
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json)
Hash identifier: aKItfO3X57o/9kp/O9g+GT9Y4PnaLgJEdiJgdikk1RA=
Subject key identifier: D8:D5:E6:92:20:0B:9C:92:0E:B7:D7:A0:5C:12:68:84:6E:E2:8B:E5
Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA
Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
Certificate serial: 0C48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
Manifest number: 0C2F
Signing time: Thu 24 Sep 2026 18:44:25 +0000
Manifest this update: Thu 24 Sep 2026 18:44:24 +0000
Manifest next update: Thu 01 Oct 2026 18:44:24 +0000
Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: KgVd/oxUE/njRdqf3C3EqFlxsepnzvbMnonCoyWhVfA=)
2: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: MCISxnfnNlB/wFJ//N3jml3NUfgJKmd1tRtdTSF+Xts=)
3: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: NAxyiAU8glno68cNHqspT7JDCLwrA8VgpOOy/tuTa5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl
rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3144 (0xc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
Validity
Not Before: Sep 24 18:44:24 2026 GMT
Not After : Oct 1 18:44:24 2026 GMT
Subject: CN=6ab56f89-a10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:45:23:a0:69:46:17:94:d9:25:40:3e:88:
cf:44:61:66:72:8b:a5:b5:ef:b7:18:98:58:b8:f6:
0c:4f:51:ca:2e:87:74:46:c0:16:b2:d2:8d:67:e1:
eb:2d:d4:f1:7c:3b:4b:cc:e3:c0:fb:65:b2:46:2a:
0e:51:7d:d2:b6:55:0e:c6:31:f7:8c:3f:fd:d1:6b:
28:b2:fb:54:f1:d4:c9:12:9f:08:27:4f:d1:b1:e6:
8f:d8:e5:e1:4e:06:0b:c6:56:d8:20:74:06:75:be:
fe:7e:27:6e:6a:ec:11:59:9d:35:b1:d6:fd:63:86:
d9:72:71:23:79:af:6e:cc:62:9d:ce:95:a6:a3:9d:
01:7d:36:9d:ce:23:d6:f1:57:77:f9:1e:d7:a6:19:
e0:c3:2d:1c:5c:4b:b7:f5:0d:4d:59:42:87:23:40:
16:00:77:f6:a3:a1:8e:55:4a:79:be:48:79:0f:b4:
5d:64:27:6a:bc:17:26:d2:19:48:eb:56:ff:cd:ed:
9e:1d:f0:40:63:65:70:65:42:b8:e3:24:e9:05:26:
99:ba:65:9b:dc:d7:eb:33:82:e1:33:65:6a:7c:ba:
00:96:eb:41:de:73:7e:5d:46:a0:0f:7e:e0:87:fd:
d7:e8:56:fe:58:24:ea:4f:ff:40:a1:2c:59:c4:12:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:E6:92:20:0B:9C:92:0E:B7:D7:A0:5C:12:68:84:6E:E2:8B:E5
X509v3 Authority Key Identifier:
keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:00:5b:8d:db:30:0f:29:3c:1f:66:eb:98:6d:d8:67:73:5d:
5a:c3:21:ed:5f:4e:19:a7:36:9f:0e:c3:e8:d5:f3:48:82:82:
8f:39:11:04:a2:ff:26:d9:73:ab:8d:a1:66:91:1b:60:83:54:
92:f9:1d:27:5b:7f:db:84:61:cc:3c:52:20:95:93:f8:90:67:
9f:55:b2:5f:37:bf:64:1c:50:3d:2d:e0:c4:64:d3:66:07:65:
0b:cf:78:31:e2:e7:bd:c5:5b:9a:b8:58:69:51:96:42:c1:a5:
d1:5d:60:4e:88:46:df:aa:dc:91:29:d1:9f:1d:d9:cc:12:d5:
c1:19:79:81:64:73:a1:60:a9:5c:c1:52:68:86:c8:74:60:2a:
c8:98:7e:8d:47:c2:e0:0e:e1:9f:e8:02:ed:36:d3:cb:47:f4:
33:08:d8:92:25:de:5a:9c:f6:4c:28:d4:6a:e7:4e:63:27:03:
22:60:f6:54:94:38:0b:25:b7:0e:66:95:d7:f1:dd:62:5d:e7:
aa:64:a5:68:06:f9:42:44:bb:c5:c2:b3:f0:a9:be:2f:f2:bb:
3e:23:e4:5a:3f:b6:f1:1b:46:6e:15:b3:fe:e8:60:0a:64:1e:
13:83:6b:e1:c4:f1:69:ee:33:05:4f:f1:35:b7:36:70:f7:00:
45:a1:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:17:17 2026 by rpki-client