
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
File: l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json)
Hash identifier: Rfjj0WnWbRj1mnxMr495twHT5eeYhas0pT9PDEl8hRY=
Subject key identifier: 9D:80:1C:86:0C:B7:3E:3A:66:21:07:59:50:77:8D:34:00:0E:B8:93
Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC
Certificate issuer: /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
Manifest number: 91
Signing time: Mon 21 Sep 2026 07:28:24 +0000
Manifest this update: Mon 21 Sep 2026 07:28:24 +0000
Manifest next update: Mon 28 Sep 2026 07:28:24 +0000
Files and hashes: 1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: MpV5eyzzr8BoUmMrQ4yd3LcqdWD/TUCMO/HfLOF+QSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl
rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
Validity
Not Before: Sep 21 07:28:24 2026 GMT
Not After : Sep 28 07:28:24 2026 GMT
Subject: CN=6ab0dc98-16f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:2a:e7:4e:8e:c7:4e:e7:5d:0a:47:fd:72:
57:44:79:4f:01:40:06:15:9b:19:6a:16:47:c7:c2:
c6:cb:50:39:1b:57:6d:40:3d:16:1c:16:a5:b3:bb:
f4:8d:10:3b:d3:a4:ce:4c:38:ed:60:87:07:d5:21:
a0:7b:22:44:b8:b0:a5:6d:e4:a8:99:14:27:ed:4e:
b1:80:8e:23:77:09:5a:b6:38:ea:79:b1:e8:99:9d:
37:d9:df:fa:96:5a:77:56:a5:af:62:66:33:5d:8b:
cd:0c:bf:7b:91:cd:a3:8a:ee:e9:b0:9d:c0:ce:38:
75:63:d1:b5:97:93:d4:c0:e5:f4:13:02:76:d5:69:
8f:5d:c0:30:97:bd:77:98:c2:76:59:d9:d9:d6:94:
b2:14:79:0e:15:86:eb:37:a9:90:44:35:82:84:51:
ac:48:05:8b:04:a5:ca:f2:94:fd:d5:a6:a6:07:9e:
7c:f6:10:4f:84:46:41:ef:71:61:b6:d9:b0:d5:4c:
85:cc:65:d7:db:d1:09:9b:b9:5b:bb:1b:df:11:66:
9c:4c:8d:0c:fc:a7:0f:62:90:31:26:47:90:eb:5a:
85:d4:75:2a:0a:dd:99:9a:cf:87:94:75:da:80:f8:
5b:b1:e1:cd:a0:6e:fb:0f:eb:8c:f7:28:bc:94:2b:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:1C:86:0C:B7:3E:3A:66:21:07:59:50:77:8D:34:00:0E:B8:93
X509v3 Authority Key Identifier:
keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:38:e7:ad:55:ec:b1:e8:dc:79:b3:0f:57:3b:0e:14:0d:2c:
0e:0c:51:fa:76:57:7f:6d:ff:1b:bc:8e:c6:3b:57:e6:2b:f8:
91:f6:ea:68:1e:40:c5:d3:8d:be:45:5e:f5:bf:71:38:dd:cc:
a8:01:fc:58:fb:87:27:52:54:b6:b6:72:5b:88:0d:13:74:a0:
28:83:a3:d6:35:d2:de:17:24:6c:3f:97:4b:47:97:06:ff:e4:
6d:ff:cb:04:c5:73:85:e8:76:db:4e:6e:b3:d6:e4:97:80:f4:
96:0f:99:d2:45:4f:82:ca:33:da:7c:54:3f:a9:ac:3a:28:17:
85:07:54:50:8c:a0:95:71:63:36:72:2f:c3:aa:4d:da:fe:53:
9c:9c:5b:b1:fc:6e:88:50:f4:0d:40:42:54:34:9e:f7:0d:29:
cd:f8:ed:d6:60:5b:18:e6:9b:85:8d:6c:10:3f:d9:c4:2c:4a:
0a:64:b2:6f:81:10:0d:c6:74:a8:10:1b:29:66:a1:c1:8e:38:
41:f7:1d:8b:ea:72:ce:51:cb:0a:e6:7a:63:6d:ba:7c:1f:8a:
5f:ed:0f:ad:6f:31:7c:d4:13:11:42:3c:b0:a7:76:41:72:e0:
b2:fe:f9:7a:60:ce:57:29:00:df:71:2e:b4:4b:44:2e:fe:ea:
c4:a2:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:48:09 2026 by rpki-client