
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json)
Hash identifier: Chz360ZjiCpmcJBEDoQ1VgU4xyIYpCfEFkLWHCKhWuA=
Subject key identifier: 25:91:B6:9F:9F:4B:28:5F:05:D0:D3:25:45:F5:6D:BC:C2:50:4F:E7
Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
Manifest number: 0136
Signing time: Wed 23 Sep 2026 05:22:26 +0000
Manifest this update: Wed 23 Sep 2026 05:22:25 +0000
Manifest next update: Wed 30 Sep 2026 05:22:25 +0000
Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: jLDhuGlelL8XmYYzSleZuE5VVEt2EsydrTWl76HJgLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl
rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
Validity
Not Before: Sep 23 05:22:25 2026 GMT
Not After : Sep 30 05:22:25 2026 GMT
Subject: CN=6ab36212-2787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:15:97:77:e4:dd:37:51:9a:56:73:ac:a3:
8f:c3:47:ad:78:fb:ff:38:21:3f:aa:cf:ee:c1:6a:
89:7f:55:37:bc:42:e4:57:9b:cf:23:9d:db:5f:34:
f6:98:6b:7a:9e:0c:31:f7:d8:d1:88:f0:8e:91:cd:
94:cc:77:29:7d:ea:2f:d0:08:78:ff:80:94:65:b6:
90:16:eb:04:7a:b7:75:6c:53:62:7d:a4:0b:b0:8c:
dc:41:79:91:32:a4:f3:67:00:f9:16:ae:12:62:37:
81:4c:f1:5e:58:61:0f:63:a7:35:ef:e2:d6:39:d6:
48:d8:1b:23:7e:59:b0:29:fe:ec:7f:65:79:87:dc:
26:2c:81:74:fe:c0:ea:1a:b9:e1:29:a7:d0:76:a4:
9d:b7:b6:6b:04:db:cb:bd:31:ff:60:0c:52:79:d2:
ae:16:8d:a7:03:18:98:05:73:6f:63:7d:22:a1:fa:
4e:42:36:ad:4b:d1:9b:37:76:c5:a0:96:32:38:f9:
8e:80:ed:38:0e:9b:fa:19:a6:57:cd:99:06:23:cb:
19:92:af:7c:a1:06:d1:70:33:92:ab:3b:1b:85:a7:
60:75:bc:ac:34:6b:58:22:fc:4b:68:e7:7c:27:ce:
01:97:83:26:2c:14:f9:2d:ae:e7:0a:bc:3e:86:75:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:91:B6:9F:9F:4B:28:5F:05:D0:D3:25:45:F5:6D:BC:C2:50:4F:E7
X509v3 Authority Key Identifier:
keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:71:29:00:86:1d:b6:a9:67:cd:a9:d9:84:a2:77:9e:34:1b:
65:e3:6e:49:a5:0a:a2:23:65:66:61:f6:41:34:52:05:64:bb:
fa:ad:dc:76:55:ea:9d:5b:f3:2f:bb:09:51:78:15:a1:c6:d9:
01:9b:60:4d:74:50:8f:20:9e:58:37:ca:bc:13:bf:b4:33:b4:
60:d7:42:d0:71:1c:fd:f9:57:47:c8:15:42:76:6e:3e:03:e9:
47:27:74:ce:78:6f:fd:c0:fd:f5:c1:85:f8:a5:25:40:e6:4b:
4c:9a:1d:95:23:74:fa:63:75:57:a1:d2:5b:42:2a:89:69:c8:
c5:b7:84:74:95:28:4c:df:33:05:b7:75:fc:11:4b:2e:63:68:
07:a0:4f:72:ff:f9:06:ea:de:85:0e:bb:0c:bc:25:94:bd:2f:
7f:12:fe:6b:23:92:5b:e3:97:74:c0:32:06:c9:73:eb:45:90:
90:b8:91:89:71:c0:51:83:38:81:43:db:d8:52:ac:4d:f3:72:
7f:69:9a:f3:b8:68:94:d9:73:0b:06:28:3e:66:8d:31:6c:26:
78:1a:5f:cb:ed:85:e0:1b:c3:13:99:48:3f:87:db:f3:45:d0:
e0:cb:37:a0:82:84:ba:0a:e7:67:45:cc:e0:ae:50:94:1d:9c:
42:f6:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:02:11 2026 by rpki-client