
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
File: lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json)
Hash identifier: X374JFRQ4J5XSMb5mKQxm1/tfIFnxQlZi9btrZaDTXw=
Subject key identifier: 0A:BA:74:2B:CE:36:53:10:93:F5:66:23:25:97:F6:9C:0A:60:59:9F
Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C
Certificate issuer: /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
Certificate serial: 1834
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
Manifest number: 20D4
Signing time: Sat 04 Apr 2026 16:25:46 +0000
Manifest this update: Sat 04 Apr 2026 16:25:45 +0000
Manifest next update: Sat 11 Apr 2026 16:25:45 +0000
Files and hashes: 1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: +xxqegw7gAjXlpTdc1zzG269zaeyLSyKtr5GDTDqIQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl
rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6196 (0x1834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582D9, serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
Validity
Not Before: Apr 4 16:25:45 2026 GMT
Not After : Apr 11 16:25:45 2026 GMT
Subject: CN=69d13b8a-4d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:f0:76:0f:9d:08:f7:59:5b:cf:e3:fc:46:
6b:be:98:96:af:19:71:e7:3b:e9:9c:dd:c7:72:41:
47:35:6c:32:c6:37:c9:43:02:74:cb:ef:91:9e:fe:
65:62:c3:47:8e:03:9d:58:03:8c:81:51:c9:79:3c:
82:63:0f:63:a0:66:03:e1:de:e7:64:71:31:dd:b3:
0d:00:fe:27:fd:be:ae:46:9f:47:ef:bc:4a:ed:7f:
d2:f5:1f:7c:fe:5f:7f:af:4b:99:79:e2:c6:ff:4d:
cf:83:ac:d1:a4:47:d1:d6:2c:1e:28:99:bb:61:aa:
55:d5:f8:f0:22:8f:a6:4a:c2:e2:c4:c7:55:4d:7f:
b6:fe:0b:b0:c6:da:ad:46:95:63:0f:17:cd:87:26:
ad:fb:cf:70:3e:66:79:d9:d0:8f:9f:db:45:e6:2a:
7b:2c:95:ca:e1:f7:b7:03:92:50:e0:1a:80:24:8c:
2e:0c:f4:ba:3d:e3:86:9b:74:4c:b2:36:c3:21:2d:
61:a9:20:86:10:a8:ff:6f:7f:07:a0:f4:a7:6c:e7:
80:51:72:15:f0:20:41:44:27:9d:b3:d8:2b:e9:93:
a7:24:63:a6:86:2d:e9:9b:54:08:25:55:eb:0e:83:
46:66:6c:c9:dc:f8:d8:20:c0:dd:87:b8:7e:dd:fc:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BA:74:2B:CE:36:53:10:93:F5:66:23:25:97:F6:9C:0A:60:59:9F
X509v3 Authority Key Identifier:
keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4a:c4:cf:ed:72:e5:65:b8:f7:bf:be:3f:cc:df:af:a5:af:
ed:df:9d:fe:71:8f:dd:d4:d4:b2:fb:31:62:f7:5d:7b:79:e9:
e1:db:90:1a:af:a7:a7:f1:a6:d9:9f:3a:3d:f6:7e:83:0d:c1:
04:5a:e0:66:74:8a:c1:5c:d9:f1:a0:8c:d9:1e:37:04:2e:9b:
91:7e:02:98:7e:dc:ac:97:d5:96:ab:9b:49:14:5e:c1:d9:8a:
c3:71:c0:5d:98:f5:37:04:70:cd:0a:4b:46:a4:5e:d0:e2:50:
7b:1f:e1:f8:9b:77:94:ce:ee:2d:8f:ba:93:c7:44:cc:6b:80:
53:a2:1f:9e:4f:62:57:05:cf:35:ea:71:00:cd:9b:34:61:47:
94:58:7c:46:83:a2:53:5f:5e:9c:c3:20:fc:11:56:bb:c4:a2:
63:7f:73:29:5e:bc:49:31:44:4b:97:ca:af:2d:50:df:5d:0a:
61:83:99:32:e3:c2:ac:8b:32:fa:28:14:40:08:59:96:63:39:
5d:9e:e0:70:a2:dc:04:80:f6:66:36:40:0f:69:cc:76:38:11:
c8:94:45:cf:99:ac:63:74:00:e5:1e:b1:b3:cf:ac:13:49:6f:
7c:a6:86:d2:ac:95:26:93:88:f5:d5:64:dd:63:db:f0:8e:8c:
0f:fe:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:31 2026 by rpki-client