
$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json)
Hash identifier: 7P7u6aSOCULt9ZJGWN5A1zIFhTYi8dBoyuC3ase+is4=
Subject key identifier: 44:DD:AD:64:84:A9:03:B6:20:60:9D:0A:2E:AD:95:19:A6:97:EA:F0
Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Certificate serial: 07C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
Manifest number: 07B9
Signing time: Tue 12 May 2026 21:30:52 +0000
Manifest this update: Tue 12 May 2026 21:30:51 +0000
Manifest next update: Tue 19 May 2026 21:30:51 +0000
Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: f6rgqtWb3SgooiDgVfq4WzCy/tnkb6nzHr/GL5Bj8lI=)
2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: xUgWZPS3OqCqcDCU2NsD4bCGdV7LPQ4bmn/sE/hHG+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986 (0x7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Validity
Not Before: May 12 21:30:51 2026 GMT
Not After : May 19 21:30:51 2026 GMT
Subject: CN=6a039c0c-1017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:b9:53:b2:42:c4:37:84:81:ce:4b:cf:bf:
0b:9a:a7:a2:28:0b:8e:3b:70:aa:2d:4c:0f:ee:50:
b7:8a:6f:20:e5:ed:7c:e8:ee:ff:10:a3:d1:75:fa:
3c:37:57:54:f7:1d:d1:cb:5e:dd:44:18:cd:cd:72:
90:3d:b2:30:15:fb:41:0d:87:ce:4c:9d:b4:d4:58:
9b:92:9d:18:91:79:4a:9d:2c:31:27:ee:82:ca:2e:
52:80:60:ee:64:18:08:44:31:e0:a2:28:72:38:87:
47:44:8e:e1:a3:05:58:69:9f:74:5b:70:86:6d:8f:
1f:0c:94:c8:8c:7f:6e:dc:84:d6:89:de:06:1d:aa:
54:25:1f:52:fd:24:3d:66:33:8b:2d:01:25:00:50:
74:8f:67:34:1d:bc:44:29:1e:5f:0a:de:a2:ca:7e:
90:55:f9:48:8b:26:44:2e:84:c1:25:52:54:df:9f:
0a:a9:f0:32:66:d8:f8:26:97:8b:06:c9:82:d1:1e:
f1:95:88:33:91:a4:5b:21:9c:56:19:54:bc:34:83:
a3:76:8d:73:fd:9b:42:0e:23:f7:00:11:d4:bf:c2:
f0:b0:c0:fa:6c:7b:99:fd:b2:5d:54:ca:8f:de:20:
7c:70:1e:0f:b7:d5:51:ba:d4:03:b0:a0:5e:90:3f:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DD:AD:64:84:A9:03:B6:20:60:9D:0A:2E:AD:95:19:A6:97:EA:F0
X509v3 Authority Key Identifier:
keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e3:29:2a:ed:c5:4a:32:03:63:17:e5:89:4e:ad:bf:f3:73:
b1:14:c2:51:fa:dc:12:71:85:c2:4b:8a:5f:d8:95:74:3c:26:
0b:58:22:78:ef:a2:bd:9b:54:2d:a4:c3:16:c6:fa:ee:20:6a:
cc:5b:14:c6:63:22:9a:81:7d:89:16:0d:3e:a3:47:af:a3:48:
49:09:8d:95:a9:5e:17:8c:04:9c:9d:82:f8:de:4b:e9:db:05:
31:0b:ff:0c:79:3a:ad:81:47:ed:85:41:2d:26:e4:e9:bb:8b:
ac:f2:b2:07:a9:dd:72:a3:fa:5b:61:36:f4:3b:d6:7e:1d:68:
0b:d5:62:17:b1:55:d7:40:74:40:ef:2c:fd:34:9a:1c:19:1c:
7e:74:4b:cc:3a:83:e8:60:ed:8d:2f:03:5b:55:e2:9e:b0:90:
ea:aa:6d:3a:b9:88:b3:43:02:71:6b:9c:cf:fe:ab:93:af:d0:
72:50:8c:48:a1:16:9d:9b:e3:2d:22:88:0e:b9:bf:3d:93:19:
70:61:06:dc:30:90:aa:8c:eb:78:81:81:26:15:15:2b:aa:3d:
d1:5b:1d:65:de:7e:01:c3:6f:d4:48:57:63:72:2d:54:dd:99:
e4:e7:a5:fd:bc:bf:60:1d:d9:40:ce:c5:5c:69:95:20:0f:b7:
d5:78:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:51 2026 by rpki-client