
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft
File: LD0jWhshn0FmEJALADuKv9wXAqI.mft (raw, json)
Hash identifier: 6DHGyeRGKlmmRUEYdznFUjLo2Viq2FgfD9RZgDdCcH8=
Subject key identifier: 38:79:96:A1:2E:64:C1:85:82:DB:96:E2:E9:11:9A:74:A5:A0:68:A7
Authority key identifier: 2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2
Certificate issuer: /CN=A91CEA40/serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2
Certificate serial: 06D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft
Manifest number: 06C3
Signing time: Wed 20 May 2026 22:26:36 +0000
Manifest this update: Wed 20 May 2026 22:26:36 +0000
Manifest next update: Wed 27 May 2026 22:26:36 +0000
Files and hashes: 1: LD0jWhshn0FmEJALADuKv9wXAqI.crl (hash: 9GI4GWZep8ga5PzaJs6f7038ZJNcbLBgEOozgnokOd0=)
2: 96F093D4BEA011EB8CAD965FC4F9AE02.roa (hash: iGuCHDAUL0PXZn0ORHKJTEzzVOLk9UA+q1lRAx9/x7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl
rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEA40, serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2
Validity
Not Before: May 20 22:26:36 2026 GMT
Not After : May 27 22:26:36 2026 GMT
Subject: CN=6a0e351c-df9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:ee:a8:b9:6d:49:09:fa:ae:b7:e8:88:ac:
a8:93:d0:e6:ef:3e:8a:e7:04:b6:79:a6:17:ae:56:
07:6b:36:08:bb:d8:91:5e:fd:77:7c:6f:e3:04:70:
1c:1b:d4:e9:3c:ef:4d:7e:28:df:7e:e0:89:30:b9:
1f:93:41:fd:ca:0e:8a:a6:1d:ac:f6:d7:74:2e:01:
53:1b:1c:a4:db:78:f2:f5:0a:4c:fe:58:44:48:88:
de:a2:79:c1:bf:e8:35:21:4f:d4:ef:2f:ee:99:54:
8a:fd:cb:8c:0b:5d:ee:55:f5:d0:89:4f:4f:77:dc:
ee:25:a0:11:91:55:5f:c9:fe:1a:f5:9a:36:33:8c:
57:c5:52:a5:f3:3e:c9:7e:c4:5b:66:ea:a5:ba:76:
68:05:3d:39:97:74:46:c4:9f:ab:86:62:47:4d:4c:
ba:61:89:d9:87:e9:07:d4:76:28:ca:83:6f:c4:fc:
7d:4f:40:eb:d2:73:85:0e:8f:46:d2:b3:77:f8:33:
f9:98:19:e5:49:e9:df:aa:c0:1d:58:37:fe:de:6e:
af:d5:94:c8:4e:95:b7:49:4a:6f:00:6e:c6:06:0e:
c2:8f:d6:e8:81:d6:ae:85:df:59:18:a8:dc:10:88:
d2:70:db:27:e1:08:2e:51:4a:b3:32:eb:29:f9:b5:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:79:96:A1:2E:64:C1:85:82:DB:96:E2:E9:11:9A:74:A5:A0:68:A7
X509v3 Authority Key Identifier:
keyid:2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:09:74:95:11:7a:6e:1b:9e:cb:91:f4:bf:84:22:54:90:40:
9f:81:d5:17:de:fc:f2:f0:93:af:6d:5e:6b:e2:a7:57:f7:5a:
44:7a:b9:44:0d:d3:24:62:35:f7:e8:4a:3e:59:63:3d:67:e0:
fd:7e:ea:00:08:a7:11:f4:b8:34:22:d5:5e:27:96:74:96:8c:
35:1f:79:03:8a:9e:33:fe:65:dc:98:8f:cb:87:ee:84:25:da:
61:dc:b8:f6:ab:e7:c8:b9:ec:c9:78:ae:e0:df:b8:79:b1:52:
eb:28:75:09:cd:e7:2c:bd:6e:77:51:af:79:3a:ae:88:30:a7:
dc:b9:6d:bb:20:ee:89:a2:08:b2:99:8e:c1:3b:31:27:87:3d:
e8:c0:d6:a9:58:df:3e:2a:ff:de:3d:de:ee:bc:d7:26:64:45:
4d:fc:91:88:c2:6b:a0:d5:ec:c2:93:cc:33:55:42:be:e6:a9:
66:22:6f:8d:5a:65:ca:62:bd:a7:91:ee:40:39:47:2e:bd:18:
8b:ee:ed:4b:cf:f3:5c:7b:c3:8f:cf:07:eb:82:26:7e:69:3c:
70:4a:c4:3d:b4:90:17:71:9c:e2:fa:19:aa:22:3d:0e:18:b0:
61:2a:ae:2b:56:a6:95:65:ec:b5:43:34:6c:ee:b6:97:27:21:
e3:f1:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:14 2026 by rpki-client