
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json)
Hash identifier: eYz7vEWJp4iAmwVUHPm8yd8XjCjrZ2VDr6CUXhFBaG8=
Subject key identifier: 19:99:C8:30:78:40:18:8C:6E:BC:8A:49:C5:84:45:B7:37:25:11:2A
Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Certificate serial: 020F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
Manifest number: 020F
Signing time: Sun 05 Apr 2026 02:27:44 +0000
Manifest this update: Sun 05 Apr 2026 02:27:44 +0000
Manifest next update: Sun 12 Apr 2026 02:27:44 +0000
Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: Oungu9/NmXlcc4eZGS4NzpLb8cxwRzKFKRNiWGfFNjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Validity
Not Before: Apr 5 02:27:44 2026 GMT
Not After : Apr 12 02:27:44 2026 GMT
Subject: CN=69d1c8a0-6b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:92:7b:1e:83:36:86:78:1d:b4:e2:d0:08:
00:c3:d4:12:61:05:12:80:fd:2d:77:be:84:9d:a3:
72:18:a3:34:39:ca:a3:e1:9c:a4:d2:1e:5d:37:55:
47:74:4d:e2:1e:8e:42:1f:4b:c8:71:d7:58:ce:a5:
f1:a2:46:2c:0f:d0:a4:3b:85:c1:3a:00:5a:2f:24:
4d:66:c7:f7:8d:60:87:e4:d8:5e:c2:45:b0:a1:1f:
8f:b2:e5:b5:9c:d6:e1:c1:cc:4f:b8:8d:24:9b:56:
eb:18:2f:5c:f7:08:1a:33:99:48:f4:de:09:37:33:
79:5a:09:d8:31:24:ed:2a:c0:44:a2:17:96:0f:72:
9c:4d:91:d8:fc:60:03:4c:ac:ee:92:5d:81:93:96:
55:c4:c3:87:7f:29:9e:72:42:92:98:d6:5d:61:26:
7b:5b:c9:97:98:22:c7:1f:d7:d0:51:7e:c3:c4:50:
08:63:fe:3c:b8:d2:35:2b:fc:96:5b:3c:4e:77:79:
bf:3a:2d:b5:8f:ed:94:a6:93:f2:39:84:03:53:d4:
c5:d5:1e:f8:02:a7:c2:11:15:03:27:c8:b9:69:39:
d7:68:27:83:63:2d:5e:3d:32:6c:2b:b0:4b:85:9f:
c3:c8:6c:62:a2:8e:68:0e:ad:d6:ee:21:58:a2:39:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:99:C8:30:78:40:18:8C:6E:BC:8A:49:C5:84:45:B7:37:25:11:2A
X509v3 Authority Key Identifier:
keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:8a:0b:37:4a:e9:61:3d:ba:2e:b9:ab:1c:49:89:cc:ec:28:
59:15:94:ad:24:4d:84:10:f4:08:d3:92:c5:59:6c:eb:52:0c:
37:c9:5c:ce:9a:92:97:86:0c:9c:42:fe:27:88:d6:80:80:ef:
f6:fc:e7:74:7a:a7:8a:a7:27:99:87:c3:d9:21:fe:48:d5:9a:
a4:ab:22:0c:6a:1b:e0:7b:f2:74:fc:d8:06:7c:8f:84:22:df:
ac:75:32:e7:e2:73:3c:44:cd:05:cc:72:60:d5:ed:c4:22:36:
b9:8e:eb:7b:83:55:80:9e:7a:d0:a2:09:84:0e:7e:b2:05:9b:
82:ec:06:8c:80:b7:b5:29:07:8f:62:16:0e:c1:f9:3a:a8:c3:
1f:da:4d:4c:6c:a4:8c:b3:aa:be:dd:94:0a:f0:7f:b3:b7:58:
1c:1d:e8:68:ec:d0:d1:07:3d:5b:ec:3e:86:9e:ad:1d:4d:f3:
90:d7:86:28:db:2a:f9:c4:bd:d0:7a:31:47:b7:d3:c9:7b:f4:
13:b2:05:a4:c0:82:2b:cf:26:25:50:86:04:19:d5:7e:3b:10:
10:55:eb:33:8c:21:12:6d:2c:28:59:6f:36:ae:33:b7:19:77:
84:7a:29:59:ae:12:31:e8:71:ce:93:83:4a:6f:67:3b:3f:1e:
df:b9:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:24:44 2026 by rpki-client