
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json)
Hash identifier: 5MjMPT7+72KxvdmWNIQ5NSj3P4zEKD9rBj0mPjttM+0=
Subject key identifier: 4B:12:28:57:AF:2E:DE:3B:45:6C:34:36:0F:0D:A1:30:32:F5:AE:50
Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
Manifest number: 24
Signing time: Mon 09 Mar 2026 07:34:26 +0000
Manifest this update: Mon 09 Mar 2026 07:34:25 +0000
Manifest next update: Mon 16 Mar 2026 07:34:25 +0000
Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: kOpvcY3YL3u1r7au2+eBVs9GtUTRtsjn5RaLbmSnuF4=)
2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Mar 2026 07:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Validity
Not Before: Mar 9 07:34:25 2026 GMT
Not After : Mar 16 07:34:25 2026 GMT
Subject: CN=69ae7802-5bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:a3:c3:71:c2:5f:69:fa:93:e2:5e:64:3f:
3c:94:2f:9a:4f:e7:26:cd:38:65:8a:9b:12:a2:0e:
a1:fd:51:f0:99:45:2b:a3:b4:0a:b0:27:dd:d5:c9:
3e:0e:17:62:8e:2a:49:a7:d8:0b:70:70:aa:44:39:
08:26:e9:e0:97:a5:e2:49:b4:fe:4a:3b:dc:5d:0e:
a8:1c:3d:b1:40:79:51:2e:bc:1d:a0:1d:49:d7:96:
e7:34:ba:66:b8:e7:05:41:45:09:14:cb:3e:f4:a7:
7a:3b:80:d8:cd:30:b1:74:3b:67:30:6c:e4:59:f2:
4b:26:09:95:9a:7d:b5:16:95:94:2a:ff:cc:dd:3a:
85:45:5b:5b:fe:62:d8:f4:7e:85:18:55:82:65:0c:
dd:ae:de:f5:f2:ce:cc:29:e7:fc:93:03:5c:5d:93:
77:51:85:60:17:95:65:3b:e4:a3:99:e2:11:ac:29:
f0:c4:5e:6e:59:ae:c1:34:17:63:d3:14:5b:f5:74:
8d:1e:54:ce:9a:04:e8:1b:6b:f0:c6:f0:bc:dd:83:
2e:8d:85:99:3e:fb:7f:03:8d:ed:a9:2b:43:f2:7f:
dd:62:ae:72:e2:c5:f2:4d:3a:c0:88:40:e8:93:f5:
8e:38:42:19:ae:ac:d9:e3:f1:d2:3c:5b:bc:42:6e:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:12:28:57:AF:2E:DE:3B:45:6C:34:36:0F:0D:A1:30:32:F5:AE:50
X509v3 Authority Key Identifier:
keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d4:2b:21:e3:5e:8b:ab:ad:1e:70:84:23:b3:d1:05:7a:c5:
02:57:05:53:63:89:1e:1d:f0:c1:c8:5e:c2:32:e4:4b:69:94:
ba:41:f2:fd:c9:a1:cd:4d:bb:73:b4:fe:26:84:4b:b2:31:8e:
3d:5b:40:8d:ba:c3:0b:e4:0a:a0:63:5c:d0:11:5e:46:d7:5c:
25:1d:19:9a:01:2b:2e:41:26:41:1b:e9:07:11:ac:ac:c8:5b:
b3:60:ec:a0:0b:9e:b9:ad:8c:4e:b9:e7:75:b3:e2:84:d4:20:
40:00:3a:17:84:bd:8b:c2:3b:79:9e:e9:be:2e:98:47:a7:09:
ea:0d:16:f9:cd:39:6e:e6:27:74:bd:6a:40:a0:a2:b6:14:c0:
40:6c:b8:58:c5:d3:66:c1:eb:c3:4b:a0:28:78:05:d6:fd:5e:
d4:f0:84:a4:81:56:61:a5:38:e2:9a:b7:40:bb:6a:cf:d6:b8:
9e:55:9c:d2:42:eb:17:08:58:8a:db:b1:81:64:18:ac:f2:19:
a5:64:f5:ee:22:9b:41:08:09:4e:3a:57:ec:8a:80:b4:1a:ab:
0c:82:e0:20:94:8b:2c:ec:5f:87:82:37:9b:35:18:92:80:39:
ba:06:53:00:d2:b8:0e:da:8b:70:44:e7:57:83:ae:4d:86:ef:
a9:71:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 13:21:16 2026 by rpki-client