
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
File: lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json)
Hash identifier: AbRPIRROS7CDBGEWdzhkHqBzd5pYmwEb8VzF7n1Cutk=
Subject key identifier: 73:44:CA:B1:07:D3:FE:10:0D:5E:F7:61:18:CB:30:79:34:0C:18:3A
Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C
Certificate issuer: /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
Certificate serial: 182E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
Manifest number: 20C8
Signing time: Tue 24 Mar 2026 16:26:05 +0000
Manifest this update: Tue 24 Mar 2026 16:26:05 +0000
Manifest next update: Tue 31 Mar 2026 16:26:05 +0000
Files and hashes: 1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: R9Vh8SEkHj21deCdKDJhheTSF7ZTXsP4zK/xU2e3+AU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl
rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6190 (0x182e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582D9, serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
Validity
Not Before: Mar 24 16:26:05 2026 GMT
Not After : Mar 31 16:26:05 2026 GMT
Subject: CN=69c2bb1d-9edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:66:dc:c6:8c:d2:f1:45:29:08:b1:7d:7f:
e6:9d:0b:cf:88:36:a4:7a:de:c8:94:17:ab:03:21:
99:c1:09:91:cd:1b:61:6f:eb:e0:17:f4:83:58:20:
73:83:38:6a:ad:60:cf:81:b8:83:80:9c:13:52:ae:
42:8d:ac:8c:e6:b3:70:57:ee:3f:07:88:7d:54:d5:
c0:e5:d3:99:25:05:14:79:91:ea:46:ca:5f:7d:2e:
b1:10:32:40:91:e1:66:75:c6:9f:59:38:cd:bf:15:
0e:c3:1a:0e:4b:98:86:de:da:4b:4f:ec:6c:06:e8:
c2:0e:7b:37:8b:2c:71:46:2e:07:41:21:2a:ca:5a:
d1:36:a2:36:1d:ad:bd:c9:b4:36:e7:07:3d:b3:88:
97:93:7e:1c:c1:4b:d3:86:70:04:55:5e:7b:8f:a9:
2b:b2:94:29:0d:9c:1b:b5:47:cf:fa:c6:3f:ab:a6:
ec:d6:bd:d6:e3:71:6e:9b:f6:83:6d:8f:3c:0e:4a:
4c:58:28:bf:2b:18:7f:32:94:99:97:b1:99:0f:5d:
9f:13:f8:e0:86:08:1a:54:2d:eb:3c:64:45:ad:47:
fc:fb:b5:27:9c:3c:c5:d5:e1:2a:f9:53:36:7f:a7:
94:ac:59:05:61:ad:d8:c1:71:c8:63:e8:3f:58:a8:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:44:CA:B1:07:D3:FE:10:0D:5E:F7:61:18:CB:30:79:34:0C:18:3A
X509v3 Authority Key Identifier:
keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3e:cb:c7:a3:8b:01:e4:f6:cb:e1:5c:28:86:13:14:3e:f5:
39:13:91:51:47:ed:14:29:eb:c9:e3:1b:75:91:60:fa:53:22:
5a:a9:31:09:71:38:9e:c2:a1:9d:67:49:be:d6:f8:3b:8c:bd:
ba:6d:a1:02:1a:ae:ab:28:8d:94:b2:9e:31:0f:11:b5:6c:1b:
7d:fa:24:89:2d:a9:e5:ff:59:2d:cc:57:3b:d1:4f:0a:ff:02:
61:20:cb:a0:68:35:4b:11:0a:39:9e:53:a8:ef:5a:b3:00:a6:
18:c3:22:c2:62:f0:7c:42:37:77:e2:54:a1:dc:1c:29:42:2c:
7d:61:72:69:bf:99:e5:7e:b7:c2:bb:96:24:e8:ac:d1:c4:12:
d7:17:df:c8:28:8f:07:1c:3a:6c:37:24:a4:00:2c:f5:7e:01:
91:98:24:48:5f:45:f4:ad:4f:00:f7:60:0b:ba:1e:4a:53:7c:
22:42:f0:4f:78:48:3b:fe:b9:d8:9f:6f:c1:d1:96:30:71:4d:
aa:bc:35:c7:79:77:2a:a5:e0:ce:86:00:b2:2c:ae:a4:82:70:
bd:20:b3:4b:0e:6b:21:50:2d:a6:c6:1b:77:a5:44:2e:d6:29:
a7:e2:ab:78:82:30:17:c2:63:58:18:53:5c:c3:2a:04:9c:d9:
93:be:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:27 2026 by rpki-client