
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json)
Hash identifier: qOhs+v8wWT9mZvqHz01SjQ0JoM7SumIC73oLQ0vxrIs=
Subject key identifier: F3:87:68:99:C3:C7:F2:D6:1E:49:78:36:66:B0:D0:6A:C4:9E:67:0B
Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
Manifest number: 01EB
Signing time: Wed 13 May 2026 03:24:53 +0000
Manifest this update: Wed 13 May 2026 03:24:53 +0000
Manifest next update: Wed 20 May 2026 03:24:53 +0000
Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: zu1yQz2eBPYtQRL+OU/sQLRACmYw81QU1/WBwS70ndE=)
2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: UORe/0TZF8IoRoAarwALcIbpOxjo7QBKBArFHjwhFB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Validity
Not Before: May 13 03:24:53 2026 GMT
Not After : May 20 03:24:53 2026 GMT
Subject: CN=6a03ef05-cd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:78:cf:6e:fc:ef:c8:a9:2a:09:b6:9a:90:
b6:7f:b2:1d:87:65:05:c5:18:3a:5f:35:88:c1:0e:
85:9a:42:61:dc:a6:96:b3:33:14:f7:53:b8:d3:1e:
59:81:5e:2e:bb:e7:b9:fd:29:7c:e0:79:60:9f:a8:
4a:7a:6c:ae:86:48:a7:76:ca:a6:f8:f3:11:9e:75:
a9:9b:5b:32:f1:bd:ad:cf:a9:53:aa:f0:6d:cc:f4:
ae:3a:46:af:67:fa:0a:f8:d6:8a:a8:dc:32:ed:b0:
d9:09:c5:7b:b2:5f:15:17:e9:cf:bf:c6:77:4b:60:
6c:d7:a1:85:5c:13:51:1f:ee:eb:56:5c:8e:b0:ef:
7b:76:24:3d:df:c9:3e:78:a4:29:bf:6d:8f:09:ed:
5e:e8:4b:a9:ae:f9:58:c3:8d:68:81:42:33:81:1e:
f0:eb:2a:ed:b7:9a:97:a8:3e:e3:3b:06:f6:49:ca:
60:dd:bd:c1:04:e4:44:fd:b4:c6:80:8d:c5:c7:87:
ef:c7:97:b3:d7:46:3e:5b:68:09:ec:6e:7e:92:c1:
78:0d:33:f7:93:8d:84:cf:41:d5:45:34:8e:55:8e:
12:a9:b3:c9:24:6e:02:54:e2:9d:34:85:9c:bd:e2:
e6:a1:31:fb:5b:05:42:4b:b6:57:04:4b:6f:ec:6c:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:87:68:99:C3:C7:F2:D6:1E:49:78:36:66:B0:D0:6A:C4:9E:67:0B
X509v3 Authority Key Identifier:
keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:59:75:f9:1b:6c:3d:59:5f:23:90:65:8b:b0:20:84:03:18:
b5:e2:be:88:dc:4d:57:98:3d:c8:ca:d1:8a:2f:27:22:28:51:
2d:34:b3:98:77:25:6c:58:ad:eb:94:20:3b:f4:de:01:e2:bb:
f3:9d:6c:54:d1:74:43:03:2b:49:ba:2a:92:20:1b:75:c5:e8:
84:fd:d2:2d:ea:cc:5c:42:25:ee:95:32:50:92:5d:c7:92:29:
29:be:0f:33:be:85:78:ec:aa:b7:32:39:15:a4:b4:cc:87:6a:
57:95:b2:1d:ec:29:d4:a2:a1:33:de:68:b5:6c:db:8c:f4:56:
09:0d:f3:65:bb:7c:ed:92:91:e0:64:de:de:22:b8:e2:c3:4b:
35:c1:8e:67:5c:3e:dd:c4:3f:0e:2d:67:a1:fb:9d:de:51:5d:
6d:6a:50:48:d4:66:54:11:65:f0:bd:8d:eb:73:42:75:bc:a0:
6c:06:bd:b0:dc:e3:e2:9a:8b:9b:99:1e:71:5f:5a:f6:a8:25:
3f:ad:d4:22:7e:c4:1d:68:af:c0:6e:97:16:ca:18:32:19:dc:
51:00:0e:3f:62:69:fd:43:79:ac:45:da:c3:47:54:c4:c7:cc:
30:37:0d:b9:f3:17:9d:4a:db:84:0b:f5:71:28:9b:ea:7a:5c:
fd:29:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:23:29 2026 by rpki-client