
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json)
Hash identifier: /cf7x9w6mGcpaN6nb1mPUPrDQUOsY24HgNJ/WBzVMCQ=
Subject key identifier: 08:2D:5B:22:36:0B:A6:E3:9C:7D:9A:27:AE:B2:FE:88:AC:8F:21:45
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
Manifest number: 02DC
Signing time: Wed 21 Oct 2026 01:35:55 +0000
Manifest this update: Wed 21 Oct 2026 01:35:55 +0000
Manifest next update: Wed 28 Oct 2026 01:35:55 +0000
Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: shRls+YNPGEoPnZKxM5WaGSxir25/Up8KQ07EBCAVUE=)
2: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=)
3: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=)
4: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=)
5: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 01:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Validity
Not Before: Oct 21 01:35:55 2026 GMT
Not After : Oct 28 01:35:55 2026 GMT
Subject: CN=6ad816fb-958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:91:28:9f:70:f5:3c:79:2c:a7:95:8c:49:
30:cd:0c:af:6a:04:55:81:ba:cf:57:99:ba:a9:1d:
f7:e0:71:f9:55:37:a2:02:99:fd:3d:11:0d:79:32:
7e:2d:6a:45:18:6d:3a:7c:9a:4f:be:5e:6c:0d:03:
e8:39:1c:14:33:66:e6:bf:29:4d:89:e8:83:e5:58:
2b:7d:5d:40:02:55:79:55:f7:78:e9:de:42:06:d4:
63:24:b8:b7:04:3a:17:36:b2:07:ac:d9:4a:52:1d:
6c:b0:97:62:e6:85:fd:1b:78:a3:53:9e:1d:38:dc:
87:c0:a5:c4:08:b0:0a:c9:5e:4a:54:1c:bd:d1:f5:
99:f3:77:80:bd:50:12:f8:ed:e1:30:2b:a8:a1:01:
d9:d5:31:86:54:15:69:20:2e:a9:59:93:50:e1:60:
24:1c:18:5d:75:b3:c1:76:df:89:1c:38:c7:9d:c5:
af:5d:ce:e9:77:2f:10:64:fc:e0:b6:3d:a6:de:6c:
0f:7c:03:c8:9a:d6:59:e8:41:1b:3b:b5:87:82:56:
12:a1:69:c4:90:9f:ff:c5:6a:be:65:88:cf:10:46:
72:d5:da:2b:77:8f:a7:a4:35:f8:7f:72:76:76:a0:
80:4c:60:af:c0:b5:7c:51:71:d7:f0:eb:b5:01:27:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2D:5B:22:36:0B:A6:E3:9C:7D:9A:27:AE:B2:FE:88:AC:8F:21:45
X509v3 Authority Key Identifier:
keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:cc:78:05:bc:55:5b:46:9a:0a:b3:80:63:11:e5:78:a1:
a4:40:63:08:e6:91:9d:2e:3c:33:86:f3:64:8b:58:79:b9:5a:
8d:30:1c:02:47:6b:3f:ac:e0:ab:24:62:fc:55:6e:71:b7:9f:
b0:05:7f:34:6f:36:cc:1e:4d:f3:b5:ae:ad:be:e4:8a:f8:41:
97:9e:a7:ea:e6:70:40:dd:ad:95:cc:0d:2f:03:37:55:9e:b1:
44:57:f9:37:14:cd:e8:8f:e7:63:02:bf:da:39:ca:f1:48:80:
39:ec:ac:21:be:76:b8:67:4e:99:40:93:7e:39:92:cc:32:b4:
3b:0d:23:2d:72:7c:f8:d9:6b:5f:3d:a2:20:f8:fe:c3:3e:30:
7c:40:50:93:4c:c2:40:06:41:b9:68:28:96:e1:20:29:15:36:
16:b6:a9:64:75:d0:34:2c:cb:45:13:22:59:83:08:b4:79:dd:
8b:3a:d5:e5:41:54:85:01:7c:b7:69:e8:6a:d9:48:d4:26:59:
19:07:53:ef:08:f7:01:62:7b:c8:90:46:e3:d5:64:ed:5a:53:
ef:7c:2c:bb:d5:0a:77:b0:13:c2:b6:8d:6e:16:67:7f:9b:c2:
f1:52:f3:12:6a:5b:76:90:4c:10:66:33:0a:e3:0a:76:c2:87:
0d:b3:f8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:51:45 2026 by rpki-client