
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json)
Hash identifier: bCMSi5kJ33XexPig5OnfOCfCrHAxaaMCYhD7+v+bh9Q=
Subject key identifier: B0:80:9D:78:BA:BA:FA:8B:E4:58:B1:2E:E0:C9:64:0B:BE:54:07:D9
Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96
Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
Certificate serial: 0805
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
Manifest number: 0805
Signing time: Mon 22 Jun 2026 21:14:09 +0000
Manifest this update: Mon 22 Jun 2026 21:14:09 +0000
Manifest next update: Mon 29 Jun 2026 21:14:09 +0000
Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: fXPDcBQ/HsKzFVxmIW4GdqwhtER4HomMBay5KpQFj5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl
rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 21:14:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
Validity
Not Before: Jun 22 21:14:09 2026 GMT
Not After : Jun 29 21:14:09 2026 GMT
Subject: CN=6a39a5a1-0e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:3d:22:ee:43:28:77:b7:d0:3a:8d:22:fe:
b1:3c:13:b5:0b:02:13:e5:a0:3c:9d:3e:84:1e:26:
a1:2f:1b:e0:40:f2:1d:3a:37:0c:f3:65:dc:09:a8:
bd:c1:b6:de:92:a8:c6:1a:fb:7f:38:a8:9f:b5:bb:
0f:b8:5b:86:d0:95:69:6c:2f:2a:93:11:53:c6:ae:
39:6b:cc:06:65:97:1b:8a:c2:f1:2f:5e:28:b1:b3:
0c:91:da:53:89:cf:31:b1:64:9a:fc:3f:c0:bb:7a:
80:e8:49:24:8e:09:bc:a2:6a:60:15:a1:8d:aa:15:
f7:2c:2a:dc:2d:b8:ea:4d:4f:b6:18:46:4d:97:eb:
37:00:8d:41:23:a2:c4:9e:ad:ba:7b:67:63:ef:e2:
1e:a8:ad:46:88:01:f1:80:e8:d4:11:ad:f8:57:73:
c0:ec:fa:4b:0c:09:8d:2d:5f:c8:d0:7f:b0:00:3f:
a5:77:b3:17:41:03:ab:11:6d:46:a4:72:7d:97:2a:
71:1c:60:82:ea:33:f2:5f:5c:0b:de:a9:31:0e:d0:
0d:5a:87:2f:bc:f1:90:c3:27:37:89:0e:17:db:3a:
50:82:3b:e0:29:98:dd:a2:21:b6:e1:e6:15:c3:5b:
18:a4:7a:2f:76:af:96:e7:18:9e:66:d0:b1:e3:eb:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:80:9D:78:BA:BA:FA:8B:E4:58:B1:2E:E0:C9:64:0B:BE:54:07:D9
X509v3 Authority Key Identifier:
keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:19:81:e5:14:d2:38:28:2c:ac:01:7f:0f:55:3e:93:52:
2b:83:b1:a2:ec:b2:7f:64:d2:0f:43:30:d6:fe:c6:e3:13:e9:
f3:57:8b:dc:17:bf:e8:c4:cb:8f:a3:67:6e:c9:25:cd:82:07:
2b:95:67:24:09:79:13:a9:2f:e4:e0:f0:8f:c9:60:72:6a:54:
a8:fa:49:e2:f8:43:01:f0:b4:6e:b7:25:f0:28:75:59:9e:ba:
a7:c9:42:8b:7b:28:3a:9d:14:3b:b6:72:88:dc:36:be:d0:b2:
3c:00:a1:2d:f3:0d:d5:eb:69:aa:49:68:df:9e:d5:64:f4:ba:
7d:c4:60:a1:e9:5c:fe:59:08:b0:0c:c6:72:34:a7:97:0b:a7:
93:61:59:6d:bd:98:3c:18:9b:cf:06:31:85:b7:74:26:d1:77:
6b:76:33:b5:71:b0:c4:e0:50:5d:1c:60:73:47:61:86:77:98:
40:55:c1:f2:5b:2f:49:dc:63:ad:77:9d:d2:04:3d:19:87:73:
9b:c8:17:a6:82:6a:ec:92:8a:cb:28:49:59:a0:4d:63:a1:07:
0a:6b:bc:f5:3b:9d:d2:64:df:e3:ea:36:f1:90:89:ea:cd:1b:
6d:2a:25:ab:b7:eb:3b:7d:06:03:94:7b:79:af:b8:d6:6f:ce:
15:6c:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:55 2026 by rpki-client