
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json)
Hash identifier: mXSP2R+ykBxkp7wQrJ1n/uk98h6d2V79YMQuBMwuPKE=
Subject key identifier: C2:4A:23:3D:6C:E4:40:26:7A:4F:4D:48:5B:F1:EA:E7:51:16:03:59
Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Certificate serial: 04A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
Manifest number: 048F
Signing time: Sat 04 Apr 2026 23:46:51 +0000
Manifest this update: Sat 04 Apr 2026 23:46:51 +0000
Manifest next update: Sat 11 Apr 2026 23:46:51 +0000
Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: QhArXtR/NO3+8kkSA49CAzlZPhNfDwY/FVcwihIH/4w=)
2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 2aYC0ELWow+IfSe343bqAO+DbKR4exbO+moWs9x1JMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187 (0x4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Validity
Not Before: Apr 4 23:46:51 2026 GMT
Not After : Apr 11 23:46:51 2026 GMT
Subject: CN=69d1a2eb-c835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:23:64:c5:3c:03:f9:83:d4:14:b5:b9:fd:
00:bb:d2:32:61:b5:ac:e1:c1:01:fd:6e:8f:2a:c4:
14:67:2b:0a:5a:1c:11:bc:aa:77:9e:23:e6:5e:2d:
cf:6c:e3:ad:49:7f:be:52:2e:50:0f:e5:83:4f:0d:
79:56:45:ed:a1:60:47:1b:2d:10:de:69:72:23:04:
3c:d2:2d:b1:2b:a7:5e:ce:39:18:a5:35:2d:f3:0d:
e8:8f:f2:84:53:57:11:7f:fa:aa:35:9f:1c:ad:89:
5f:16:8d:73:d0:39:4f:71:f8:4e:3f:c2:af:7e:54:
89:6d:4d:33:2b:04:ef:63:70:96:d9:a8:bb:a7:3a:
1a:32:0c:94:91:12:03:4f:42:21:26:ac:ef:16:24:
07:d4:6a:3e:1b:22:7d:3c:13:d8:a3:c7:1a:18:cb:
e9:6d:32:a4:3c:78:80:6b:b5:74:5c:7a:b3:d8:e0:
f2:4b:ad:4d:ac:1d:fe:6a:a8:07:5c:3f:c3:21:ab:
a6:1e:e3:a3:42:b9:47:44:be:40:87:3a:f6:f7:6e:
b9:e3:2a:ee:d2:8d:8e:5c:22:a3:b7:f6:98:1e:bd:
24:7c:4f:3a:ab:9b:55:00:b2:62:35:4d:28:42:82:
3d:11:fc:7e:cd:41:59:94:1d:31:cb:8d:46:11:82:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:23:3D:6C:E4:40:26:7A:4F:4D:48:5B:F1:EA:E7:51:16:03:59
X509v3 Authority Key Identifier:
keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:29:60:27:4c:d8:b4:cc:4a:b0:0b:ca:ef:e6:3a:cd:cb:89:
0b:3c:95:97:66:50:7f:61:5a:7d:55:a6:23:ae:24:49:7e:80:
61:b6:b1:4d:66:69:7e:5e:09:0b:5f:3f:95:62:8d:0e:ba:89:
b2:18:eb:85:03:3b:87:e6:f0:27:b8:c6:1f:76:54:98:24:b2:
70:0b:72:c5:79:54:66:41:c3:5d:30:26:22:24:54:36:80:1a:
10:37:46:3f:0b:6e:13:00:c0:47:86:f8:a5:84:29:f2:30:69:
f7:f3:f0:05:7c:18:a3:37:a0:f3:bc:73:8f:87:65:b9:1e:f1:
db:d7:80:42:ac:ae:0a:6f:5e:0b:96:fb:aa:92:95:3f:06:31:
93:f0:2e:ea:ff:b9:97:e1:6c:47:f1:cd:83:12:e5:1e:d6:53:
df:99:89:2c:1e:ad:5b:81:e7:b2:81:1d:a3:a5:90:f1:e7:9c:
2a:34:d6:65:36:98:8b:cb:03:d7:e4:99:37:00:4b:30:f4:72:
48:87:ff:bf:94:e3:4a:e4:cc:b6:ed:91:e2:7e:4f:22:96:59:
41:c5:7b:5e:e8:03:42:86:3d:13:ee:84:15:cb:6f:bc:0c:09:
a0:f9:0b:5b:5c:a8:ec:1d:55:d0:b2:74:c1:3a:72:ee:0a:12:
8a:5b:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:35 2026 by rpki-client