
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json)
Hash identifier: UrC/riwgHK7rVTdOe1hEA2tyXTv48M6GUBN0lOe+iv4=
Subject key identifier: 16:21:DB:7B:D7:C5:98:A0:9A:9D:B7:D4:0A:0C:9C:1D:76:46:FA:F3
Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
Manifest number: 0248
Signing time: Wed 25 Mar 2026 03:17:45 +0000
Manifest this update: Wed 25 Mar 2026 03:17:45 +0000
Manifest next update: Wed 01 Apr 2026 03:17:45 +0000
Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: MHuWItJJbs+m+WEbYhqK+ARLCd/R7sTXODc6abRBjgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Validity
Not Before: Mar 25 03:17:45 2026 GMT
Not After : Apr 1 03:17:45 2026 GMT
Subject: CN=69c353d9-824c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:db:c4:de:90:20:da:5d:2b:9a:3c:a4:47:
1a:a6:c1:40:40:8b:d9:b5:5c:42:8a:35:b9:41:96:
43:6a:d7:6c:29:e9:ed:0b:d4:44:b9:54:af:ae:34:
11:d4:96:25:19:a9:43:e8:cf:e2:12:6c:29:ed:13:
bb:c1:48:7c:61:f9:12:ea:8a:d2:21:b6:12:4c:8d:
bd:50:16:0c:66:ea:f1:5e:db:8f:09:e1:d3:ff:46:
0e:88:e8:a6:e0:76:82:8e:df:af:29:88:7d:cb:1b:
85:9c:ce:e3:9d:bb:12:31:c5:cb:6e:7b:81:73:99:
87:a0:a6:5a:c7:e4:37:05:6e:5e:be:1d:2e:87:2e:
f1:bd:ac:89:4a:13:b3:4f:1f:f5:a7:8f:07:98:e3:
a0:3a:01:79:bc:87:53:3e:6f:0f:d0:af:fc:1d:1a:
67:4e:ea:3c:1f:68:f1:08:48:df:0b:7b:e0:e6:59:
d3:b5:0e:07:f4:2c:98:18:0b:c7:31:28:12:09:db:
e5:fb:9d:dd:bf:85:de:f6:18:b4:79:cb:cb:fb:8b:
7c:0c:cf:95:1a:09:8f:a7:b1:59:61:df:e6:b9:00:
b2:ef:4a:90:7d:28:02:cd:5b:e5:27:ec:ef:6c:21:
0a:c2:7d:82:c5:b3:f7:47:67:1d:70:c1:09:39:c5:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:DB:7B:D7:C5:98:A0:9A:9D:B7:D4:0A:0C:9C:1D:76:46:FA:F3
X509v3 Authority Key Identifier:
keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:82:3f:e9:e5:2d:5c:27:b1:47:de:d1:b0:26:7a:8a:20:eb:
61:e3:aa:05:c2:6e:36:2b:ff:e2:f0:4c:4a:07:e6:77:39:ad:
ae:57:8f:c3:2a:f9:d0:a7:75:83:f4:44:6d:83:2e:ef:ee:63:
16:6d:e9:91:6a:13:94:fb:4d:6f:6c:2f:f8:2f:23:5a:bf:01:
5f:2c:a7:f5:dd:72:a5:1b:53:6e:95:e5:90:6f:c7:2a:50:6b:
93:a2:9b:ff:14:bc:59:48:b9:f2:ac:31:5f:a1:2e:4c:56:0c:
66:68:2f:7e:57:27:cc:a7:04:d6:5b:4a:d6:64:06:1f:d8:51:
a1:6b:2d:4e:55:d6:f8:14:f4:47:4d:de:45:1e:6c:6a:41:d9:
dd:77:4f:ef:c7:3b:0d:bb:01:d0:2b:fc:0e:cb:79:c6:5c:79:
a1:03:fe:02:b7:e2:f8:0b:82:70:54:cd:ec:80:bf:a2:09:19:
85:a2:51:0f:2a:e4:bd:4c:36:96:d3:1f:5c:82:99:bc:13:1c:
6c:e3:d8:34:8e:6e:6f:fd:03:2f:d9:d4:db:5c:36:ea:8c:5d:
9d:79:ae:a0:9c:ff:c4:9d:fb:a1:53:f4:14:02:a3:04:50:df:
ea:6a:3f:82:de:9a:ea:31:21:67:d9:2c:43:7b:08:5b:f3:be:
73:41:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:56 2026 by rpki-client