
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
File: l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json)
Hash identifier: yp/yL3VAE7phb4mKZGiA98ct1DfCQq5nP+quEGBm/tw=
Subject key identifier: 84:64:F5:97:63:5C:AC:6B:DA:EE:CA:C3:34:26:B5:78:E8:D7:3E:5E
Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC
Certificate issuer: /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
Manifest number: 80
Signing time: Wed 19 Aug 2026 08:22:04 +0000
Manifest this update: Wed 19 Aug 2026 08:22:03 +0000
Manifest next update: Wed 26 Aug 2026 08:22:03 +0000
Files and hashes: 1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: urchHEP8FUEwgE8t3/ocYWLqjsz48fX5atkZTlz/arU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl
rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
Validity
Not Before: Aug 19 08:22:03 2026 GMT
Not After : Aug 26 08:22:03 2026 GMT
Subject: CN=6a8567ac-75ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:30:fa:d9:37:41:86:27:e9:fc:73:3f:af:
a1:ae:10:96:6b:cb:67:cf:b5:93:0d:17:f8:ba:44:
22:3b:85:3c:32:de:53:a8:7a:cd:81:d8:94:a8:3c:
de:e3:d7:17:17:e5:14:96:e8:23:b7:04:a3:de:0b:
02:e0:d8:3f:c6:4f:76:6e:10:a0:46:e9:3f:95:9f:
6d:b9:5b:e0:aa:4c:dc:50:82:57:8d:16:3e:5e:04:
54:f3:30:de:9e:94:15:03:7c:b4:60:ec:74:36:59:
8b:38:8b:23:9e:40:c2:2b:28:da:29:69:53:c8:ed:
8d:dc:33:06:cc:a6:2a:13:37:61:41:95:af:2f:bc:
08:ba:91:02:ad:e8:f4:f7:ba:1c:0a:7d:8a:7a:ea:
6a:6f:1d:fc:e0:53:c9:1a:8b:b2:d3:c4:56:7b:f3:
7e:61:28:f7:f3:05:e5:4f:76:24:d8:82:99:f4:e3:
66:9a:90:2e:af:a2:ed:ba:76:95:7e:bd:81:4b:80:
76:ee:e7:07:fd:35:42:97:cb:8a:93:7e:bc:93:22:
b3:86:2f:80:9f:02:12:39:7a:92:38:b6:55:20:06:
b8:43:53:f1:46:cb:c2:0c:8b:88:d3:b8:ae:8d:f6:
aa:50:e4:3c:e0:05:7b:9e:10:9c:3e:a2:2e:5d:08:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:F5:97:63:5C:AC:6B:DA:EE:CA:C3:34:26:B5:78:E8:D7:3E:5E
X509v3 Authority Key Identifier:
keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:b6:3e:38:c9:41:9a:e5:61:17:06:e5:c7:b2:9f:3f:f4:
f3:ac:b3:19:5b:eb:86:22:f8:b0:be:c5:ff:e1:18:c0:cb:c2:
cf:96:be:30:51:e4:67:b5:d4:65:93:b4:43:c1:20:9c:8d:5c:
43:c5:80:d4:a7:ca:d5:bb:82:6b:3a:56:f3:6f:09:92:b5:a7:
ef:e7:06:5f:a4:9c:8c:48:b3:d0:ef:bd:c7:7e:f0:c7:25:08:
b2:d6:f2:ba:41:5b:87:fe:0e:a9:45:74:a4:d8:49:f0:c4:47:
23:6e:77:43:52:b4:00:77:67:35:cc:d1:45:5e:14:8d:ec:54:
ac:ba:94:ca:74:93:34:fa:d0:0e:00:b4:3b:45:e4:bc:3d:4d:
1d:e1:b2:f0:93:d0:e2:25:58:4d:bd:c5:27:68:98:94:b6:5a:
fc:35:05:15:3b:46:7a:48:cc:03:00:02:4c:19:81:ee:08:e6:
a0:0d:31:5e:2d:48:cd:b4:56:d8:96:df:1b:b1:48:6b:4d:fe:
3e:9a:0e:85:76:6e:9f:d6:b8:71:c1:b3:bb:18:07:44:8d:ff:
ef:20:1a:22:94:7c:9f:41:78:95:81:23:a3:fc:92:41:65:7c:
77:f8:f4:2f:6a:30:42:80:b5:9c:53:44:52:f1:86:bc:7d:d9:
ba:92:28:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:08 2026 by rpki-client