
$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
File: l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft (raw, json)
Hash identifier: TC4+PhMikJ1F5Yfn6RSR45OS34H0Caf3u/x2bhkZqx8=
Subject key identifier: E9:70:EC:48:6E:A3:45:1B:51:B1:2D:92:45:EB:BF:D6:80:ED:BC:2F
Authority key identifier: 97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8
Certificate issuer: /CN=A91161EB/serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
Manifest number: 15
Signing time: Tue 19 May 2026 08:52:46 +0000
Manifest this update: Tue 19 May 2026 08:52:45 +0000
Manifest next update: Tue 26 May 2026 08:52:45 +0000
Files and hashes: 1: l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl (hash: gfxslEwTQF2MDg6F7LbjYvCxjmhlVINucGK5XhxQX/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl
rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91161EB, serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
Validity
Not Before: May 19 08:52:45 2026 GMT
Not After : May 26 08:52:45 2026 GMT
Subject: CN=6a0c24dd-da30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:b5:1b:11:9c:a9:4e:63:e3:c8:ce:06:8a:
18:3d:48:78:40:df:3d:2f:1d:01:44:64:57:b0:7c:
be:fd:76:5a:6b:10:4d:fb:be:4f:43:3b:9e:2e:3c:
e9:d4:2a:24:df:30:7a:d1:f0:7b:58:1d:22:73:e4:
86:42:09:8b:52:04:6a:04:bd:9a:14:d3:ae:ce:a9:
5d:cf:ae:2b:3b:33:b6:03:05:f6:c1:31:df:20:cb:
63:10:db:4f:7c:8d:12:00:36:4a:1e:be:ae:dd:67:
de:a0:db:c6:4b:1a:59:15:ed:56:9e:41:63:f7:1b:
d3:04:06:87:60:8c:74:29:05:35:8f:00:85:1a:a1:
48:2f:89:62:e7:2e:9c:39:d7:af:f8:72:f4:3c:04:
80:69:c7:25:42:28:e4:d5:24:03:e4:1e:b2:e2:1d:
5e:c0:bd:16:54:9f:92:f6:44:b8:69:cf:c0:a3:b6:
35:cc:bc:bc:a3:49:75:da:77:03:8e:74:73:15:04:
90:cc:f3:1f:33:47:22:3e:21:a9:04:79:a3:44:49:
a3:aa:46:ca:64:9b:e9:ec:d9:45:df:7d:30:da:93:
ae:6e:65:14:59:0b:35:b3:f7:fb:37:e1:25:a5:13:
ca:2a:fe:eb:72:57:94:11:42:17:d5:80:f5:5e:43:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:EC:48:6E:A3:45:1B:51:B1:2D:92:45:EB:BF:D6:80:ED:BC:2F
X509v3 Authority Key Identifier:
keyid:97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0f:6d:f2:24:59:56:2e:4e:ae:b8:2f:2c:d1:5e:74:03:4f:
13:3b:52:97:b0:7a:66:0e:16:96:b8:09:08:2f:f7:7d:2a:ba:
72:50:f2:8a:46:65:ec:da:e9:0d:34:2b:fd:2c:62:57:24:42:
1b:7e:6f:bd:04:f8:e3:a9:7a:81:05:50:c0:9b:f3:f6:63:ac:
be:e5:e7:e0:4d:27:fe:e1:e4:65:58:1a:5d:c5:3d:42:f2:a5:
4e:01:e4:44:6a:59:f4:f3:f0:d0:5a:45:28:49:46:b1:29:77:
fd:f6:6f:08:d7:76:44:0f:37:25:1d:78:9b:64:89:ec:59:4f:
1d:bc:19:ad:7f:1d:fe:47:6f:54:8b:40:29:f5:9b:02:9c:4d:
51:94:1f:cf:75:ed:d0:f8:aa:bd:5e:44:15:23:20:be:31:0a:
4c:b4:9f:27:3e:fa:d6:bc:67:0f:4e:6b:20:1f:f2:3c:be:05:
3c:92:0c:fb:f7:56:ac:44:63:68:7c:08:6a:d4:c5:c2:97:cf:
3b:b7:c6:db:d6:9a:19:46:a0:ed:06:01:cc:fc:f4:11:ae:94:
47:ff:91:e2:74:6c:7e:cd:ef:8b:85:32:70:12:f8:9b:ec:2e:
f9:63:4f:85:72:7f:cd:c1:3c:a3:86:2f:88:ee:d3:63:cb:18:
8a:97:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:24 2026 by rpki-client