
$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json)
Hash identifier: HBFQhMKdf1EaWq92MPcwwmIAogd0+9ea0IVccCBoEmo=
Subject key identifier: 11:C3:7E:C1:5A:2F:2D:00:65:DE:19:B5:C9:BB:7F:DF:D1:EC:B4:E9
Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Certificate serial: 04A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
Manifest number: 04A2
Signing time: Thu 26 Mar 2026 23:44:30 +0000
Manifest this update: Thu 26 Mar 2026 23:44:29 +0000
Manifest next update: Thu 02 Apr 2026 23:44:29 +0000
Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: N98lUenVdJYBExAzfoXjv8TAMdzOlNqKgnDsaQHS/fM=)
2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: gIEs5PsSbdv2kd7fXZi9XdqKRPbKMGlmjiL9BhYFLAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Validity
Not Before: Mar 26 23:44:29 2026 GMT
Not After : Apr 2 23:44:29 2026 GMT
Subject: CN=69c5c4de-8e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:e5:1d:ae:34:66:0f:6f:6e:dd:64:a8:0c:
f3:15:40:f3:6a:6b:46:86:ce:34:16:ae:23:b9:a2:
65:cf:65:5e:24:56:01:b2:8e:06:7f:d8:67:27:2a:
4e:fd:ea:1d:03:70:ee:14:15:55:33:0d:d0:05:4c:
51:1c:6d:09:30:d1:07:02:9e:25:36:44:b3:b6:35:
a5:29:3b:e2:3b:8a:e2:7d:21:e9:88:7f:6f:3e:ac:
65:db:ad:43:63:99:10:c1:b9:66:7a:5a:38:07:07:
74:a6:50:18:3f:e8:39:21:29:b9:f4:47:97:d3:fe:
02:f1:71:5c:1f:c7:3f:ab:36:9d:36:16:44:89:e8:
dd:22:36:21:5f:15:09:60:2d:21:7a:bf:ac:d4:81:
28:38:44:94:17:1c:01:54:c3:8f:8c:e8:15:a6:76:
41:92:e7:76:4f:e4:6b:22:ea:47:a3:74:31:43:6d:
4e:2f:87:38:7d:06:9e:62:f8:7e:68:ba:7c:6f:2a:
7f:1b:35:65:ef:5b:a1:9f:40:7e:dc:67:6e:8f:f2:
4b:2c:ca:a4:6a:c0:e5:88:38:c3:9b:65:37:8f:62:
d5:e6:d3:82:56:03:c9:a2:27:fc:8b:93:85:5c:e0:
cd:2c:64:40:59:61:48:3f:45:eb:30:fb:e5:8b:4f:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:7E:C1:5A:2F:2D:00:65:DE:19:B5:C9:BB:7F:DF:D1:EC:B4:E9
X509v3 Authority Key Identifier:
keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:21:35:49:fe:42:1a:b2:c4:85:ad:02:dc:9c:2f:00:81:0f:
35:aa:cf:c0:e3:5e:cd:e7:53:f3:3b:d4:9e:5a:86:37:67:6d:
47:d4:f4:1e:95:cc:35:16:73:18:49:2e:e0:d5:c5:6b:b5:e0:
ff:de:8d:6d:80:75:aa:d5:04:0f:22:b0:bc:ea:0b:06:51:ff:
ce:4b:d2:fe:7d:dd:55:83:1b:5b:5d:60:20:e6:4c:9e:09:1d:
59:a8:46:6b:d8:68:b2:b0:ec:15:44:fc:3c:37:0e:63:06:73:
42:1c:1c:d5:22:dc:f9:e9:9d:26:74:89:ee:a4:cf:ee:5c:09:
c9:58:84:29:69:28:21:8f:1c:39:63:2f:63:73:93:e9:92:18:
a6:39:7b:fd:45:7b:bf:b2:c3:2e:d6:84:94:1a:1f:5a:e4:cd:
e1:10:38:84:71:5a:9b:b3:64:db:20:9a:fa:aa:f7:25:d2:30:
e7:79:ef:ea:65:82:e1:91:2c:39:bb:15:55:b3:fa:9b:2a:04:
3a:9e:ca:0c:53:63:25:45:48:38:17:f9:c5:d4:7b:76:4e:9e:
dc:84:5d:c7:93:ca:f5:f1:f1:8e:f2:86:b1:8c:9f:59:13:4a:
8c:86:7b:55:6c:e3:d1:63:2e:8c:88:91:29:33:4f:9e:ca:d9:
e7:b4:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:56 2026 by rpki-client