
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier: 159a0GybTnJeB9ZorA5s55nF8UWuv/BRtSgAjamyxBU=
Subject key identifier: BD:2F:F4:DE:97:DE:EF:12:98:EA:15:39:71:37:52:02:0C:32:B9:EC
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial: 084D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number: 083E
Signing time: Mon 30 Mar 2026 20:52:14 +0000
Manifest this update: Mon 30 Mar 2026 20:52:13 +0000
Manifest next update: Mon 06 Apr 2026 20:52:13 +0000
Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: kKnxDyuhs4SHE+lgujHDsSGO5WK6gcVV9mobK749Z7I=)
2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: PnvDWjWzjaNuJRVmvtkfv01lOJ4mbsRef16ZNQueyWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Validity
Not Before: Mar 30 20:52:13 2026 GMT
Not After : Apr 6 20:52:13 2026 GMT
Subject: CN=69cae27d-3574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:ba:30:fd:5e:79:ae:14:11:77:86:ef:26:
24:c9:15:77:fc:20:4a:d4:27:5c:de:a9:65:37:8e:
11:ea:6b:91:b6:86:75:47:b8:6b:46:42:54:34:9d:
c9:97:22:88:75:ac:c1:a8:bd:5b:c0:b6:6c:b5:13:
66:25:5a:19:aa:60:1c:b5:ab:eb:66:cd:08:53:12:
2f:25:72:79:13:bb:67:a8:00:85:08:1a:26:ea:14:
29:ad:6d:5c:8f:17:8c:01:4e:20:8b:37:74:32:37:
66:22:52:ff:f1:b9:4c:06:8a:e9:7e:6f:85:34:21:
fa:61:93:b9:3b:db:89:fc:96:2c:bc:5a:b5:69:41:
cd:9d:3e:96:d6:3a:d6:bd:d2:6a:3a:69:03:45:1c:
23:1a:f3:97:08:bb:b6:5b:a1:7b:0a:fb:6e:2d:49:
06:a9:75:f2:36:d4:5e:2f:a3:70:5d:09:5c:9f:a2:
fb:dc:5a:0a:36:38:47:ca:a0:b5:04:89:ec:be:77:
af:ea:50:82:93:96:f3:ef:88:5a:c8:65:c6:8f:d7:
63:a8:b6:35:de:dc:b2:9c:94:6e:5c:a8:b4:b4:b8:
69:63:c3:d6:85:c0:a3:27:ca:f1:8e:80:d1:c0:08:
21:65:c8:8f:f2:50:54:49:40:3b:dd:fe:21:29:1f:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:F4:DE:97:DE:EF:12:98:EA:15:39:71:37:52:02:0C:32:B9:EC
X509v3 Authority Key Identifier:
keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b8:cd:63:e5:58:cc:85:b7:8d:d1:7e:29:96:23:bc:c3:8c:
f4:a7:c5:f9:ea:13:34:84:f8:be:ff:7b:11:06:cb:60:65:2b:
ad:26:a1:32:9b:fb:e6:96:05:01:2d:bb:b2:3a:fa:67:30:11:
ea:11:ae:27:c8:30:bf:b8:a6:14:9e:0d:57:6b:1e:50:84:9f:
3f:a6:6a:1b:8b:82:64:c0:11:bf:f0:97:9f:4c:7f:0c:bf:2a:
ca:b2:c1:4e:52:42:f7:d0:67:cb:ca:fd:b0:b1:d6:2a:1e:cd:
3b:3e:81:f8:ed:5f:4e:3a:2a:8a:86:12:43:aa:d6:d9:b9:e8:
76:cb:33:d7:a6:d9:c8:1f:d9:d9:19:b7:e7:a8:f7:80:c3:b7:
67:d7:99:4a:a7:0d:27:ca:a2:63:69:ea:cc:f2:7c:52:b1:7d:
36:01:49:84:0c:bc:0a:66:03:64:ae:ed:e5:5d:f7:3d:a5:89:
cd:9c:a6:71:11:a6:e9:2e:a7:93:c5:b6:8a:33:23:47:74:84:
df:dc:a4:41:83:72:fd:ca:eb:56:66:34:6b:de:ef:b7:c3:4c:
e6:68:fc:65:d1:7e:22:ea:50:99:f4:bf:21:ba:e6:bd:8a:bb:
0d:ec:08:d7:48:2c:09:f9:af:8b:0e:a8:66:14:82:59:b4:73:
ff:42:69:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 20:10:57 2026 by rpki-client