
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json)
Hash identifier: 8D4ax+XQH49a0ycQxqBnmWhA+OSXSZ1L+mEsG7xdqjo=
Subject key identifier: 2F:27:F1:22:E7:F4:19:B9:D8:99:75:C5:3D:39:B9:7A:67:D0:49:9E
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial: 02A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
Manifest number: 028A
Signing time: Mon 11 May 2026 01:53:03 +0000
Manifest this update: Mon 11 May 2026 01:53:02 +0000
Manifest next update: Mon 18 May 2026 01:53:02 +0000
Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: /+z8B6YpZ81AOi7j5+UecuQbdIPWzqrFQbbLnvLTMyQ=)
2: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=)
3: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=)
4: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=)
5: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Validity
Not Before: May 11 01:53:02 2026 GMT
Not After : May 18 01:53:02 2026 GMT
Subject: CN=6a01367f-4578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:01:84:95:23:1c:e3:dd:8d:2c:86:05:73:
4e:28:25:fd:8e:57:51:1b:42:65:48:84:2b:a0:0b:
28:46:af:c2:d7:31:d3:6c:a8:3f:5a:fd:c0:12:32:
f2:e4:86:63:d2:d3:d3:c0:75:4a:6f:fd:c9:68:1d:
a1:40:42:3c:62:22:54:1e:9e:ae:be:28:71:92:0e:
82:68:fa:97:48:79:98:f5:4c:09:4b:e8:d6:7a:b2:
ba:e7:e1:1c:a8:6c:91:2d:0f:06:06:02:96:50:4e:
9d:86:5f:26:f7:ad:43:cc:e3:83:a0:c7:5d:18:8c:
bb:ef:3a:fe:69:70:de:32:a7:a8:de:2c:ef:2e:59:
18:fa:3e:7f:e0:09:39:56:8f:c5:d8:46:0b:38:e5:
95:cc:5e:bb:f2:74:c1:69:20:4d:f8:b1:64:f4:ef:
ce:bd:17:c3:b2:d5:e7:b1:2c:8c:52:af:51:43:5c:
9e:97:48:99:3a:09:4d:da:46:35:30:0b:10:a8:22:
53:a6:f5:09:89:ec:7c:2c:fe:5b:e5:c2:b8:c8:66:
00:82:08:fd:7e:7d:dd:ad:19:5b:fb:5d:39:ae:54:
fc:d3:f8:6f:31:ac:5b:14:0d:7e:ca:fa:58:1f:fe:
da:37:3c:44:97:07:8e:59:ce:4f:6c:0a:3d:78:e4:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:27:F1:22:E7:F4:19:B9:D8:99:75:C5:3D:39:B9:7A:67:D0:49:9E
X509v3 Authority Key Identifier:
keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:b8:ee:ba:cc:e0:9a:78:a2:2a:2d:1d:56:4f:ce:ee:2d:a1:
fb:df:04:f9:d3:0b:11:d6:17:c0:58:3e:8e:00:d2:aa:06:e3:
42:60:b2:8d:d3:b8:8a:f6:c2:b5:7f:c8:18:a0:13:9a:c0:94:
f1:30:10:47:2e:5e:2a:b1:84:fd:a7:b1:b5:9a:34:95:c8:bc:
cd:20:ec:79:20:5f:f7:8c:9a:e9:33:e4:7e:a3:94:1e:70:97:
95:71:2b:39:81:d8:ff:50:7c:5f:e1:2f:01:41:84:bc:f1:24:
f5:15:e4:8d:7a:fa:f5:9c:74:c8:b2:05:b4:90:6b:9d:0f:e8:
5b:26:60:07:7f:4b:4b:24:97:82:40:ae:3d:8e:dc:55:af:b1:
d3:33:2b:a4:f8:ca:90:b0:79:fa:f4:41:70:12:88:6b:1e:35:
58:1f:4c:09:a1:0c:f0:d0:3a:f9:93:61:bb:bb:97:88:f2:bf:
53:ef:1b:98:80:bf:89:be:68:8d:0d:5c:17:cd:be:fe:0c:57:
28:25:56:ba:73:7a:a0:bc:a5:87:e3:ac:cd:5d:e3:f2:70:11:
c8:7b:d1:bb:9a:7c:ad:f2:aa:4b:cc:81:91:da:36:e4:5a:3f:
5f:1f:f5:5f:82:64:5b:e5:01:47:bf:7c:9c:e1:89:66:b9:65:
59:ab:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:51 2026 by rpki-client