
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json)
Hash identifier: d5esvmz55AihfYJd6AeVteCud4cFFLLwEHv6IPRowSM=
Subject key identifier: 01:31:F5:1A:45:00:E6:B2:80:A8:B6:F7:98:08:4F:70:B6:19:F5:91
Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
Manifest number: 44
Signing time: Mon 11 May 2026 08:36:03 +0000
Manifest this update: Mon 11 May 2026 08:36:03 +0000
Manifest next update: Mon 18 May 2026 08:36:03 +0000
Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: ic6QJB07GUvg6nm8i/rQQ/ofakTTJcsUFLLoi1a/3iE=)
2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Validity
Not Before: May 11 08:36:03 2026 GMT
Not After : May 18 08:36:03 2026 GMT
Subject: CN=6a0194f3-4b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:ed:a0:9e:42:63:bb:2d:4c:1e:c2:45:01:
46:30:fe:34:92:10:b2:85:2a:f5:e8:50:57:0b:99:
b0:f2:ef:67:56:30:a0:e2:f1:5e:cf:86:f5:85:7b:
1d:e8:27:ee:17:82:02:cb:49:f6:9d:d1:dc:80:5d:
f0:24:f2:45:57:c2:28:7a:c2:43:2b:9c:88:4c:d3:
48:a8:96:a2:83:f9:e0:a0:a3:25:58:65:82:09:9c:
2e:a5:ca:86:e0:33:83:29:6d:d2:8c:64:04:39:7f:
43:36:a5:f9:52:19:41:87:2b:6e:59:b4:19:8f:09:
6e:a9:70:25:91:31:55:14:ab:3b:4c:de:ed:74:06:
b6:99:cf:41:26:31:db:07:b1:a8:20:aa:98:05:6f:
99:d9:b4:35:14:45:80:8c:b9:41:a9:42:ab:0d:64:
9c:78:d3:42:64:94:6f:90:8c:80:2b:fd:a0:64:99:
cd:b2:b4:dc:7b:c1:8a:e5:96:e7:d6:4a:e7:1f:0b:
0b:34:44:20:8b:92:41:f9:9a:cc:b9:df:45:86:81:
ec:1c:a6:21:17:bc:d0:15:79:8b:d8:49:66:5e:e9:
ce:e7:33:75:3f:b5:ed:66:57:8f:bc:18:ff:cb:6d:
6c:c0:c2:31:e5:e7:e1:3b:19:44:cf:06:e5:2b:ad:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:F5:1A:45:00:E6:B2:80:A8:B6:F7:98:08:4F:70:B6:19:F5:91
X509v3 Authority Key Identifier:
keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:a2:35:da:0a:5d:2c:60:f3:d1:44:6f:2f:dd:ad:84:7d:c5:
60:bb:5a:57:af:ad:9d:ec:0a:4b:58:17:a5:6d:72:87:a0:70:
42:aa:42:d6:94:2f:d6:f4:a9:24:42:02:f3:1f:79:e7:4b:20:
96:80:16:3e:13:ed:07:c9:3c:1a:b2:67:d7:32:4c:58:ce:b2:
b1:97:28:dd:f8:26:df:37:89:c6:7a:f8:a6:8e:13:c4:00:35:
9c:f4:cb:a3:53:13:a1:54:ef:13:6d:12:78:00:27:fe:fc:5b:
17:07:a1:e0:a8:d0:08:6e:2e:ae:5a:03:c4:80:50:72:c4:02:
aa:45:ad:bd:26:87:f8:98:ed:7e:56:68:f5:48:0a:7f:55:d0:
43:79:06:3b:11:2f:bf:fa:0b:67:f9:d1:b7:5b:3f:57:73:b3:
c0:d8:0d:ee:e6:3c:d8:8a:23:79:1f:27:f7:9a:69:f7:3c:dc:
ad:44:3b:d6:57:b0:bc:fd:2a:15:72:30:3e:a0:92:4a:a8:db:
2b:ed:4c:54:8e:91:ea:03:97:10:c0:54:ce:f8:0d:a7:f7:3c:
53:32:38:06:d4:9c:f3:09:c6:0e:9c:e7:be:ab:9e:d9:68:14:
f9:53:16:93:89:f6:7b:9d:d0:e2:00:1b:ae:c8:1b:35:65:ed:
6a:2c:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:37 2026 by rpki-client