
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json)
Hash identifier: 3kDc77h+QdHsQ1D+mSVlzxHaigjQCmAd+Vdn73WuvBY=
Subject key identifier: E0:63:50:EA:86:EF:4A:F4:19:00:F1:1D:F7:01:8B:69:2B:0A:EF:E8
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
Manifest number: 0267
Signing time: Tue 03 Mar 2026 01:56:03 +0000
Manifest this update: Tue 03 Mar 2026 01:56:03 +0000
Manifest next update: Tue 10 Mar 2026 01:56:03 +0000
Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: 1eapbGyzM0Klhu3nbiHbt/ewGYSrWFuZnEMeCuEwUG0=)
2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=)
3: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=)
4: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=)
5: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 01:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Validity
Not Before: Mar 3 01:56:03 2026 GMT
Not After : Mar 10 01:56:03 2026 GMT
Subject: CN=69a63fb3-489e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:8f:d9:d3:d5:a2:15:c1:8e:df:d7:d4:0e:
7a:1d:ac:84:90:3a:f8:6e:b0:11:13:cf:65:c3:19:
4d:90:bf:f1:e9:6f:f8:d8:95:8a:78:d7:40:71:5e:
4c:03:7e:4b:f4:c2:8d:dc:58:1c:00:a4:72:d8:13:
2f:e9:d1:3c:4b:b9:33:89:44:12:e1:5f:6f:cd:a4:
02:6d:c1:ab:09:14:60:6e:a9:7b:28:03:e3:b4:f8:
23:77:35:4b:3a:83:65:7e:5c:ff:5e:60:ca:58:fc:
43:43:3d:b9:fd:8c:87:86:31:eb:64:a3:96:17:30:
36:96:80:7e:f2:8e:88:a6:2c:10:7f:c6:48:d4:36:
ff:c6:b3:35:c1:94:05:76:8d:56:b9:6f:ea:29:1d:
ac:63:63:c9:a4:aa:ff:a8:01:5c:b7:4d:4c:95:0d:
cf:15:91:cc:db:16:05:9c:6b:7a:df:fa:38:7e:47:
5f:6c:6a:f7:48:56:26:03:2c:b2:05:84:fa:b4:9b:
80:9d:a5:ac:ca:bf:9a:3d:16:c6:29:66:57:8b:17:
6c:57:88:77:9f:60:40:c6:cf:d3:93:72:7f:42:33:
28:e6:e1:dc:b3:14:55:b0:e3:07:06:cd:92:4d:0f:
42:a0:5c:79:7b:76:f2:25:d3:d0:7b:5e:26:90:e0:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:63:50:EA:86:EF:4A:F4:19:00:F1:1D:F7:01:8B:69:2B:0A:EF:E8
X509v3 Authority Key Identifier:
keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:62:0e:ca:b6:8a:e1:14:76:a6:2c:ed:87:ef:f3:4a:89:ef:
b2:ca:f0:83:ef:6a:52:ec:a7:96:e1:aa:c6:58:d8:b8:4b:d4:
f9:9b:1f:54:fc:59:d7:f8:b1:99:5c:95:e0:73:02:a9:44:6a:
91:df:af:3c:d4:b8:7a:e5:9c:1e:15:17:ea:9f:eb:31:6d:74:
34:2b:d1:0b:c6:63:3e:a1:cd:c9:21:ea:86:48:29:84:59:36:
ef:a3:92:6e:18:26:11:c6:d1:da:9a:b0:a7:8b:b9:44:2e:15:
63:6a:90:4e:c4:22:f4:bc:5c:aa:4d:7c:a2:80:0b:fc:7c:81:
6a:a9:3a:2d:15:35:52:45:26:cf:f5:63:e0:8e:3f:97:15:49:
50:e3:e2:25:cc:33:af:e6:05:8f:25:a7:73:1f:b9:e9:f2:11:
bf:ff:d8:ca:8f:c8:77:c2:b3:58:98:04:f0:71:44:bb:da:16:
40:94:68:86:89:d4:d9:f2:ab:60:c5:14:32:3b:f9:60:54:31:
8a:1c:dd:77:a4:f9:18:f7:7b:4b:c8:32:96:f4:cf:88:16:6e:
8d:3c:f7:8b:b0:a3:3f:a5:a0:d9:98:d2:22:52:f6:89:58:58:
90:33:0d:5b:d3:83:c9:60:13:5f:03:35:3a:e6:6f:13:b5:7a:
72:57:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:42:04 2026 by rpki-client