
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json)
Hash identifier: mzSt7vVBmnw52wqvRmfvFKeWp2JfuiW010ZfZQEM1qI=
Subject key identifier: 0C:6A:ED:FC:0C:CA:02:0D:3E:5E:C2:8C:39:02:EB:40:A5:E7:F6:EB
Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C
Certificate serial: 01F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
Manifest number: 01F0
Signing time: Tue 24 Mar 2026 21:17:46 +0000
Manifest this update: Tue 24 Mar 2026 21:17:45 +0000
Manifest next update: Tue 31 Mar 2026 21:17:45 +0000
Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: GiOO9UBbFSRvQDyuBj8PT/B0IGN1FEtNpAxHdPXAiug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl
rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C
Validity
Not Before: Mar 24 21:17:45 2026 GMT
Not After : Mar 31 21:17:45 2026 GMT
Subject: CN=69c2ff79-2a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:1f:d1:0c:05:b6:c5:79:e7:d7:a4:e1:f9:
72:ab:9a:1b:b9:23:74:64:ca:77:c4:ce:09:6d:7b:
35:ea:b8:ea:2a:17:95:f9:12:9a:6c:1a:74:17:64:
d9:c0:0c:e0:38:3f:d9:03:a8:37:c7:e9:8b:c6:37:
af:22:ef:84:08:87:4e:fe:a8:1b:c4:2a:96:76:e8:
30:28:51:58:93:a8:5b:2d:07:5a:c2:4d:46:d1:04:
a5:7e:f7:da:35:8d:f7:b8:b1:18:7a:80:b6:c9:49:
15:4b:52:32:e5:4d:43:82:1e:27:8a:27:da:0e:70:
66:c7:a4:3a:e9:61:83:f6:31:5a:40:af:70:9d:54:
15:43:e0:9d:3e:7f:8c:08:6a:88:ad:04:a5:3d:96:
25:1c:7b:00:55:5c:b2:ba:1d:ad:6b:92:60:12:19:
b5:9e:7c:ff:a5:8d:6a:a4:96:fb:c5:61:8b:be:59:
b9:29:f8:2d:38:9a:4e:3d:78:fb:1d:e7:48:46:61:
5b:7a:bd:6a:4b:52:2f:53:ee:6d:61:63:52:a0:78:
0f:3e:02:62:fd:10:e5:3c:3a:34:02:ba:5e:ea:f4:
f8:13:f9:28:04:7d:98:05:76:67:e0:1e:9d:57:9d:
9b:3a:a9:6d:87:f0:7f:f2:be:2b:39:1c:32:fe:05:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6A:ED:FC:0C:CA:02:0D:3E:5E:C2:8C:39:02:EB:40:A5:E7:F6:EB
X509v3 Authority Key Identifier:
keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bc:5a:ab:76:22:a7:3a:c8:a8:ab:8b:36:d4:ff:da:de:48:
62:f8:63:3f:6e:b1:80:dd:75:b3:d7:c2:1f:67:29:33:27:15:
35:39:6f:6c:cf:4d:80:cc:5b:b9:74:b0:63:4b:d5:5b:73:4a:
1c:7a:e0:4f:1c:90:2d:04:80:a1:96:15:30:e5:76:be:cf:3c:
0a:17:71:89:ab:c1:8f:b0:7e:98:e1:dd:d0:9e:b1:32:2b:0f:
4b:27:68:39:c9:b1:e7:ca:b2:33:4c:9c:81:2b:b9:cb:c2:48:
77:38:09:87:79:4f:a0:bb:fb:e5:b9:fb:b1:70:a7:ea:f5:3b:
54:6c:5c:0e:8f:16:a7:5a:eb:bf:7c:b3:af:64:bf:5c:92:fb:
aa:ac:8d:4c:4f:4d:04:79:44:6a:52:3e:57:c7:b9:64:bc:ca:
2c:4d:eb:95:f0:07:f6:3f:63:e1:fd:e2:15:05:e1:70:6a:80:
a3:2d:01:9e:07:f1:b0:fc:3e:c6:10:73:79:87:0a:15:b8:19:
a1:91:52:b8:15:75:9a:91:34:4d:e6:e4:ae:ee:3b:29:03:fa:
60:cb:e5:8e:a5:23:19:02:52:c4:e6:1c:21:bf:e1:f3:bc:2b:
9b:35:d7:72:15:4e:4a:c0:0a:a8:94:78:7c:fa:fe:0f:e6:64:
16:d8:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:57 2026 by rpki-client