
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json)
Hash identifier: PqLrF8qV864VYI0M983A0rhy92pam3hl4XJwErR2cn0=
Subject key identifier: 31:E0:6F:57:22:DB:85:9E:AF:5F:A9:FA:23:74:36:64:1A:05:7B:01
Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
Manifest number: 0302
Signing time: Fri 25 Sep 2026 03:03:59 +0000
Manifest this update: Fri 25 Sep 2026 03:03:58 +0000
Manifest next update: Fri 02 Oct 2026 03:03:58 +0000
Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: LahtlEHqR++zYfXkCnOq2De3JUOiALDGZ3kHZ472KzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Validity
Not Before: Sep 25 03:03:58 2026 GMT
Not After : Oct 2 03:03:58 2026 GMT
Subject: CN=6ab5e49f-02b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:65:d8:fa:a3:32:e5:eb:57:e7:57:a4:cb:
4c:b1:62:71:e2:6a:24:2d:6e:d9:88:69:7e:38:ed:
99:64:a7:57:d6:b9:14:c0:76:08:a5:c5:f3:ce:fa:
75:df:ef:f4:51:dc:ca:bd:79:15:48:e1:97:39:fc:
c5:e2:46:07:37:58:2b:65:a7:20:b2:91:b4:94:db:
fe:b7:78:df:74:3b:22:cf:ba:91:ef:bc:a7:65:31:
26:10:e0:ff:a5:ad:2d:6b:03:a0:b7:32:02:3f:d4:
a8:ac:0a:45:78:48:af:87:cc:11:10:c1:ce:b1:ca:
a9:58:1c:5b:53:e3:ec:a0:c5:e5:51:70:20:95:bf:
df:78:48:28:55:f0:ab:e3:17:79:20:e5:d4:f6:cd:
9d:d4:f9:64:ab:9f:be:f6:ab:6f:fc:56:52:e1:35:
d3:e8:d0:a0:4e:1d:47:eb:6b:21:b2:69:2a:c2:e3:
91:4f:ff:72:01:fa:4a:4e:3c:b5:c7:8c:56:0c:9f:
be:f8:96:82:b1:93:e6:3e:60:dc:d0:cd:b4:2a:2a:
fd:8b:7b:32:8a:de:3e:0d:47:df:1c:e0:94:15:a0:
55:31:b5:ab:32:86:c5:da:c1:20:24:41:89:f6:2b:
e0:32:93:6a:32:c5:66:89:1f:07:07:ea:37:2f:27:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E0:6F:57:22:DB:85:9E:AF:5F:A9:FA:23:74:36:64:1A:05:7B:01
X509v3 Authority Key Identifier:
keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:d4:b3:6a:6b:d9:3d:66:68:41:c2:6d:31:9c:61:9a:a4:b3:
a9:9a:48:eb:98:3b:6f:71:60:5f:39:e6:3c:76:50:50:fe:90:
31:5f:6c:e3:f5:43:1c:97:53:9d:db:1b:90:a7:83:4f:9e:55:
c1:8b:7f:a5:7b:1f:8e:ff:28:db:b7:bb:d7:1d:35:0d:01:6e:
06:04:99:59:4d:b9:a3:57:03:0b:00:f0:f1:1d:16:9b:d4:d7:
1c:18:fa:e3:3c:a4:42:b6:c6:c8:c9:4a:82:07:dd:78:e3:87:
cf:c3:5d:fd:dd:1e:2a:4e:0d:da:3c:bf:2b:e1:56:86:4a:f4:
f5:87:79:57:c0:1f:3d:11:0c:56:c5:b4:19:ef:94:cb:64:c2:
bf:15:ad:c6:b9:b8:a5:e6:11:16:5e:0f:44:4c:3e:84:45:52:
6b:3d:08:26:9c:58:d1:b6:fa:e0:67:8d:9d:67:36:1f:4c:e8:
04:d8:15:5a:a2:dd:9f:32:7d:89:27:b7:6d:70:74:08:ae:1c:
2c:5b:25:ac:42:aa:33:14:29:77:90:dc:49:c1:3d:7a:9f:54:
ba:0c:50:b8:97:c3:be:25:a1:43:ae:66:73:bd:95:70:c6:b5:
38:0c:1b:8e:10:4c:c7:f6:91:b7:60:65:9c:cd:d3:85:36:b3:
9a:ef:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:50:08 2026 by rpki-client