
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
File: lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json)
Hash identifier: Cr9mz1SXqL3rkYKLtoCZ73J5+6aueeg43WWUAqSvR9o=
Subject key identifier: 17:26:49:0C:D8:57:F4:13:16:36:13:A4:5F:23:3D:6F:43:1B:CB:58
Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
Manifest number: 0136
Signing time: Thu 21 May 2026 05:33:45 +0000
Manifest this update: Thu 21 May 2026 05:33:44 +0000
Manifest next update: Thu 28 May 2026 05:33:44 +0000
Files and hashes: 1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: crBb6y2dqQTi67sgAyOOva7IPOmATQtrTa26/1HxrSw=)
2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: eHxVtr7CaVRUMmuegbvUTVOQCFKL9zTAYfh/hkVVLRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Validity
Not Before: May 21 05:33:44 2026 GMT
Not After : May 28 05:33:44 2026 GMT
Subject: CN=6a0e9938-8429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:22:b3:22:e6:00:98:03:2c:8e:2b:d2:ed:
a7:07:d3:8b:16:f5:aa:8b:dc:a8:74:85:77:fe:e5:
b4:67:26:97:6e:34:d8:a9:59:fd:03:fd:66:5b:1d:
af:11:e0:22:4c:31:dd:0e:f8:46:0a:a3:81:9f:d0:
81:3a:65:d6:7d:93:ba:d4:06:9c:0f:56:68:8d:9a:
9e:ef:21:ab:6c:4d:d5:94:a5:0f:d1:b9:bd:62:75:
5d:97:03:2f:f1:35:ff:4d:fd:a2:85:03:e2:74:e6:
8a:bf:f6:ef:38:12:19:23:ef:1d:be:d3:f6:38:57:
d2:a0:bc:05:74:4d:93:63:f0:9c:a5:c9:ed:48:a6:
e4:56:06:e5:07:8b:f0:ad:cf:f8:4b:46:54:c6:56:
6a:9b:9a:9e:20:04:b2:e9:2d:b1:61:2a:8d:14:bd:
3c:04:da:8e:51:68:8c:a0:9a:c0:d1:2d:2b:ba:c1:
ea:8d:11:d6:32:8f:26:4c:52:8a:79:7e:4c:89:93:
47:da:9b:20:03:e8:31:0c:b3:65:a8:32:77:b8:e3:
fa:ae:f4:c9:ac:d3:9f:86:5f:9d:68:49:68:54:db:
9e:35:7f:4c:f7:8b:db:60:d0:bd:b7:74:29:17:fa:
24:27:bd:bd:75:36:4c:db:82:cd:99:d1:dc:93:62:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:49:0C:D8:57:F4:13:16:36:13:A4:5F:23:3D:6F:43:1B:CB:58
X509v3 Authority Key Identifier:
keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e8:8a:8a:76:05:4a:09:eb:2c:70:a2:5e:94:13:e1:f3:e6:
36:98:fa:70:94:5e:f6:b4:6c:65:6e:49:b4:72:05:d5:62:ec:
78:46:ff:f2:9e:f4:d9:2a:ba:5c:d8:b5:e6:90:2e:28:8e:ca:
8d:ce:4a:7c:de:05:dd:c7:84:86:10:fc:bf:29:1f:49:85:11:
42:23:68:01:ed:2f:35:3f:4a:73:3c:da:df:0e:89:c1:4d:d0:
32:ff:18:62:4f:50:77:1a:62:2e:9b:be:02:f8:10:6c:75:31:
a9:8c:ce:29:d6:bc:97:3d:bb:9b:dd:ce:76:08:d3:1b:66:cf:
94:40:15:62:cd:ec:98:8c:11:3f:3b:1b:a7:00:ef:69:31:e7:
b4:7f:14:e4:6f:a9:ec:cd:29:82:04:af:ad:4a:dd:03:8b:f8:
3d:41:25:e4:a8:3b:16:27:42:73:55:f3:f3:97:3c:bb:5a:00:
74:7c:12:7c:73:37:67:e2:d4:c4:c9:6e:85:b8:4b:02:64:b9:
fd:bd:ee:ce:73:9a:d9:2c:f0:78:60:95:91:31:1e:09:3e:6c:
b3:e9:44:63:f4:0a:7d:cf:ea:99:25:30:bb:bc:4b:93:ae:a7:
2a:c7:27:7b:d5:3b:0c:fd:40:a5:6f:06:3c:84:ae:41:97:1c:
79:43:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:39:34 2026 by rpki-client