
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier: xTFkNYfy0MQVDF/CeNMZG8oYNGrcdLiW3Mho+kvuHWs=
Subject key identifier: 74:5E:06:B0:A4:08:F1:D2:58:C7:2E:CC:7F:2D:DD:4A:6D:65:D4:43
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial: 046F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number: 0462
Signing time: Sat 04 Apr 2026 23:56:25 +0000
Manifest this update: Sat 04 Apr 2026 23:56:25 +0000
Manifest next update: Sat 11 Apr 2026 23:56:25 +0000
Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: brKNYQUXva9DWVDWSpqDIvsCnQWilhpWgcMmjgSrAJ8=)
2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=)
3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135 (0x46f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Validity
Not Before: Apr 4 23:56:25 2026 GMT
Not After : Apr 11 23:56:25 2026 GMT
Subject: CN=69d1a529-3d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:fb:9f:f5:dc:84:92:a6:1e:5b:64:2e:91:
51:c0:0d:e9:54:0e:0c:dc:85:98:fd:e2:d7:0a:db:
8d:77:d0:9b:a0:6f:ed:bd:2d:e4:67:9b:25:7d:d6:
3b:0e:60:9a:21:f4:64:32:2e:83:0b:35:d0:87:7f:
e4:ae:65:2d:b7:e9:ce:aa:b8:44:14:07:47:f7:b4:
02:5d:d3:72:5c:22:01:12:4b:a5:ab:d4:35:83:71:
d3:5f:2e:9f:37:cd:80:75:3d:b3:72:16:9c:96:2e:
52:84:bc:e8:8d:6d:51:12:ee:61:35:16:7a:8e:89:
df:46:2d:48:cf:ac:87:49:74:c2:34:b7:3b:6d:53:
19:1d:c2:67:1e:ab:c6:91:a7:99:31:a3:de:5d:bf:
47:e6:cc:ae:aa:b4:47:fe:e0:be:73:d6:e6:ae:62:
d8:86:c4:cf:34:85:8d:24:29:8c:f3:75:95:32:ee:
db:e3:62:dc:ff:ef:c3:94:c1:60:58:e8:bc:2e:04:
e2:53:c4:e6:dd:93:fb:ce:db:46:56:40:a7:a8:ec:
98:4e:03:4e:af:08:a4:6e:c1:a5:ce:3c:28:ca:c2:
22:d6:3b:f9:2a:1c:94:4c:ad:84:8b:7c:e0:14:4c:
00:db:8a:49:ef:9b:29:93:7a:42:78:44:59:f4:f5:
93:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:06:B0:A4:08:F1:D2:58:C7:2E:CC:7F:2D:DD:4A:6D:65:D4:43
X509v3 Authority Key Identifier:
keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8f:12:12:64:28:e6:6a:f3:0b:97:e6:0d:c8:a4:d0:7d:47:
f5:79:3f:59:e4:c8:75:80:5d:b4:ac:d4:cd:b8:27:5d:9d:cc:
f8:b4:25:35:a8:eb:fb:f8:bb:97:46:68:25:ba:f1:70:67:84:
c5:17:e1:9f:fe:a9:d8:a2:2d:f8:af:e8:b3:1c:3c:c4:ae:34:
a0:a8:f7:66:d5:3b:b8:e9:6a:d8:27:21:6f:fb:86:ac:c7:f5:
9f:e1:a4:ed:40:74:98:5f:21:f1:15:d4:55:16:f3:94:52:8b:
2f:5f:10:32:93:a5:4c:c9:ad:6a:bc:d5:c8:92:4d:97:39:3e:
e9:75:90:94:4c:a3:b5:84:41:ce:67:66:81:4e:5a:a1:f5:2a:
4f:23:02:cb:00:05:32:31:7f:f3:a9:60:37:5a:c6:1e:b7:4e:
b7:65:59:ad:f3:7d:e9:3d:24:40:f1:bb:5c:d0:03:c4:a9:be:
d2:47:ee:6d:7d:ff:bd:4f:fe:d6:e2:b6:67:61:af:83:ce:7a:
3e:d3:da:2b:8d:d0:2d:31:ee:4f:e0:ab:19:af:c0:ee:b1:69:
bb:28:2e:67:13:f9:21:46:a6:1b:a0:17:67:ec:62:ef:5a:da:
b8:97:3f:b7:71:31:8c:6c:19:38:f5:ad:41:1d:3c:af:19:da:
63:4f:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:31 2026 by rpki-client