
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json)
Hash identifier: geXhmWz+4F3vI7asB59emSFKRSMCKhBLiVYPCkdmkYI=
Subject key identifier: 28:B7:06:00:02:8D:A9:50:ED:8F:3F:EB:F1:CD:85:64:CF:0B:36:82
Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
Manifest number: 0113
Signing time: Sat 17 Oct 2026 06:38:26 +0000
Manifest this update: Sat 17 Oct 2026 06:38:25 +0000
Manifest next update: Sat 24 Oct 2026 06:38:25 +0000
Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: 8JfKzdu0z8NNEtjDz1p09o9pHjT4oNxdGbPpZ+Zsapc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 06:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Validity
Not Before: Oct 17 06:38:25 2026 GMT
Not After : Oct 24 06:38:25 2026 GMT
Subject: CN=6ad317e1-1440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:47:0e:31:2b:4d:e9:4a:e1:28:81:4b:1a:
a5:71:95:53:1b:dd:72:0a:c1:20:4e:cc:90:ac:45:
8a:c7:18:0e:20:0b:35:7b:32:73:11:b6:f6:9b:6f:
38:c6:97:83:a6:3c:c9:5d:6f:b0:7b:3a:d5:63:32:
78:80:db:aa:96:e2:7f:9a:1a:03:0e:33:f0:77:55:
d1:f6:0f:84:c1:12:26:7d:43:6a:19:59:bb:65:78:
13:2a:80:b5:9d:f9:c3:ec:f5:e5:90:47:e2:48:2f:
9e:95:a2:e1:1b:87:03:05:26:b5:02:04:83:32:c2:
f9:7a:49:9a:6e:95:56:13:25:1a:89:12:8b:9a:08:
5a:ea:1d:73:2f:93:3a:bb:14:62:b1:42:df:56:89:
16:c5:55:62:30:be:a7:eb:73:a7:4e:60:12:f4:67:
ec:0f:90:37:90:fe:e4:c7:9a:70:2a:39:ed:a2:2c:
c1:22:27:c9:ce:e3:f6:d9:89:28:90:2a:a8:c3:98:
b9:c4:60:54:ea:df:17:50:53:e7:36:1e:0e:d5:ac:
b3:2b:89:7b:bd:e8:d0:a5:b9:6d:04:d5:df:d4:d3:
87:e1:0b:8a:d8:a5:b5:7d:19:27:89:8a:c7:b7:6b:
65:5b:0c:ae:d7:f5:7d:36:56:68:9b:15:39:eb:12:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B7:06:00:02:8D:A9:50:ED:8F:3F:EB:F1:CD:85:64:CF:0B:36:82
X509v3 Authority Key Identifier:
keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e0:ca:a7:af:65:da:0e:68:15:4e:ea:3e:6d:2e:aa:95:0d:
82:6a:b9:08:a3:0b:d6:e4:93:20:a9:c9:ce:0f:ba:f3:58:6d:
95:3f:4f:80:29:29:96:4b:ea:14:3a:30:02:cc:b3:96:de:d5:
7f:07:fb:ba:81:5d:6d:92:fb:88:80:5f:1b:3c:f4:51:70:d6:
28:a4:b3:25:fc:f1:cd:8f:8b:b2:9c:63:de:25:94:40:5c:26:
3d:50:51:54:2a:5e:7a:56:d3:3f:fc:d1:9f:d5:10:7d:26:4c:
2c:b1:80:18:79:83:57:00:67:d5:88:ec:92:98:cf:a4:1f:0d:
f8:37:71:80:38:50:fd:4a:83:5e:7e:de:45:64:db:b7:cc:6f:
56:8f:2b:fb:d6:cd:4f:f5:54:b4:68:bd:1c:ba:0a:8a:d3:4b:
cc:01:ff:cc:a6:f8:c6:ee:4a:60:e5:2f:e5:08:69:c7:4e:35:
cc:1a:fb:c8:80:25:d6:ea:c5:1a:ab:e3:bb:85:8d:e3:2c:1f:
a6:28:49:2d:b4:63:64:4f:f1:d1:b1:45:a8:55:0e:b1:dc:cf:
1a:fb:c6:09:74:fa:dc:7f:61:22:42:4c:92:95:68:05:5f:4e:
1e:6f:8a:7d:ae:8c:01:5d:43:b5:8d:9f:8a:27:ec:56:f6:f5:
89:95:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:16:04 2026 by rpki-client