
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json)
Hash identifier: eA6EQmg3h/7fcWTc9leUOnpiptHCFQNqT4fMER+NIws=
Subject key identifier: 31:A0:51:BA:4C:8C:1F:5B:31:1B:97:FF:50:6A:26:F0:EB:FE:2B:8D
Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
Manifest number: 013B
Signing time: Wed 19 Aug 2026 06:09:12 +0000
Manifest this update: Wed 19 Aug 2026 06:09:12 +0000
Manifest next update: Wed 26 Aug 2026 06:09:12 +0000
Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: 6jKWSK+VpZ4q/Qyz8bNEfQ4UWh8ot6RG2KLiRMAWU2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Validity
Not Before: Aug 19 06:09:12 2026 GMT
Not After : Aug 26 06:09:12 2026 GMT
Subject: CN=6a854888-9a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:ef:45:c5:1f:15:0f:45:15:39:2a:80:72:
cc:86:1a:02:7a:3d:dd:69:d8:0e:85:c1:c4:07:1b:
7c:3c:4c:63:19:0f:86:98:45:9f:84:56:ec:1c:f7:
19:67:fe:6b:16:94:09:08:5e:98:bb:84:c5:f2:27:
8d:ec:0f:47:61:95:72:b2:c4:af:31:8c:c7:a0:bf:
9c:ad:08:31:2d:a9:25:61:33:48:e1:a5:c1:d6:60:
f2:4e:00:c3:ea:1a:16:c8:4c:c3:2b:09:71:73:3f:
c5:0e:4c:27:8d:91:b5:53:ef:44:ba:de:9b:04:9c:
d5:8d:97:fb:54:ae:95:1a:a0:36:0a:87:fa:75:59:
57:54:35:80:f4:ce:31:e0:8d:92:d3:20:b7:01:64:
e1:f7:37:27:e7:3b:d0:6a:66:db:83:67:ef:2e:3a:
56:b2:77:db:73:8c:0a:10:1e:f5:ae:4d:67:01:60:
c2:dd:1e:48:0d:db:c7:1b:a3:24:6c:61:cb:ba:b2:
09:d2:75:0d:8e:09:fb:15:57:2b:f9:ea:11:b9:72:
38:2e:02:c8:64:63:25:4d:6b:50:7b:fc:a3:87:cf:
32:08:d4:62:f3:30:04:b6:f6:db:3d:d2:2b:7a:c7:
25:e7:3b:45:54:60:4f:dd:07:46:8d:78:f9:3a:b5:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:51:BA:4C:8C:1F:5B:31:1B:97:FF:50:6A:26:F0:EB:FE:2B:8D
X509v3 Authority Key Identifier:
keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:7b:60:c8:f7:57:f1:9b:2d:31:da:8c:1a:eb:1e:01:29:01:
3b:c5:c2:3f:4f:ba:b5:5b:33:2c:46:63:0b:19:18:5f:b6:d8:
3f:a7:5a:7c:e2:82:62:11:9f:17:20:89:d2:1a:7c:cf:82:9f:
c7:95:57:60:ad:da:11:08:f9:8e:59:90:cc:2c:b7:09:96:eb:
f6:19:f0:35:ed:90:96:9b:4c:f7:1b:48:c1:33:5d:cb:4b:55:
e5:6e:5e:c8:db:78:d6:ad:bc:ce:ae:ea:19:ad:af:28:b9:49:
ff:ba:d5:57:dc:d7:0c:d8:72:4a:ff:b2:9a:c0:d6:25:e2:0d:
2d:ce:d5:d8:b2:79:77:1e:a8:3d:fc:4c:18:34:5e:2e:c1:77:
aa:4c:0e:1b:64:98:9e:36:28:14:a3:8a:12:bc:b6:29:68:2a:
ae:79:e7:fe:b2:10:4b:b1:14:15:c1:88:5f:b1:06:04:24:07:
39:19:78:ac:eb:36:0e:ea:c3:6c:9c:22:d7:e3:21:e4:a7:1f:
c6:36:cc:7c:03:c6:0f:02:44:8a:d5:ae:f1:20:55:6b:4f:52:
47:40:b4:cc:25:ec:c2:e7:ce:72:09:42:0a:e3:d9:23:47:25:
08:74:f1:50:73:07:da:d4:15:57:b0:c4:02:fc:2d:52:d8:b0:
ab:35:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:41 2026 by rpki-client