
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json)
Hash identifier: epv5H85eym9roG5xMkZ+2WI/woq8L5D+vkeCj9MgP94=
Subject key identifier: 0E:B8:9E:FB:72:72:44:2D:BD:D4:55:42:16:84:ED:51:14:D0:2B:B0
Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
Manifest number: 0103
Signing time: Wed 25 Mar 2026 05:17:01 +0000
Manifest this update: Wed 25 Mar 2026 05:17:01 +0000
Manifest next update: Wed 01 Apr 2026 05:17:01 +0000
Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: /Mqfoga5K8ivhow21Ake1r7LlUgsJYnqGr1irgCPX8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl
rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Validity
Not Before: Mar 25 05:17:01 2026 GMT
Not After : Apr 1 05:17:01 2026 GMT
Subject: CN=69c36fcd-8d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:7f:ac:e3:6d:0d:07:06:c9:1a:89:d0:e6:
53:60:1d:6f:96:b3:d5:58:f6:15:c1:b7:a0:63:a7:
78:1d:1f:61:c1:0c:d8:9c:94:ea:76:03:d9:84:0a:
4d:7e:0f:fa:a3:34:a4:fe:cd:ec:7b:c3:11:0f:94:
88:c7:a6:43:61:46:9f:f1:0c:71:b9:19:d3:b8:e4:
0f:4e:27:e1:69:d0:bf:3c:ff:d4:00:bc:a6:8d:47:
33:c6:95:c1:74:3a:a3:7f:22:ca:8f:73:33:a0:e7:
04:f7:b8:0d:5b:f8:78:0c:be:63:e8:75:28:0a:fc:
16:9c:97:24:6a:bf:d0:1c:8e:b6:c3:9a:c5:c8:b6:
72:63:1d:d0:a1:2b:01:de:c9:01:ec:ce:d3:3a:27:
d5:24:c8:31:4a:71:fc:17:93:44:f4:9a:b2:a1:0f:
38:33:9e:a9:ea:de:e8:27:9a:9a:94:e2:9a:c0:98:
7e:c5:0f:ae:ac:67:93:0c:99:ea:a1:42:8a:97:d0:
38:e3:17:55:ce:a1:21:e2:96:18:6f:05:f8:c6:b1:
85:60:57:04:45:81:5f:f1:49:7d:1c:85:83:b1:93:
c3:72:94:85:4c:90:5c:4e:83:51:15:51:d9:16:c8:
a8:a7:9c:fe:27:61:24:77:c0:63:84:05:cd:0d:88:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:9E:FB:72:72:44:2D:BD:D4:55:42:16:84:ED:51:14:D0:2B:B0
X509v3 Authority Key Identifier:
keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:5c:65:77:fe:0d:d0:18:f5:85:73:a4:78:ad:73:8a:51:c7:
25:88:28:ab:f1:42:4c:72:ed:87:ca:84:4e:47:7b:ec:bd:8e:
5f:20:76:9c:9e:f0:14:f9:d0:6f:c9:58:d3:07:98:64:af:de:
1e:06:32:0d:7c:fe:11:80:27:06:58:ac:72:31:eb:26:a5:b8:
ee:8e:8f:3b:c1:1b:37:d7:79:ec:45:08:8a:f2:9b:8f:f5:6c:
62:e4:10:7a:92:8c:a6:3f:0f:33:62:92:9a:26:33:a1:13:9f:
57:9c:91:2e:98:d9:de:b6:b5:40:fb:6f:90:4a:40:df:f7:7e:
d7:db:80:b0:29:15:81:3a:f9:e1:dc:73:0c:68:e2:66:f6:69:
21:bf:14:1a:7f:b1:53:d3:cd:de:d8:84:45:40:95:62:86:8d:
01:ac:f8:f3:24:f7:67:50:40:33:c6:ab:60:60:08:52:c0:4b:
a1:7d:da:06:ee:eb:e9:e1:b6:3a:cd:d7:9e:3f:47:6f:19:8b:
f0:18:82:43:16:a5:9b:0d:99:6e:59:ef:81:a7:56:39:57:b9:
fe:e3:60:d2:8c:a5:0c:c0:a1:20:d6:b3:ec:73:67:73:63:91:
b4:4c:c6:c1:36:55:2d:d8:e6:76:46:48:63:17:5f:be:79:24:
23:12:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:48 2026 by rpki-client