
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json)
Hash identifier: xonJ1brzy+qRMGdbp1kYaUhkvzmOKWwrSakVfWU8n3w=
Subject key identifier: 2E:25:94:C0:8A:73:38:92:2D:7B:12:88:7C:BA:37:5D:83:7B:FA:B8
Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Certificate serial: 0D00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
Manifest number: 0CEB
Signing time: Sat 04 Jul 2026 18:30:35 +0000
Manifest this update: Sat 04 Jul 2026 18:30:34 +0000
Manifest next update: Sat 11 Jul 2026 18:30:34 +0000
Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: pMtzmH/1nMFuvPuS4Jc5+NEnIvEIwRNoR6GyMSzTieQ=)
2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: T2Q8vs9Q4/vusWLhI7xi4dCID8hH0Wl+tGrUP4Dj1Po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl
rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 18:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Validity
Not Before: Jul 4 18:30:34 2026 GMT
Not After : Jul 11 18:30:34 2026 GMT
Subject: CN=6a49514b-c9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:0a:9b:d0:4b:9f:1f:d3:7e:57:bf:eb:e1:
29:1f:19:81:e5:b6:eb:b3:12:33:74:16:b9:4e:bd:
25:49:1f:32:2d:65:4a:57:85:77:ac:22:1a:16:3c:
0d:e6:bd:88:64:37:b4:ad:a7:50:ab:66:84:b4:7a:
b0:53:8d:fe:46:30:9f:f8:78:c7:1c:f9:b7:a9:b3:
f6:a9:c6:f7:dd:ac:fd:34:36:c4:a9:1f:49:c8:94:
8c:1c:e0:20:cd:56:93:06:13:12:9e:d5:fd:ad:83:
62:b4:ee:a8:19:6f:59:db:75:28:16:5c:61:30:98:
cb:0f:ed:1d:ad:80:fe:69:76:e1:c5:20:17:6a:85:
ee:50:bd:d9:f7:b8:02:06:8c:55:86:b2:af:e5:ec:
1b:14:9e:8a:d8:7f:36:cb:53:ca:b2:1e:a3:41:cd:
3a:5b:a9:0a:6a:43:90:8e:a9:f6:67:bf:a6:b6:84:
7c:c9:f2:e5:f7:e9:1d:df:27:6f:7e:a1:13:6f:95:
73:9c:1d:17:71:50:c0:33:cf:45:bb:de:ad:a3:e5:
80:0e:dc:8b:9b:05:fe:c2:6d:75:9e:6e:1c:57:26:
fc:f6:6a:0e:b9:fb:b4:45:e4:44:0e:df:6f:c3:50:
35:2e:0c:eb:6b:75:89:a8:d3:79:2c:32:4a:22:83:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:25:94:C0:8A:73:38:92:2D:7B:12:88:7C:BA:37:5D:83:7B:FA:B8
X509v3 Authority Key Identifier:
keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:64:b9:72:e8:d4:0e:04:16:53:8f:15:b6:ff:e4:1d:28:19:
2d:28:e4:16:71:ff:7f:64:17:d6:f2:4c:e3:1b:23:9a:01:1d:
ef:fc:de:8f:c6:ae:bd:24:4d:2f:62:1d:9b:52:c7:9d:3b:1d:
8c:16:2c:44:dc:06:17:24:90:b0:fb:74:6a:09:9a:75:a8:04:
fe:f8:9c:8f:67:b0:4a:5a:1b:82:15:08:21:ac:79:e8:d7:06:
42:21:22:e1:31:f5:8b:e0:4e:ed:25:4b:02:9a:4d:7d:20:ba:
cf:a3:de:86:e0:ee:01:19:37:fa:f7:75:bf:5a:fb:f7:a1:3d:
f8:4e:62:ae:b7:70:10:c6:ec:b0:ac:c5:c9:64:ce:79:56:e4:
32:43:c2:7b:c0:30:8e:ca:f8:e9:ab:fb:23:b6:c4:6f:2c:0c:
fb:da:db:89:09:d1:19:33:be:46:fc:b4:e0:e5:2b:33:80:f8:
d8:e9:aa:a0:ec:cf:a6:a9:bd:52:ff:a8:c8:0f:5e:e0:d9:a0:
20:af:ab:96:d3:19:0a:92:13:81:ae:fe:7f:d9:57:fd:ca:85:
ce:19:42:77:c1:8e:c8:97:d4:a3:f0:72:94:51:5a:64:81:38:
70:d4:5d:5b:42:36:4c:53:b8:24:e9:b5:c3:89:c2:b2:a0:de:
98:6c:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:53:11 2026 by rpki-client