51:38:87:35:3e:59:
e4:c3:1e:74:e2:56:d9:32:fe:c3:be:7a:42:3c:ea:20:7a:79:
13:b2:3a:0f:88:72:68:c9:38:ac:9e:f2:99:a4:f7:c8:a7:88:
bd:fb:60:9a:3f:4e:32:e5:df:fe:f2:3f:58:6d:50:81:ef:f5:
27:18:d6:22:99:3d:60:38:11:99:7a:98:f1:bd:b4:f1:c0:19:
7a:52:1b:e8:4c:b2:97:d1:40:72:67:95:1d:6d:ab:8e:ba:22:
d3:eb:59:82:88:9c:df:72:55:fb:89:45:04:ae:52:f5:04:12:
ee:f0:79:4c:b6:b6:06:e3:1a:da:49:84:ff:16:ef:ae:9b:bd:
1b:bb:17:72:a4:5d:1f:56:55:b2:ba:3d:1b:92:be:f0:d5:52:
58:f9:88:ac:68:f1:20:c9:e5:79:93:02:af:b2:83:27:fc:7a:
9f:45:8a:de:16:f6:4e:9a:2a:04:f0:d9:70:65:b7:43:c6:e1:
a0:27:ac:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:07:19 2026 by rpki-client