
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier: a/E7JTZY6mJBy0bVVTJauSJ7052+ZtnX8o7A30xIx+c=
Subject key identifier: CB:C4:39:DC:36:70:9A:A3:A6:C0:3E:B1:07:81:87:1E:AA:ED:0E:D2
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial: 0864
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number: 0855
Signing time: Thu 14 May 2026 20:54:11 +0000
Manifest this update: Thu 14 May 2026 20:54:10 +0000
Manifest next update: Thu 21 May 2026 20:54:10 +0000
Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: 0hUPcBBJryWJmQ0inL2OZVrgY1JifI1xXWs/XqABJhw=)
2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: PnvDWjWzjaNuJRVmvtkfv01lOJ4mbsRef16ZNQueyWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 20:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Validity
Not Before: May 14 20:54:10 2026 GMT
Not After : May 21 20:54:10 2026 GMT
Subject: CN=6a063673-8d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fe:5d:b1:cd:c7:28:7a:40:e6:fa:15:5d:c0:
1c:ce:50:22:0b:3a:6c:15:ea:32:dd:e4:3c:c1:ac:
b2:8e:bf:cc:d4:bd:80:d3:c1:a5:22:32:d3:f1:64:
12:a0:7a:20:44:f8:4f:f3:d2:c9:36:b2:d9:f6:87:
0b:51:53:05:2b:c7:96:5c:87:d8:f0:59:1b:92:65:
8c:60:73:2b:b9:8d:a8:1f:8a:09:28:aa:5b:59:d7:
a7:dd:a2:f6:f0:89:ff:6c:58:25:28:62:5b:f9:38:
aa:cf:00:60:7f:81:fc:71:87:62:74:a3:e0:bf:a0:
3b:5e:a6:a7:62:83:69:85:c8:83:24:5f:73:27:e7:
18:33:96:f8:8e:07:64:af:98:d0:2b:eb:eb:77:93:
1b:b6:54:e9:4e:bb:d8:ce:f7:d2:0a:a5:54:0d:a8:
d9:fd:c6:af:6a:86:9a:89:1b:a9:44:b6:9f:ee:24:
fb:04:17:57:cb:1a:9f:6a:a5:48:7d:3e:74:ec:67:
0b:78:d1:df:e3:9e:4b:00:23:47:18:2c:7b:34:96:
11:d4:bd:2f:4b:20:0d:73:2d:eb:b8:4c:b7:f4:82:
76:1e:4c:5d:99:22:4d:7b:cb:22:52:25:50:bb:b9:
32:89:15:fc:8c:7e:50:5e:bd:31:84:9c:00:44:0b:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:39:DC:36:70:9A:A3:A6:C0:3E:B1:07:81:87:1E:AA:ED:0E:D2
X509v3 Authority Key Identifier:
keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:73:c7:e1:4f:fe:d1:95:1c:c3:df:35:c8:95:17:63:ae:9d:
53:d7:62:9a:2a:39:c5:0c:37:4f:05:e7:f0:3c:0c:63:44:3b:
ee:0e:0b:71:fc:48:ee:32:83:67:34:4f:17:e1:82:e7:94:47:
ac:46:5c:fd:fd:72:e5:3a:dd:57:45:69:af:cd:1b:ae:0a:ce:
ad:94:05:32:83:63:09:bf:0e:71:42:4f:c0:2b:84:46:ec:03:
07:fb:5f:0d:04:c4:ee:ea:49:2f:39:53:ce:81:fe:1a:ff:5f:
c5:9b:ea:d4:01:c1:12:a1:74:b8:af:84:46:19:bb:b9:0c:1e:
b1:4c:ea:74:ea:e9:7a:7b:be:a7:1d:47:ce:06:41:de:4a:6e:
e4:2f:f2:93:f2:11:f3:8e:b4:a2:63:b0:6d:d3:14:1b:b2:24:
d6:cb:3d:18:f6:62:27:0c:bd:75:79:5d:e8:3f:39:a8:ec:43:
e8:91:d2:7a:ff:aa:b3:ca:09:f4:16:c4:cf:01:8b:e7:89:37:
86:9b:92:b5:17:9d:39:5e:d3:f0:87:9b:b3:9d:6a:bb:64:28:
87:07:7c:61:12:39:b1:ac:42:72:28:fd:af:f5:3c:a3:d4:dc:
33:df:10:5e:ad:fe:0a:64:8d:98:46:37:53:c3:89:49:bf:d8:
6a:8b:c3:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ2QjAxMTAvBgNVBAUTKDk3NjFGRjVGM0Y4NDE2QkUwMUUyM0ZDNzA1ODQ3REZB
OTQ0ODREQjYwHhcNMjYwNTE0MjA1NDEwWhcNMjYwNTIxMjA1NDEwWjAYMRYwFAYD
VQQDEw02YTA2MzY3My04ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6P5dsc3HKHpA5voVXcAczlAiCzpsFeoy3eQ8wayyjr/M1L2A08GlIjLT8WQS
oHogRPhP89LJNrLZ9ocLUVMFK8eWXIfY8FkbkmWMYHMruY2oH4oJKKpbWden3aL2
8In/bFglKGJb+TiqzwBgf4H8cYdidKPgv6A7XqanYoNphciDJF9zJ+cYM5b4jgdk
r5jQK+vrd5MbtlTpTrvYzvfSCqVUDajZ/cavaoaaiRupRLaf7iT7BBdXyxqfaqVI
fT507GcLeNHf455LACNHGCx7NJYR1L0vSyANcy3ruEy39IJ2HkxdmSJNe8siUiVQ
u7kyiRX8jH5QXr0xhJwARAt2ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvEOdw2
cJqjpsA+sQeBhx6q7Q7SMB8GA1UdIwQYMBaAFJdh/18/hBa+AeI/xwWEffqUSE22
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZCMC9FNTA5MDJCNjA3
OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZyNEI0al9IQllSOS1wUklU
YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wySF9Yei1FRnI0QjRqX0hCWVI5LXBSSVRiWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDZCMC9FNTA5MDJCNjA3OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZy
NEI0al9IQllSOS1wUklUYlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbXPH4U/+0ZUcw981yJUXY66dU9dimio5xQw3TwXn8DwMY0Q77g4LcfxI7jKD
ZzRPF+GC55RHrEZc/f1y5TrdV0Vpr80brgrOrZQFMoNjCb8OcUJPwCuERuwDB/tf
DQTE7upJLzlTzoH+Gv9fxZvq1AHBEqF0uK+ERhm7uQwesUzqdOrpenu+px1HzgZB
3kpu5C/yk/IR8460omOwbdMUG7Ik1ss9GPZiJwy9dXld6D85qOxD6JHSev+qs8oJ
9BbEzwGL54k3hpuStRedOV7T8Iebs51qu2Qohwd8YRI5saxCcij9r/U8o9TcM98Q
Xq3+CmSNmEY3U8OJSb/YaovDTA==
-----END CERTIFICATE-----
Generated at Fri May 15 23:13:17 2026 by rpki-client