
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json)
Hash identifier: +GoL7dY41KOfTXaJ5ZkXCRSIC0Jgk2X68yeyEdnqPGE=
Subject key identifier: 49:27:3A:E8:4D:98:2D:6E:2D:33:C0:51:F2:A5:D5:60:8A:F1:31:C4
Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
Manifest number: 030A
Signing time: Sat 03 Oct 2026 03:36:46 +0000
Manifest this update: Sat 03 Oct 2026 03:36:45 +0000
Manifest next update: Sat 10 Oct 2026 03:36:45 +0000
Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: wY0siXemKFjTpH8byf1Z+hbgSS9yOzd5zuhuCNb66RU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Validity
Not Before: Oct 3 03:36:45 2026 GMT
Not After : Oct 10 03:36:45 2026 GMT
Subject: CN=6ac0784d-0041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:1d:72:56:42:31:fe:2a:91:96:c6:1e:bb:
81:2e:a1:46:21:46:99:4d:4f:25:1e:dc:80:c1:b3:
d4:40:8a:60:24:24:1c:ac:e7:58:58:6f:0f:82:d1:
81:06:5a:9d:6b:b0:6e:c4:8e:93:ef:3f:ca:8b:7b:
41:9f:2e:ac:66:50:a1:d2:bd:87:2c:dd:77:fb:50:
ac:e7:cc:ef:f9:23:10:cc:04:20:1d:40:64:d1:ba:
44:91:d3:17:00:fd:3a:19:46:5e:2d:44:a1:99:7a:
59:b0:cc:17:fb:37:b7:2d:c9:44:17:cb:b4:0c:fb:
37:3d:9f:44:2e:f0:4b:9a:37:52:ca:99:6e:f0:39:
4b:05:aa:c1:07:be:d2:a5:98:68:e1:24:c4:3f:13:
e3:08:2b:a2:48:c8:75:37:d3:33:44:51:a0:4b:99:
27:14:b0:de:74:b6:33:bd:bb:05:a6:5f:8b:40:7a:
4a:c3:a2:68:5b:e1:cc:3e:1d:73:ac:aa:0d:20:52:
f1:56:66:b0:c3:81:54:22:2b:1d:af:31:9e:c8:75:
a5:37:42:f7:9f:e5:be:7c:b6:05:ed:53:79:0e:d7:
12:7c:cd:00:30:2f:bd:b4:e5:b6:36:4e:06:17:93:
65:cf:c4:16:da:f3:de:86:95:5a:aa:e9:c3:bd:e7:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:3A:E8:4D:98:2D:6E:2D:33:C0:51:F2:A5:D5:60:8A:F1:31:C4
X509v3 Authority Key Identifier:
keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:96:9d:3f:4a:55:db:f1:0f:c7:84:83:2c:2c:f0:f2:47:01:
3f:fa:8b:ee:dd:0c:10:59:cb:c5:6b:de:ce:a2:27:f7:82:2a:
66:a2:a9:09:fe:07:9b:80:05:10:13:61:d1:3f:1c:68:80:ba:
96:ff:ba:a6:b1:15:23:57:7f:3c:89:d6:7f:36:95:18:61:97:
c2:41:2f:d3:14:a6:87:c1:8f:f8:74:64:2d:0d:4e:2f:4b:4f:
db:3f:3a:54:16:86:8a:18:39:ef:05:d2:44:c4:74:08:eb:9b:
e6:0c:41:b6:cb:b1:4d:0e:67:d3:2c:c9:f2:a5:44:3a:59:5d:
4d:e1:b6:4b:5d:2d:4d:73:36:d3:d1:68:c8:4d:81:4a:10:c4:
29:27:2c:48:73:8c:85:31:9e:b8:e3:70:14:b8:8e:3d:c8:4d:
fe:47:1a:a0:bd:8b:0e:ce:ec:9b:5d:0e:ef:be:12:dc:c3:5c:
0c:6b:aa:56:f2:23:25:aa:3e:9f:07:4d:34:70:24:0b:d0:98:
bc:96:0d:c4:b1:35:80:84:85:ad:0b:27:df:4d:05:0e:ad:34:
2e:b3:b3:a3:c6:79:fe:cd:3e:b7:01:e1:19:d8:6b:41:ac:26:
1a:95:cd:64:34:b4:6e:be:c8:d5:e1:ed:77:19:90:e0:fe:b6:
02:0f:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:52 2026 by rpki-client