
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier: qV7khVXGvWylmLipgLw0xo+J76g1d3D8W22HQXLs0/M=
Subject key identifier: 73:CD:1C:DC:2F:DA:6D:80:C2:B5:60:F0:8D:42:15:35:2B:BF:B4:9A
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number: 0111
Signing time: Sun 05 Apr 2026 05:22:26 +0000
Manifest this update: Sun 05 Apr 2026 05:22:25 +0000
Manifest next update: Sun 12 Apr 2026 05:22:25 +0000
Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: POAhVVEya8CGH0WwE5NkPFtY6w6h9H/fV8kC08Z2+Z0=)
2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: 0xJgLLQMgNeeyXMGKZCWdqUjam0KGjviyUJK/ppp7i8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Validity
Not Before: Apr 5 05:22:25 2026 GMT
Not After : Apr 12 05:22:25 2026 GMT
Subject: CN=69d1f191-61b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:0e:78:b6:6c:17:9f:a3:26:d1:01:73:53:
a5:02:d4:26:f7:fb:94:c5:53:6d:64:28:8c:72:67:
09:1f:a3:7b:45:26:51:9f:fc:43:81:54:dd:4e:98:
37:81:6b:4e:1f:c8:55:3d:f1:bf:a7:b6:48:0f:ba:
ff:1f:18:67:9f:4e:50:ce:49:f4:a7:00:8d:e9:f3:
92:b0:a1:b3:5d:38:f8:e3:24:8c:91:0f:bd:5c:47:
7f:e0:3f:de:42:17:66:d0:ca:aa:e6:84:45:18:3d:
0b:f9:05:dd:41:8b:db:04:94:77:97:d2:08:74:e6:
d6:c0:a9:13:8d:98:79:27:9d:f6:f7:80:d8:e7:70:
1c:83:95:7d:61:c4:9e:b1:94:c3:d8:89:24:e8:d7:
88:68:1d:cf:03:46:48:2b:07:37:45:2a:f1:75:20:
93:4e:df:03:c2:ea:68:5c:d5:3c:56:3c:85:3c:68:
ee:7a:45:e6:0a:a7:65:41:a8:f5:16:f2:13:33:0e:
d1:c3:79:f0:88:11:7a:6c:ee:0a:99:16:cb:c9:fe:
cc:20:d4:18:b6:1f:97:c8:35:ba:94:00:98:35:94:
0a:5c:dc:b4:c5:f4:a6:78:43:c8:05:b9:17:13:48:
b2:d6:b4:7f:8d:11:78:0c:98:5b:63:d4:cc:50:e9:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CD:1C:DC:2F:DA:6D:80:C2:B5:60:F0:8D:42:15:35:2B:BF:B4:9A
X509v3 Authority Key Identifier:
keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e0:2b:7f:85:3c:12:45:f4:ed:21:7e:c9:92:f6:e9:97:71:
c8:93:52:f3:75:82:34:12:27:2d:3c:77:32:c7:24:f8:6f:aa:
57:ff:18:29:2d:f6:dd:9e:df:a3:5b:3d:f5:b9:c3:79:0f:ed:
eb:41:6c:f5:23:00:e4:88:0c:29:f3:4d:10:8e:97:82:20:5c:
bf:34:02:19:5e:a4:24:a8:b5:1b:7d:5e:b9:bc:3d:e3:05:d4:
8e:bd:12:a4:b4:3f:39:83:7e:4b:80:b6:b1:d0:64:14:ed:b9:
48:47:52:0e:27:5d:a3:e8:b3:0a:be:da:0b:9f:56:ba:bb:1a:
42:64:fe:a9:e5:c3:af:17:0a:82:d1:ef:79:e9:1f:ed:ed:bf:
07:32:b1:25:f3:c1:24:0a:06:0b:a3:97:11:12:fd:53:fa:11:
7a:b6:a1:ae:bb:b9:f4:52:26:40:a5:3e:27:f3:89:75:ba:de:
6b:90:5f:b5:6b:e0:52:13:1b:c0:f0:f3:c0:3c:d7:37:b1:f3:
81:56:e8:8f:72:a9:50:85:d5:5a:bc:64:95:39:84:48:e7:b2:
e9:b4:32:d2:35:cd:dd:60:e9:ce:74:0c:96:eb:3e:57:8e:35:
86:dd:18:ac:c4:8b:5f:c9:be:e9:e8:b7:19:c5:3e:ea:29:53:
46:3f:17:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:04 2026 by rpki-client