
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json)
Hash identifier: oTPsW8j7KDowSaigdNaUcs+ZqrrpCrgi5+OCdn2sQEE=
Subject key identifier: DB:A3:A6:E8:FA:76:79:87:6D:83:08:DC:57:D3:8C:42:C4:CA:D4:C8
Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
Manifest number: 0254
Signing time: Sun 05 Apr 2026 03:25:26 +0000
Manifest this update: Sun 05 Apr 2026 03:25:26 +0000
Manifest next update: Sun 12 Apr 2026 03:25:26 +0000
Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: cyr8yI1YTP9XG6QCBcG6gjiQRY/JaL9VSUFyayM76fE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Validity
Not Before: Apr 5 03:25:26 2026 GMT
Not After : Apr 12 03:25:26 2026 GMT
Subject: CN=69d1d626-aa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:49:28:ea:f3:64:df:15:9b:47:d5:66:6c:
3f:14:4e:d6:95:7e:17:6c:56:bf:2f:9e:a2:24:7d:
c8:a5:49:f9:21:cc:8e:34:23:11:51:15:bc:78:e8:
ea:7f:af:81:a4:1e:0e:60:b7:f9:76:83:50:c8:ed:
e9:7f:ed:ac:e1:6e:d4:1f:ff:26:08:77:58:b0:1b:
88:46:bd:de:6e:36:4c:97:f1:6f:80:ce:e6:ed:6b:
d4:53:85:a6:f5:f9:1c:4c:cc:03:03:64:46:c0:12:
f7:c6:4b:93:93:09:e0:42:4c:c5:96:2f:ce:94:87:
ea:0e:4f:d2:02:b8:83:be:e1:7b:26:83:46:e3:ef:
d3:ee:50:99:a6:9c:bc:be:c6:b2:16:1a:62:8e:33:
45:13:50:53:99:13:98:78:9e:44:9a:c0:f3:27:72:
29:8a:e7:e7:81:e3:21:28:73:c8:8c:9a:05:73:54:
e5:44:64:00:d6:13:cf:f1:6f:03:88:1e:ae:18:18:
57:54:a0:d3:42:b1:ea:6f:e7:e8:e0:cc:6d:bc:fc:
ee:2c:fe:d3:e9:3a:ff:94:eb:d1:83:89:85:07:e3:
b5:79:ee:ce:0c:27:58:32:06:58:c0:a6:be:15:37:
c1:d3:4c:7d:35:e9:7f:72:9e:27:12:23:99:5b:38:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A3:A6:E8:FA:76:79:87:6D:83:08:DC:57:D3:8C:42:C4:CA:D4:C8
X509v3 Authority Key Identifier:
keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:42:09:1b:4a:93:22:28:c4:c7:1e:54:78:65:25:4d:83:7d:
04:d9:2a:0c:eb:92:b8:fb:a4:a3:56:58:ac:11:8b:12:d1:46:
2b:7d:ff:55:c8:df:fc:b6:0e:4c:4d:a4:f0:99:59:0c:a9:64:
1c:28:bf:00:48:b4:8e:4e:84:7e:75:07:68:c6:55:1f:83:c8:
ce:8b:50:d5:9a:9b:f4:28:d2:11:b4:43:fa:31:f0:5f:5e:43:
b4:71:3a:07:cd:e7:6d:fd:10:97:d4:2f:cd:06:2e:ee:81:01:
17:1b:5d:c9:ac:a7:31:9e:2b:8e:c3:ba:15:c8:91:4c:26:c8:
2b:c7:4a:34:55:36:b2:2d:42:ff:11:bb:30:50:60:de:13:18:
27:a8:04:0a:89:c2:08:8f:59:e2:75:d0:a6:98:d2:de:15:50:
e6:8d:25:21:4e:2a:98:47:02:01:60:8d:8b:39:ae:89:75:c4:
45:36:eb:55:88:ff:f0:63:62:e1:44:43:d0:b6:68:4a:a8:1f:
fa:14:74:a1:a3:aa:84:f3:09:6d:c7:03:02:bf:f5:5b:7c:2b:
27:dc:ad:64:54:77:ee:d1:b1:a9:8e:e7:60:07:0b:a8:0c:db:
9c:30:a9:8e:53:c1:05:91:e6:e9:68:81:0c:7b:99:6b:18:52:
49:94:73:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJDNUQxMTAvBgNVBAUTKDY4QjNGRjE2NjU4OUM4NDQxQTQ0RkRDQTYxRjQyQjNB
NjNBRTExMjkwHhcNMjYwNDA1MDMyNTI2WhcNMjYwNDEyMDMyNTI2WjAYMRYwFAYD
VQQDEw02OWQxZDYyNi1hYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwYpJKOrzZN8Vm0fVZmw/FE7WlX4XbFa/L56iJH3IpUn5IcyONCMRURW8eOjq
f6+BpB4OYLf5doNQyO3pf+2s4W7UH/8mCHdYsBuIRr3ebjZMl/FvgM7m7WvUU4Wm
9fkcTMwDA2RGwBL3xkuTkwngQkzFli/OlIfqDk/SAriDvuF7JoNG4+/T7lCZppy8
vsayFhpijjNFE1BTmROYeJ5EmsDzJ3IpiufngeMhKHPIjJoFc1TlRGQA1hPP8W8D
iB6uGBhXVKDTQrHqb+fo4MxtvPzuLP7T6Tr/lOvRg4mFB+O1ee7ODCdYMgZYwKa+
FTfB00x9Nel/cp4nEiOZWzivEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNujpuj6
dnmHbYMI3FfTjELEytTIMB8GA1UdIwQYMBaAFGiz/xZlichEGkT9ymH0KzpjrhEp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky
QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlFUWFSUDNLWWZRck9tT3VF
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FMUF9GbVdKeUVRYVJQM0tZZlFyT21PdUVTay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlF
UWFSUDNLWWZRck9tT3VFU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAakIJG0qTIijExx5UeGUlTYN9BNkqDOuSuPuko1ZYrBGLEtFGK33/Vcjf/LYO
TE2k8JlZDKlkHCi/AEi0jk6EfnUHaMZVH4PIzotQ1Zqb9CjSEbRD+jHwX15DtHE6
B83nbf0Ql9QvzQYu7oEBFxtdyaynMZ4rjsO6FciRTCbIK8dKNFU2si1C/xG7MFBg
3hMYJ6gEConCCI9Z4nXQppjS3hVQ5o0lIU4qmEcCAWCNizmuiXXERTbrVYj/8GNi
4URD0LZoSqgf+hR0oaOqhPMJbccDAr/1W3wrJ9ytZFR37tGxqY7nYAcLqAzbnDCp
jlPBBZHm6WiBDHuZaxhSSZRziw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:58 2026 by rpki-client