
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json)
Hash identifier: zSYAEs9ZiQdi2tdnWXz972xxIv8fNa1agtVGSrQ62Us=
Subject key identifier: 0D:88:24:28:97:25:9F:03:3F:B0:35:23:52:F0:BD:22:AF:00:9D:1B
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial: 02B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
Manifest number: 0297
Signing time: Sun 07 Jun 2026 01:43:59 +0000
Manifest this update: Sun 07 Jun 2026 01:43:58 +0000
Manifest next update: Sun 14 Jun 2026 01:43:58 +0000
Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: EIHbdFeez5n2SeYJ/c73FCvGCn1evb+iuMO94t9Qaco=)
2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=)
3: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=)
4: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=)
5: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 01:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Validity
Not Before: Jun 7 01:43:58 2026 GMT
Not After : Jun 14 01:43:58 2026 GMT
Subject: CN=6a24ccdf-a3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:33:66:b4:5f:b3:f1:0f:57:b1:89:e1:f4:
ac:eb:27:69:19:74:f2:28:43:5d:77:87:f9:ec:7e:
b8:4d:0b:ba:14:d9:46:9c:8b:f7:48:a1:23:ba:d8:
de:b7:92:e1:f3:a3:01:c7:bf:2a:da:9e:71:4a:30:
7b:87:32:8e:07:7f:cf:4d:3d:e2:1b:d4:60:61:5c:
1b:0f:f9:1f:bd:2b:4e:a8:7c:63:98:72:e0:d8:37:
45:fa:07:f2:cd:e4:f7:96:19:3c:53:50:7d:7b:29:
25:5a:67:c5:43:57:35:72:99:5d:16:2b:3d:bb:c2:
f4:8d:de:22:15:2e:2e:aa:6f:47:b7:d7:35:1e:7a:
c7:a4:39:e3:38:bd:d0:74:42:c3:7b:c6:ed:25:fb:
da:e7:10:43:7f:22:23:9a:b4:66:2a:fb:c9:3a:7f:
b9:a1:b0:b5:2d:9d:a8:8b:0e:5a:9a:04:39:7d:23:
55:21:ce:fd:68:bc:f3:2a:b7:56:92:90:f5:b6:8a:
83:45:ea:c7:0f:84:50:18:bc:0e:0f:73:f2:b2:48:
3e:0f:34:34:a5:f7:8e:26:79:3f:a9:d6:40:ea:77:
c5:30:f1:60:59:94:f0:52:9f:d3:b3:2d:c4:83:d0:
ae:e3:70:35:4e:50:91:a6:d8:2e:3d:2c:eb:3d:8e:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:88:24:28:97:25:9F:03:3F:B0:35:23:52:F0:BD:22:AF:00:9D:1B
X509v3 Authority Key Identifier:
keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0e:5b:82:a0:27:63:2d:ae:9c:c4:a6:61:18:e0:de:45:bd:
be:22:9f:ef:a0:ff:c1:95:db:33:cb:97:63:54:57:a1:ea:d4:
05:92:2f:dd:89:61:aa:38:3b:4a:2b:97:c9:2a:cf:fa:6a:33:
8c:4b:54:41:7c:f0:3b:0f:c4:f8:9a:84:b2:22:a9:48:d5:34:
b0:3d:97:e5:40:bf:c3:f7:c8:84:f0:e4:e2:fb:b8:43:ad:d0:
57:94:c3:52:f9:a7:a7:36:80:76:d4:a1:88:a9:1c:07:b8:3f:
d2:da:27:6f:a6:4f:d5:2b:5c:59:f3:8b:28:e7:8a:4b:3b:88:
cb:02:d0:b6:6f:63:e8:5b:86:b6:53:aa:75:01:06:d2:d5:1e:
81:06:68:7e:5d:73:c0:71:4c:36:e4:5d:3c:eb:1b:8f:b2:86:
ad:de:4a:2e:9b:ff:22:5c:bf:8f:19:39:37:66:23:b9:43:38:
f0:44:dc:a7:47:da:65:c2:1b:23:e2:11:12:cd:20:cc:80:ff:
d6:8e:b3:72:2f:0b:93:12:3e:23:7a:8e:8a:34:95:27:4e:2b:
aa:55:72:b4:70:cb:1d:f9:6c:1d:31:81:ec:89:15:19:5b:e0:
62:8e:64:c8:84:ae:a9:03:e8:1e:a7:93:dd:d7:f5:29:38:cc:
79:9b:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 22:34:54 2026 by rpki-client