
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier: BcmqqfWIZaRsgPp4oU1wTmU7W4kmnuHSVGi5Age5t3g=
Subject key identifier: 05:C8:BF:65:E6:B9:D9:7C:B8:6D:37:7A:6D:D7:C1:DB:04:DD:58:A8
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial: 040A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number: 03FC
Signing time: Sat 07 Mar 2026 00:09:23 +0000
Manifest this update: Sat 07 Mar 2026 00:09:23 +0000
Manifest next update: Sat 14 Mar 2026 00:09:23 +0000
Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: uH57mXa7bx3pu26ByD2jQzHzKDFT5kbwZ4f4waEP+gE=)
2: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: +eVu6aJGYqpyml/eLiLIE2eDY1fRJJpwPH8tGhdgBEM=)
3: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 5Q805Ctiz/A7dYa4MT9/HeE0VGVoYx9KlmeoT0i5WY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 00:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Validity
Not Before: Mar 7 00:09:23 2026 GMT
Not After : Mar 14 00:09:23 2026 GMT
Subject: CN=69ab6cb3-bf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:2f:ad:35:be:68:8b:41:fd:e9:73:3d:cc:
35:28:51:cb:4a:85:d2:12:cf:54:c2:5e:a1:1e:01:
df:54:bf:27:8d:b1:45:b1:d1:32:b3:9f:eb:8b:d7:
d4:e2:1c:5e:89:9b:90:c8:8c:b4:6f:2e:68:f1:22:
a5:20:54:6c:68:1c:98:48:67:d0:52:f9:03:0f:ab:
ec:ef:46:b3:64:f3:a9:12:47:c8:70:df:66:6e:9a:
0a:89:c6:6a:22:67:96:76:98:11:33:c7:5a:7c:43:
62:4e:1e:ce:14:0e:48:b7:37:9a:d1:02:58:00:0b:
31:64:0e:c9:02:40:b0:68:2a:c3:11:1e:ca:c2:c9:
bd:9c:fb:37:6b:c4:bc:15:4a:4e:b7:d2:bb:a7:7f:
47:a5:51:a0:06:a4:c1:c7:e4:ca:f1:2f:4d:44:38:
62:6e:39:76:71:9a:1f:ea:ed:12:a5:c8:3c:b6:8b:
18:fb:c0:18:68:54:6d:30:c5:77:c9:35:5a:4c:22:
28:4d:3d:d5:4a:30:cf:f9:51:2d:09:cb:14:3a:a8:
3d:55:4f:e9:c2:05:ec:a6:28:16:a1:fc:1e:75:4c:
29:db:4e:50:35:68:aa:ea:e1:c6:37:ba:88:12:b8:
f8:0e:aa:7c:ba:b1:61:ea:d7:58:1c:de:86:4b:79:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C8:BF:65:E6:B9:D9:7C:B8:6D:37:7A:6D:D7:C1:DB:04:DD:58:A8
X509v3 Authority Key Identifier:
keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:c3:73:39:8a:84:c4:16:6f:c9:ca:4b:a7:1b:fb:50:e2:f0:
1d:f2:a7:13:78:12:40:7d:64:f1:c3:68:64:96:85:be:6c:71:
69:25:1a:2f:a7:8d:68:84:87:c3:14:a3:7d:5f:85:0f:ce:79:
a2:3b:ac:a9:03:39:62:87:28:4f:92:20:42:3a:da:7a:aa:59:
3e:a9:75:da:b1:ff:ee:e9:6d:61:7e:90:ef:16:f4:48:bc:52:
46:92:95:20:6c:aa:0e:2b:d5:4d:f5:61:c4:ff:57:e8:41:bc:
42:5d:da:40:ff:fe:e1:97:98:c2:ff:9e:a3:ce:58:a7:ac:46:
3e:cf:a4:42:30:d8:b4:9e:87:94:88:1d:77:62:f8:db:14:22:
e6:78:67:e9:41:97:1f:43:9e:51:b8:56:eb:fa:03:b2:71:2f:
9f:28:9a:95:cb:99:74:94:61:1a:ca:72:d1:a3:e6:2b:7c:a0:
ba:e6:d5:f5:55:bf:6b:b1:72:a1:07:89:d4:0a:e1:50:04:73:
bf:98:7a:b2:e6:a2:78:f9:86:65:67:d7:9a:7e:6a:7a:07:89:
cd:f6:3f:c8:60:f4:02:9b:b3:87:41:61:3f:8f:ed:5d:73:2f:
c0:79:7d:f7:f9:bb:09:3a:32:64:4f:bb:28:21:b2:fd:40:80:
30:ed:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:53:50 2026 by rpki-client