
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
File: cLpsN0BJKqpJbOn3BQf-g3072BI.mft (raw, json)
Hash identifier: Au2VZnTbgksEsfeFCZPgAk3w/823tr/5H+cMswoGjUc=
Subject key identifier: 56:CD:C6:D0:CC:72:C8:F0:34:27:DD:13:14:EC:3B:D8:85:77:79:0D
Authority key identifier: 70:BA:6C:37:40:49:2A:AA:49:6C:E9:F7:05:07:FE:83:7D:3B:D8:12
Certificate issuer: /CN=A91CCABB/serialNumber=70BA6C3740492AAA496CE9F70507FE837D3BD812
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
Manifest number: 3B
Signing time: Sun 05 Apr 2026 07:53:29 +0000
Manifest this update: Sun 05 Apr 2026 07:53:28 +0000
Manifest next update: Sun 12 Apr 2026 07:53:28 +0000
Files and hashes: 1: cLpsN0BJKqpJbOn3BQf-g3072BI.crl (hash: TGB8xc59725EdCF0Fajtqd3XOwgMTF/jhTu03/vnT7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.crl
rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCABB, serialNumber=70BA6C3740492AAA496CE9F70507FE837D3BD812
Validity
Not Before: Apr 5 07:53:28 2026 GMT
Not After : Apr 12 07:53:28 2026 GMT
Subject: CN=69d214f8-5a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:40:ca:f1:7b:1f:b3:18:23:83:56:c7:17:
ea:51:03:23:bd:a9:73:9f:4c:bd:08:9d:59:59:c4:
fa:b3:1a:2a:83:d8:8e:ff:56:47:08:1e:03:20:ab:
c0:22:ef:8c:22:e5:63:12:a0:d1:7f:02:6a:96:7c:
72:e4:a2:2f:ab:cc:a7:d0:c6:52:c1:98:f3:88:36:
23:95:71:20:3e:f9:5c:d1:c4:8f:1b:0c:29:88:73:
bd:15:0b:2e:52:31:8d:22:ac:ea:7c:01:12:21:40:
5f:94:6a:8e:26:de:70:57:d2:a0:d8:fe:69:14:04:
52:e0:05:58:ad:b5:e9:95:3b:be:8a:5c:13:8f:e3:
fd:1e:86:e2:ca:d4:0b:ed:10:78:66:4c:c3:ca:5e:
2c:95:c3:ec:ea:4d:cf:7b:06:9a:51:bf:a3:06:79:
5b:ca:89:96:7e:85:8d:4d:47:d6:5f:d6:d3:78:28:
18:5b:de:44:c8:1e:02:94:a1:be:e2:86:ec:1c:52:
79:3b:8e:ca:fe:e3:cd:e7:d3:b3:1c:63:1f:d1:27:
9a:fc:06:50:85:62:71:0d:93:41:00:8c:fa:d1:08:
d2:f2:fc:07:f3:81:94:3f:9b:55:19:72:8e:8a:16:
61:43:32:f3:21:4b:ff:2d:f6:8d:b2:4d:ab:e0:e0:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CD:C6:D0:CC:72:C8:F0:34:27:DD:13:14:EC:3B:D8:85:77:79:0D
X509v3 Authority Key Identifier:
keyid:70:BA:6C:37:40:49:2A:AA:49:6C:E9:F7:05:07:FE:83:7D:3B:D8:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:ff:98:52:dd:70:6c:c3:db:24:27:17:86:16:33:d8:9a:fb:
23:d7:5c:3d:d2:f9:93:eb:51:e5:ee:66:94:80:89:f5:e0:af:
50:b3:bb:f1:a5:8a:5d:d8:cf:c1:3c:4d:85:e9:6d:fd:38:a8:
1a:b8:3b:fb:a1:c8:e9:e8:c2:2b:c9:e7:85:07:39:7e:65:90:
db:ea:9f:b6:85:62:79:81:99:21:66:74:63:13:fb:2a:29:c7:
f3:eb:d0:52:22:24:cf:d8:2b:f8:8d:f5:55:26:b8:ff:09:b8:
3b:36:f9:8d:87:6e:ba:93:94:80:5d:50:ca:9a:ae:12:4b:b1:
5c:bc:01:a7:b5:d4:13:82:30:9d:34:f4:39:9e:46:f5:39:0c:
3b:4e:9c:fd:df:b6:f2:b1:05:61:20:32:22:97:a6:44:3c:00:
dd:af:f1:32:0c:98:2b:95:db:ed:7d:d4:5b:d1:4e:f3:46:f0:
8a:5b:05:5d:ef:d8:e5:60:3b:68:34:e1:ab:ef:06:2e:04:74:
98:13:ab:41:1b:5f:7f:59:8b:65:69:f0:1a:e9:e8:61:d2:a4:
32:d8:dc:00:ff:07:bc:68:04:e3:4f:84:33:f5:20:13:de:10:
b2:de:0c:20:52:5a:13:89:f7:48:4a:d8:42:4c:21:3a:ec:9e:
9f:64:b5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:12 2026 by rpki-client