
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json)
Hash identifier: GZCTULYarJbne1bqRzdmbRjLqvuZmNDAVy1rMG+E9ws=
Subject key identifier: 26:4C:BE:5C:A7:B4:E9:F9:1D:47:89:38:DE:3E:40:39:05:A3:EE:FD
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
Manifest number: 023A
Signing time: Mon 05 Oct 2026 02:53:47 +0000
Manifest this update: Mon 05 Oct 2026 02:53:46 +0000
Manifest next update: Mon 12 Oct 2026 02:53:46 +0000
Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: Gvu77pW5eGeGxbdi8Edm+AmkpR60cvqz8lPeOYLuuwU=)
2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: EOojy2+JzC+p+QaVV3QkjR8Q0Zfn9YjNT084DP1KFTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Validity
Not Before: Oct 5 02:53:46 2026 GMT
Not After : Oct 12 02:53:46 2026 GMT
Subject: CN=6ac3113b-4515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:2d:35:9c:15:84:d4:0b:0d:42:d7:0c:3b:
82:46:9c:cb:c2:66:b9:82:ec:a7:0a:0b:e8:46:5d:
ba:59:98:ba:23:a1:50:81:4a:7e:2f:b4:ff:4a:41:
76:f2:61:fb:b4:84:43:2b:88:5d:6d:5b:8d:11:d0:
a8:c6:7a:37:80:75:95:45:99:e0:77:09:3b:a8:cf:
a1:f5:79:90:af:26:fb:1c:dc:dc:5a:2d:2c:9e:2e:
3e:ec:7c:36:56:11:6b:1b:41:3d:5f:bd:70:65:1a:
02:2b:04:95:34:24:54:e7:1f:06:e0:c4:dd:6a:1b:
49:e3:08:9b:ee:b9:3a:14:7c:ec:53:14:d5:60:cd:
01:4d:86:42:14:83:b5:f9:ba:aa:76:fb:0b:fe:c1:
e9:57:e6:34:b6:22:01:b7:fd:87:81:12:27:7b:4d:
81:24:86:19:7f:b7:87:89:c8:c6:c7:d7:08:21:3a:
f7:24:5f:a8:1b:7a:00:2b:0c:d1:b3:bd:18:37:64:
98:cb:7d:d4:e6:3e:6f:d2:92:0b:c6:ee:6e:ef:01:
59:11:03:4e:40:27:6e:aa:a7:18:89:67:5d:eb:53:
d1:94:bb:c2:56:56:9d:9e:96:e3:76:be:26:9f:d3:
64:0f:53:17:b1:0a:3f:5b:02:4a:12:04:3b:ad:ed:
35:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:BE:5C:A7:B4:E9:F9:1D:47:89:38:DE:3E:40:39:05:A3:EE:FD
X509v3 Authority Key Identifier:
keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:d4:18:aa:a4:5b:8c:31:ef:ba:fb:25:c5:05:0a:82:aa:7c:
d5:d9:f9:4a:e2:bf:fa:da:c2:c2:99:db:e6:03:59:17:74:82:
45:8e:49:83:d3:e0:26:46:dd:04:5c:b2:07:ce:50:a8:e7:1b:
9d:58:01:f2:c5:a8:6a:2a:d9:08:8e:9c:5a:e6:03:a1:6f:e5:
cd:c1:b1:6a:9b:fe:93:0d:2c:70:d7:d8:14:b7:20:58:de:d5:
b2:86:27:24:1c:99:c3:9f:eb:39:14:3a:ce:9e:e4:81:80:64:
ca:50:08:b7:05:cc:c4:79:97:85:a6:5c:00:3d:0d:10:91:1a:
9b:6f:53:76:2f:8e:47:a6:cf:22:11:ba:28:0e:c6:a4:5a:87:
9a:a4:eb:c3:60:6d:66:bb:45:68:44:e8:c5:d6:e4:a9:bf:ce:
50:91:7f:42:dc:15:28:1d:75:84:09:ca:2b:1b:30:9d:fa:ab:
4d:8a:93:77:86:77:dc:80:77:17:4f:4e:e9:3f:5a:20:5c:57:
02:f5:b8:f2:aa:c9:3e:f5:ba:9e:45:4d:f7:bb:03:0f:bf:f5:
ba:da:8e:43:c6:ef:10:8d:1c:28:22:b5:79:6a:3e:35:34:17:
0c:d7:94:0f:57:0f:23:b0:b9:92:20:69:03:6c:ca:ee:2d:66:
fd:87:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:02:09 2026 by rpki-client