
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
File: L1yb73Dl0CO3HEbLZs_iof20g1s.mft (raw, json)
Hash identifier: WB158nh7YOZH3PXRhtDndrw36h65mCOkKVBQJQQ5AiA=
Subject key identifier: 9D:F9:08:25:D5:54:61:05:97:F8:37:EB:49:3E:5D:D4:E7:FB:C4:20
Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B
Certificate issuer: /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B
Certificate serial: 080B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
Manifest number: 0803
Signing time: Sat 04 Apr 2026 20:57:33 +0000
Manifest this update: Sat 04 Apr 2026 20:57:32 +0000
Manifest next update: Sat 11 Apr 2026 20:57:32 +0000
Files and hashes: 1: L1yb73Dl0CO3HEbLZs_iof20g1s.crl (hash: NI/uh0fGdLlQM1kZXYQXU6prEb81eXZHX9it8C730sM=)
2: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (hash: +2tSVb2eYpmiPdwKZIyJ6CR3uJABzrcVvvxmdqm9vks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl
rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2059 (0x80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D55E, serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B
Validity
Not Before: Apr 4 20:57:32 2026 GMT
Not After : Apr 11 20:57:32 2026 GMT
Subject: CN=69d17b3d-5892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e0:94:32:ef:aa:ef:a8:1c:59:2c:39:34:a8:
ae:09:de:31:4c:6a:ed:f9:c1:ff:ff:ee:88:d5:e1:
42:2e:ad:c2:ce:39:12:17:fe:d2:69:66:0b:f6:fb:
0f:93:5f:3a:8d:33:8f:cb:3a:4c:d8:aa:1b:69:25:
8c:96:7d:1b:5d:0c:cf:59:de:29:fd:77:20:c8:6f:
6c:38:cf:0a:b3:25:d7:de:9b:09:b0:21:96:69:f6:
43:56:56:3a:71:a2:b3:45:40:82:5c:74:5d:b1:e4:
9b:8e:a8:f0:be:a8:c9:58:48:31:8e:ac:7a:4c:55:
0a:cd:11:d9:fa:27:ae:8c:7b:54:22:6c:5c:d4:9f:
d6:b7:ef:6b:49:42:ad:9f:6a:9b:e8:51:42:ea:3b:
2a:e6:bc:42:74:54:f2:e5:90:3a:e4:68:c1:f1:dd:
10:15:01:f9:5b:28:fb:2d:24:33:4b:4e:d5:6b:ab:
a5:af:fb:0a:20:2d:8a:97:73:cd:99:ba:b0:4e:1f:
69:0c:02:6b:21:98:bd:49:c2:12:17:6b:8c:8c:c0:
13:4e:ee:53:27:0b:9f:e8:14:35:66:cf:3a:7b:1e:
f3:a6:ae:da:72:35:0d:aa:af:1d:e4:11:7c:42:d5:
38:6b:69:e0:29:9f:a4:5f:d3:a3:f8:7b:e6:32:75:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F9:08:25:D5:54:61:05:97:F8:37:EB:49:3E:5D:D4:E7:FB:C4:20
X509v3 Authority Key Identifier:
keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cf:11:e5:62:46:1d:12:50:9c:2a:21:3f:af:d2:6b:f0:ad:
d5:de:3a:1a:fc:79:a7:db:34:fa:c8:06:3e:c4:d8:85:de:ab:
7e:35:d4:90:9f:cf:64:b5:d5:b1:d7:43:ad:18:d1:20:2e:6d:
22:82:5d:c6:c2:b8:02:4b:72:4f:4d:c8:a5:c0:28:83:01:ba:
77:3b:bd:b3:d2:0d:74:b2:e1:c3:18:0f:8e:b5:25:a1:24:f3:
f6:1f:ea:09:9b:3a:72:49:90:2c:5d:89:b3:34:3e:26:a4:7b:
18:e7:2c:36:ae:07:79:f9:c2:91:92:61:8a:42:16:03:d9:73:
8d:fe:1e:00:f6:15:ce:94:67:30:61:1b:f9:a6:ae:af:00:13:
c3:fa:61:95:7a:b5:45:d2:c9:11:c3:ee:48:44:d5:85:e9:dd:
c7:9b:a5:fd:0e:32:08:f7:5f:a3:bd:9f:fc:69:16:12:08:a0:
5a:bb:95:d2:8c:fb:a2:02:5f:61:52:cb:7d:6c:b7:1e:d8:cd:
ca:da:c3:6e:49:f2:db:f3:35:1e:84:f7:7f:07:b7:b4:8e:42:
6f:03:c3:52:21:01:46:9c:17:a8:35:d4:36:aa:0d:14:3e:0a:
3e:4c:8d:ce:a0:59:f4:76:0f:a9:a4:9a:48:55:2a:b4:9a:19:
1a:17:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:06 2026 by rpki-client