
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json)
Hash identifier: DGbNwRuBA27VsD9q18l3I5c1DClZrlGlctLRwa81F20=
Subject key identifier: 1B:1C:AA:A8:2E:65:26:23:12:76:D0:58:F4:66:CC:9E:6C:CD:02:89
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial: 05FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
Manifest number: 05D7
Signing time: Thu 12 Mar 2026 22:40:32 +0000
Manifest this update: Thu 12 Mar 2026 22:40:31 +0000
Manifest next update: Thu 19 Mar 2026 22:40:31 +0000
Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: 6KlbzAs13r0QD2buT2MCetrGYjKVB0+SATF1Gzx8KmA=)
2: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: X85hHwwMk7D4YA68Yefpn/DdDekokXijChU0NLic1JM=)
3: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: 3HHpLWwhlM54c0ygayHpZ//nfGJy4YzZlrDagN2/hEE=)
4: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: Ae3vnYMRPKUdXa+CO5NCrtQU86FdJMZKr59EI0hk4E8=)
5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: +d1MUKmmVJG/vsTFf7Frn1NwsWtESd/BW6+x47gDzSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530 (0x5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Validity
Not Before: Mar 12 22:40:31 2026 GMT
Not After : Mar 19 22:40:31 2026 GMT
Subject: CN=69b340df-3548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:0d:8a:22:02:b3:62:87:9f:b8:75:e0:f3:
39:f1:3e:9f:ae:19:e9:77:5a:39:56:64:aa:68:61:
42:0c:c4:f4:7a:ea:27:45:68:a2:2f:d9:43:5a:76:
c0:51:90:b9:d6:f8:c5:a4:d9:fd:7d:92:7e:6b:a9:
b6:5e:11:d3:33:14:8f:f1:cf:2c:6f:b3:2d:9a:2b:
d9:b3:02:89:13:5a:35:9d:4b:a6:bf:68:57:cf:a5:
ec:66:d0:ca:38:16:e5:71:b8:4d:fb:3c:73:a6:f7:
1e:2e:5e:24:85:15:26:89:97:d2:e2:b2:f7:07:31:
cd:9e:b6:1c:07:99:3c:02:2c:bb:ea:f5:37:00:cd:
84:da:c1:dc:b7:fd:c7:9b:32:99:ea:d8:1f:80:9a:
1c:90:ac:1b:8d:52:95:45:04:f2:cb:02:f9:6a:77:
4f:7f:d6:24:9f:cd:59:fc:eb:6d:b5:ad:4d:8e:43:
94:f2:2e:5b:92:ee:53:d0:a4:ed:da:29:2f:4d:28:
94:b5:ab:ba:0a:0d:88:af:40:05:f4:a2:ce:54:ff:
b3:d9:49:b3:91:09:b8:78:7e:be:ca:93:da:35:ec:
f7:75:1a:5d:85:b6:0f:ad:5b:86:39:4a:d4:fb:56:
3c:01:a4:4e:20:55:d7:d7:49:ba:fb:91:79:bd:af:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1C:AA:A8:2E:65:26:23:12:76:D0:58:F4:66:CC:9E:6C:CD:02:89
X509v3 Authority Key Identifier:
keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c1:a0:d9:c2:1d:97:84:d0:bc:8b:ce:bd:4f:27:c2:6c:95:
0d:e1:ef:df:54:ea:90:a7:dc:b5:04:f5:a4:08:c3:23:eb:a7:
cd:0a:a9:84:4b:97:80:fb:1c:4b:a8:c1:bb:31:cd:08:12:8e:
6b:f8:67:59:4e:d0:c8:85:36:62:59:3e:86:19:8e:5b:cc:bc:
88:f7:e9:c1:79:9d:d7:4c:76:02:f3:44:f2:6e:b4:3f:54:34:
51:f9:13:eb:4e:cf:0a:02:b4:a4:cb:c5:b0:8a:60:a7:ca:83:
fa:9e:96:cd:69:4c:70:f7:f3:80:5d:0d:66:4b:40:2d:8d:eb:
8e:f7:e0:b6:c1:ed:24:90:59:70:4a:2a:1b:ca:ec:0d:8f:85:
94:29:07:ba:60:1e:f2:a0:e2:d7:44:34:3e:20:75:a7:99:46:
63:f3:01:d0:97:6d:a8:b8:41:58:d1:8a:09:ae:dc:63:4f:cd:
67:cd:d7:20:d2:77:00:40:66:9f:20:27:16:c8:7a:d6:56:c2:
6a:78:70:bc:df:82:d9:3f:36:71:d0:3d:7c:21:38:da:b4:b6:
e1:1d:74:a1:61:1e:7e:6d:e5:93:61:1b:02:2e:21:e8:3f:ed:
09:c2:9e:26:e7:61:4c:71:cf:7e:a1:40:79:ed:4d:91:d5:6d:
2c:5b:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:38 2026 by rpki-client