
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json)
Hash identifier: AKy/YSmx/ZOLmFXzUbiaR/07QsTeEV9CTLlOdu9Kr9Y=
Subject key identifier: A6:66:24:F1:79:22:30:51:6B:59:20:DF:A7:E7:81:B2:38:D6:E2:8A
Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Certificate serial: 0CED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
Manifest number: 0CE4
Signing time: Sat 04 Apr 2026 18:06:36 +0000
Manifest this update: Sat 04 Apr 2026 18:06:36 +0000
Manifest next update: Sat 11 Apr 2026 18:06:36 +0000
Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: ktkPRLBRLicA8TxkLguFDru7X+frl6+QTxPwTItYq+Y=)
2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3309 (0xced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Validity
Not Before: Apr 4 18:06:36 2026 GMT
Not After : Apr 11 18:06:36 2026 GMT
Subject: CN=69d1532c-232a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:32:2a:8d:43:b5:1d:ab:2f:32:e1:c7:d1:
fa:4d:65:72:9c:8f:20:03:70:03:c2:c0:3b:61:a1:
00:81:77:a0:40:52:49:c2:12:0c:c4:a4:14:0a:a6:
35:a9:4d:f4:8e:35:1b:21:06:87:4c:85:40:73:1d:
80:ca:1d:27:a3:79:9f:05:04:dd:f5:51:e3:b6:89:
4f:f7:24:7f:93:ba:04:c8:28:ec:be:8b:c2:4f:de:
19:d3:bb:3d:92:b0:c5:de:34:df:9d:04:55:fe:8b:
00:54:d9:7c:a0:89:b2:50:2e:6e:b4:3b:3f:dd:25:
bd:77:82:90:a5:03:ca:ef:5c:61:86:9d:b7:5c:2e:
57:89:1c:16:82:c0:0a:e5:bc:d3:ff:4c:a0:94:13:
d2:f8:4b:6d:cb:66:64:f3:3a:ff:5a:49:6f:0b:97:
70:21:ff:e4:cb:b1:f5:66:09:3f:e8:fa:11:39:c7:
b0:21:45:9f:2d:08:d2:38:18:ac:6b:4d:95:27:76:
d4:61:51:cc:35:89:fe:4f:0a:61:f9:fb:55:6a:24:
a1:5b:0f:10:dc:6c:85:88:82:f6:17:2b:b0:c1:c8:
de:41:28:27:e0:05:2e:10:92:5d:f0:0b:4a:23:7d:
45:08:4f:df:2e:17:1d:eb:33:d9:0f:49:36:39:55:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:66:24:F1:79:22:30:51:6B:59:20:DF:A7:E7:81:B2:38:D6:E2:8A
X509v3 Authority Key Identifier:
keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:0c:8c:5d:b5:0c:39:28:6f:d2:dc:8e:bf:3d:a4:c4:ff:3d:
5e:f3:aa:ba:fe:59:30:aa:23:31:1b:49:be:9c:bf:09:76:74:
42:5c:01:d0:cd:9e:8d:fd:a0:10:f1:c2:49:6e:89:41:d1:66:
bc:07:8e:84:26:ee:f4:46:38:32:27:ca:13:02:12:e8:a5:36:
3b:db:ef:c5:86:c3:63:1f:61:c8:ec:41:ec:05:83:c7:01:f7:
5a:8e:08:f4:f4:f8:3e:b3:60:6c:e7:37:70:fd:95:f4:12:a9:
b8:eb:6a:d0:8a:88:3b:c7:22:0a:9d:65:bf:cd:1d:35:24:df:
b2:82:56:13:99:40:91:8c:13:da:34:d2:08:ee:6e:3a:a8:cd:
fa:31:0b:04:1c:44:ed:3f:4d:75:43:8f:73:3b:73:58:3e:72:
f1:22:05:a8:f7:45:ee:f8:fa:f5:4f:cd:ee:26:61:37:6d:f9:
5b:40:d4:66:c1:f3:c4:fd:dc:c0:03:9e:28:32:b1:eb:df:2d:
28:96:3d:be:5b:2f:5a:65:e2:e7:31:a5:5a:ac:00:e3:22:4f:
25:30:13:c8:4e:ba:42:24:44:91:96:aa:8f:dc:71:4a:3a:39:
2e:28:41:61:3a:8e:da:20:59:9b:2f:d4:65:17:d0:76:7a:59:
f4:40:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:16 2026 by rpki-client