
$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json)
Hash identifier: bwfRG9LIX29ZeJgIm0A0/UpabWRqfmXPNctpDOTNwWM=
Subject key identifier: 60:E3:9A:F7:FF:FC:8E:18:10:3F:37:CA:70:EA:15:44:C5:BB:5F:C8
Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Certificate serial: 04AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
Manifest number: 04A7
Signing time: Sat 04 Apr 2026 23:43:26 +0000
Manifest this update: Sat 04 Apr 2026 23:43:26 +0000
Manifest next update: Sat 11 Apr 2026 23:43:26 +0000
Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: aNx9gmsJwuWFOKON1oxOr5poFirCEzcgsMHUVk3NtRk=)
2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: gIEs5PsSbdv2kd7fXZi9XdqKRPbKMGlmjiL9BhYFLAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Validity
Not Before: Apr 4 23:43:26 2026 GMT
Not After : Apr 11 23:43:26 2026 GMT
Subject: CN=69d1a21e-2bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:4a:83:02:23:2d:00:fe:df:e0:61:02:80:
7c:73:61:36:80:f1:3d:4e:76:87:ad:13:4f:23:33:
9d:fb:68:73:42:6c:e3:92:a2:11:51:ef:b3:f3:8a:
1a:93:df:0d:55:da:97:b6:04:91:31:e6:50:c2:7c:
58:d4:42:45:20:da:ec:0b:99:2d:d9:93:5c:71:73:
62:e1:d7:7e:b2:d3:2d:c4:c0:7c:9d:e0:2d:94:c8:
0c:47:f9:6a:5f:17:07:7d:41:f9:d7:62:6b:3e:cd:
23:dc:86:96:03:b4:9f:d1:d6:fc:5c:56:10:48:6c:
c8:c0:50:60:04:f9:e7:2a:64:ed:b3:24:4d:35:e3:
b3:4e:85:09:db:1a:c6:ed:5d:4b:1f:18:2b:54:bc:
70:1c:18:3c:a0:0a:63:36:57:5b:f3:ea:9c:35:80:
0f:50:96:8e:10:0a:91:be:32:6b:ee:1e:96:c1:e5:
9a:10:47:fa:f8:9f:d2:83:80:8d:e0:44:9b:d1:3c:
ca:6d:da:7a:4c:7c:a9:da:58:fe:2d:74:29:6a:cb:
d0:8c:9a:24:f6:a3:e0:24:46:3b:dc:b1:1c:cc:bf:
a7:8f:c7:83:5a:b8:85:74:f7:18:59:54:c1:fb:6c:
96:bf:69:9f:52:53:c6:b7:61:d0:58:a0:04:57:67:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:9A:F7:FF:FC:8E:18:10:3F:37:CA:70:EA:15:44:C5:BB:5F:C8
X509v3 Authority Key Identifier:
keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:64:11:73:b9:1b:9f:75:d7:bd:a6:5e:47:51:e7:a0:b4:43:
aa:cd:3a:ea:1a:d6:ec:9d:4b:4f:5e:76:a5:9e:ab:23:56:84:
20:26:ae:65:4d:f2:3c:e4:06:76:17:81:0e:ae:86:4a:85:22:
82:f2:7e:be:50:68:3d:cc:75:a1:c2:fd:55:5a:b5:b3:c1:ed:
ed:44:ab:bb:2d:c9:e4:f4:13:94:be:d4:0a:18:0f:63:5d:3d:
d0:46:0d:36:00:bf:ff:65:dc:62:aa:79:59:6a:86:dd:f2:31:
e3:bc:e0:6f:d0:80:42:8d:e9:54:2d:41:05:2a:ec:a5:ff:ed:
4a:30:72:d8:c4:c3:9e:cd:3b:22:ce:1e:ab:a6:ad:37:7b:fa:
01:f4:21:42:b2:50:80:64:e7:d3:d0:ae:4f:97:e3:cb:71:f1:
2e:63:cf:12:ba:94:ad:f3:72:22:31:97:b1:b9:8f:b2:03:9e:
a3:d3:b4:64:d5:cc:1c:aa:b5:60:f4:e8:ce:a9:f4:a3:66:7c:
0c:f5:3c:ac:b0:11:44:dc:08:c4:50:b9:6f:e3:4c:b6:b5:ff:
0f:ce:11:31:cd:26:30:35:be:1d:85:7e:ce:04:cc:47:fa:3a:
e4:e1:66:d5:f7:e1:b4:31:8a:e9:f5:03:e5:fa:4e:65:9a:7f:
33:d9:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:59:32 2026 by rpki-client