
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json)
Hash identifier: 3shx96bU/UgOM022Xtszh6oQihgi+F6I5uvOrO2LnEY=
Subject key identifier: 05:84:B4:C9:D0:4E:90:CC:E1:4E:17:ED:2E:BC:21:5A:DC:51:72:94
Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA
Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
Certificate serial: 0C4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
Manifest number: 0C36
Signing time: Thu 08 Oct 2026 18:53:20 +0000
Manifest this update: Thu 08 Oct 2026 18:53:20 +0000
Manifest next update: Thu 15 Oct 2026 18:53:20 +0000
Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: iUWj/iQcA0IgWG9At4TgiuwhBKRR7P+8srVsCLvvTXg=)
2: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: MCISxnfnNlB/wFJ//N3jml3NUfgJKmd1tRtdTSF+Xts=)
3: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: NAxyiAU8glno68cNHqspT7JDCLwrA8VgpOOy/tuTa5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl
rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3151 (0xc4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
Validity
Not Before: Oct 8 18:53:20 2026 GMT
Not After : Oct 15 18:53:20 2026 GMT
Subject: CN=6ac7e6a0-c4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:18:f9:0b:60:83:c9:74:7c:91:05:59:49:
c5:96:9d:80:00:e4:fc:db:49:dc:6b:a7:38:42:b4:
56:44:3b:97:5c:07:70:9b:ee:ba:c6:4e:66:31:45:
0a:e0:ac:ef:f5:b6:bd:3f:f2:97:aa:e3:31:8d:11:
d7:ff:7b:2c:93:0e:de:b4:ce:32:98:86:7d:69:6c:
3c:5f:40:08:ba:ab:c2:ef:1c:bf:a5:28:f2:b5:3a:
e2:85:33:4c:07:66:32:f2:d2:74:56:f0:c7:dd:54:
44:31:58:1e:b2:e2:f2:6c:79:eb:d0:01:01:40:05:
d9:65:86:95:d9:1c:25:d5:12:90:13:4d:97:4f:40:
fd:77:6e:9a:cd:23:c1:9f:80:d5:40:0a:ad:90:b1:
7d:05:e0:dc:da:b6:de:f8:d1:4b:ba:68:da:94:48:
aa:49:5a:56:e4:7b:8e:34:85:d4:92:24:8b:c7:ac:
36:3e:86:aa:d5:d8:52:33:49:77:7f:e9:5e:78:1b:
0f:20:dd:f6:0d:51:33:14:33:e2:9f:66:ae:e4:e9:
2b:92:71:d6:c6:9e:f2:da:c6:c1:6e:d5:13:50:e8:
36:0b:9c:c2:8e:99:c7:0a:ef:4c:b8:56:15:29:25:
27:3a:3f:e2:3e:d9:ca:bd:58:0a:da:d7:6a:80:c9:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:B4:C9:D0:4E:90:CC:E1:4E:17:ED:2E:BC:21:5A:DC:51:72:94
X509v3 Authority Key Identifier:
keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:8d:b2:75:0a:5a:63:01:2e:ee:59:26:5b:3c:a0:58:9c:c0:
72:1c:6d:c5:d8:77:b8:26:24:fc:04:85:46:66:d7:79:64:7f:
ec:48:8e:c1:d3:6c:3e:9f:34:73:06:37:36:79:29:93:04:81:
6a:86:ad:c8:c7:96:d4:8c:82:81:96:46:60:88:1d:a4:ea:17:
ba:83:00:a8:84:87:26:16:63:36:27:a6:da:0a:4b:6f:7b:6a:
b3:f0:c9:b0:64:2d:79:b2:45:4d:e3:d8:e4:ba:d6:b3:cf:03:
16:01:dd:a8:0f:97:4a:e5:8a:d5:5c:ec:18:17:b4:c6:ec:eb:
21:d4:c1:5a:1f:fd:7d:b5:5b:4a:ba:ec:86:31:a9:e7:8d:84:
b7:ba:94:57:94:6b:23:e0:c6:c1:22:ce:ab:39:e9:54:ec:4d:
a3:58:56:01:eb:9c:fa:61:e4:09:65:0e:00:4b:4c:c7:21:f6:
44:11:8f:22:43:0f:53:3a:24:3e:a9:a8:5c:1c:9a:6d:37:2c:
61:df:2f:94:76:70:56:3e:92:09:58:60:2a:0d:4c:e2:84:ab:
6c:1b:44:89:04:6e:30:c3:29:6b:2b:4f:a2:42:93:88:94:ab:
83:ee:2b:5a:98:d2:c7:99:bd:78:ca:1c:0f:08:2a:4d:ba:95:
70:a5:07:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:12:26 2026 by rpki-client