
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
File: l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft (raw, json)
Hash identifier: zaWDk5i0z76FYSXoGKcmd7vhDyi2c/qWxEY7UOkWPEs=
Subject key identifier: B8:17:12:A0:B0:22:0F:7C:AB:C1:19:DA:21:D9:92:76:EB:91:3A:FD
Authority key identifier: 97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8
Certificate issuer: /CN=A91161EB/serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
Manifest number: 56
Signing time: Fri 25 Sep 2026 08:18:57 +0000
Manifest this update: Fri 25 Sep 2026 08:18:57 +0000
Manifest next update: Fri 02 Oct 2026 08:18:57 +0000
Files and hashes: 1: l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl (hash: n6/lZyoFlX35IW14inFsx0xqGl7Rtxzmb1bS50oxrPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl
rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91161EB, serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
Validity
Not Before: Sep 25 08:18:57 2026 GMT
Not After : Oct 2 08:18:57 2026 GMT
Subject: CN=6ab62e71-9fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:71:54:ea:e3:0d:92:54:6c:8a:eb:20:32:ff:
e2:06:4a:1f:14:5e:2f:e4:08:10:07:f2:25:3e:88:
1e:f8:b5:ba:1c:e3:ce:3d:fe:c6:d9:7d:b0:ac:29:
9c:6e:a7:e4:5a:9d:8b:a6:25:96:1c:18:82:fc:5e:
ae:1a:9a:52:fa:11:7f:50:33:c8:5f:bc:64:91:ea:
80:2e:cc:7e:20:8c:86:fa:b4:f2:c8:2c:87:e2:32:
c5:20:c4:78:e1:74:21:e3:46:bf:7d:ad:82:25:6b:
ac:a5:df:7c:26:e0:92:45:20:31:40:32:94:20:f2:
66:a9:d5:f2:e3:48:28:c8:e8:e7:8e:67:3d:e2:d5:
43:b8:0b:5a:33:07:bb:ae:66:08:2e:c6:dc:e9:fe:
1f:9c:7c:51:44:a9:aa:2f:bc:75:a2:e6:f2:be:a1:
47:f1:90:b7:d9:e3:86:5a:5d:4a:94:78:74:cc:b6:
dc:91:f2:e5:7c:61:53:0c:4e:1a:78:b8:a8:96:e5:
02:5e:a7:a8:5d:fe:21:ca:a9:8f:6d:e8:7a:26:d4:
b3:6a:1f:af:ad:45:96:32:37:79:d0:b6:ec:fd:1f:
a8:5c:c9:d8:75:41:a2:70:df:80:9f:52:3a:db:15:
68:6f:3c:2f:13:ae:45:f7:58:8d:71:2a:76:e0:81:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:12:A0:B0:22:0F:7C:AB:C1:19:DA:21:D9:92:76:EB:91:3A:FD
X509v3 Authority Key Identifier:
keyid:97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cc:cc:72:02:5a:cb:db:af:0b:2d:cf:82:8b:20:5f:92:9e:
83:e4:bb:6d:9b:46:a7:b5:54:73:fe:e1:59:30:56:cd:e2:11:
61:3b:12:8b:67:a3:e5:90:e0:82:d7:13:94:2a:e8:ed:2b:6b:
0d:f6:70:ee:6d:27:be:0b:ed:c9:5f:3c:3c:97:a1:b7:8a:78:
13:d4:63:21:e8:1e:3d:b7:5e:4c:6b:2e:d3:68:62:72:d1:fc:
cb:ca:17:97:55:6c:87:de:3d:32:5e:0f:85:9a:07:2e:93:ca:
3a:56:0c:3b:1b:eb:cd:b7:e1:b4:a1:22:06:ed:6d:b4:9c:46:
4c:06:7a:21:9e:55:a0:d1:09:c6:44:51:c1:a6:44:49:2f:69:
84:af:23:c1:82:42:c5:b3:64:a5:ec:d2:8b:c3:13:d8:34:52:
1e:96:b8:89:03:7e:d7:6e:87:2a:85:42:f9:e1:2f:ad:e2:28:
78:84:af:ce:c3:09:f0:51:6e:73:c8:be:f4:b5:47:2d:98:86:
34:d8:b9:6b:08:d4:d8:ed:5b:ef:08:27:f8:30:37:45:7e:90:
cf:bc:92:c8:f3:d8:76:99:70:56:6e:4b:6f:fa:d7:e9:fd:24:
44:9d:47:7f:ca:68:ec:39:7b:ba:df:57:a3:1e:2a:2c:5b:b1:
f5:a6:4a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:31:22 2026 by rpki-client