
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json)
Hash identifier: YCPM1E/bQm1Gd3g8wK0HUXFzmPVNTvL3NYMO6rAZ6N0=
Subject key identifier: 4A:13:78:21:94:AC:1F:FC:83:E2:00:2C:E3:6C:2F:69:E5:9D:4F:E3
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial: 02C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
Manifest number: 02AE
Signing time: Thu 23 Jul 2026 02:37:43 +0000
Manifest this update: Thu 23 Jul 2026 02:37:43 +0000
Manifest next update: Thu 30 Jul 2026 02:37:43 +0000
Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: BUqzZuukh4J5ZPOeHLWkmhTUZw2vNZ8z7Fs17RBDP3I=)
2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=)
3: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=)
4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=)
5: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Validity
Not Before: Jul 23 02:37:43 2026 GMT
Not After : Jul 30 02:37:43 2026 GMT
Subject: CN=6a617e77-2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:e5:57:4e:b1:a3:5c:b6:7f:04:30:54:23:
8f:d0:83:59:3b:95:f7:89:e1:da:73:f0:f5:c5:ee:
0f:c5:ea:81:5b:7a:58:3c:36:e8:89:8e:d5:19:fd:
03:a3:7a:b8:58:88:40:c1:9e:d0:a1:d1:4d:75:41:
72:30:96:d8:e8:49:88:83:eb:1a:80:18:52:36:1c:
c9:73:fc:e3:0a:cd:b3:e7:e3:5d:76:77:f6:f7:9f:
02:84:ab:1a:5c:c0:d6:02:9f:da:e7:f4:68:61:e5:
24:95:8e:cb:c1:27:9b:b6:58:4a:24:64:35:a0:28:
05:f8:db:13:84:2c:a4:5d:9e:35:a5:fa:e5:4a:06:
e5:15:fd:a8:6e:80:bc:7c:fb:fd:6b:38:61:c2:28:
e7:07:32:9d:93:6a:86:c6:54:5d:3f:5c:ab:f7:db:
93:95:6f:2e:30:a5:12:6c:b4:9c:e7:5e:78:2c:d8:
eb:99:6c:51:cd:b1:5b:2f:c1:35:35:c7:9e:cc:24:
33:cf:31:ae:b0:1d:e2:35:94:20:81:7e:84:45:e2:
33:b1:88:43:c2:80:31:75:fb:32:a9:80:0f:40:ff:
91:33:eb:64:53:4a:96:99:25:95:e2:70:21:25:68:
3f:5b:d7:61:8b:00:26:0d:bb:c1:14:1e:94:34:5a:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:78:21:94:AC:1F:FC:83:E2:00:2C:E3:6C:2F:69:E5:9D:4F:E3
X509v3 Authority Key Identifier:
keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:f7:7d:5f:0f:e0:ac:66:d1:54:f1:c0:a5:b5:e1:77:77:ae:
5b:fa:81:c0:23:19:e8:c8:18:e0:98:d8:0d:56:62:c5:1a:60:
fb:f4:2e:b6:ce:46:c3:3c:63:ee:9c:8e:f9:b6:41:9b:2b:05:
51:78:57:5c:f5:7b:69:96:13:4d:6e:2c:3d:bd:cc:96:0f:97:
cd:12:c4:a2:30:40:d0:40:af:99:4f:05:76:59:1a:f1:7d:24:
b2:15:c7:83:7a:0d:4b:2a:8f:e6:a5:1a:2b:22:60:6a:f3:eb:
f3:72:26:5a:86:e3:ff:c0:34:2c:83:79:8c:55:5c:3a:ed:ea:
59:3e:80:09:46:9e:6e:c3:24:29:46:7d:e5:f8:79:ad:ef:dc:
93:62:1f:04:8d:af:18:49:9e:65:97:1d:08:ea:44:11:c3:c4:
15:18:7a:30:4b:63:1f:52:55:d1:31:e8:03:a1:c5:bf:0b:44:
27:da:93:eb:e2:2b:2a:f6:b1:0c:e5:93:c7:14:64:6d:93:5a:
89:2b:b8:0b:f1:4f:b0:d2:19:ee:62:dc:69:09:80:f1:c2:d4:
86:eb:6d:f6:53:6a:58:14:3a:45:34:fb:98:33:c5:d5:c8:72:
ee:24:54:ad:9e:63:2c:8d:a8:5f:03:a0:6f:7b:f8:c6:9f:24:
81:2d:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:46 2026 by rpki-client