
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
File: LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft (raw, json)
Hash identifier: j1yTz3jdTHpTmPP85bid+aYEP0vRJx2EnSbrsAEEteA=
Subject key identifier: 3C:80:96:9C:F5:AF:4E:F9:7A:60:04:F6:E9:3B:54:AA:3B:5E:78:C1
Authority key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
Certificate issuer: /CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
Certificate serial: 0693
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
Manifest number: 0693
Signing time: Tue 24 Mar 2026 22:08:43 +0000
Manifest this update: Tue 24 Mar 2026 22:08:43 +0000
Manifest next update: Tue 31 Mar 2026 22:08:43 +0000
Files and hashes: 1: LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl (hash: bnk1sBGuAQv4tKFpb5o2TiidKvemc1uMkklifENw2/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl
rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B50D2, serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
Validity
Not Before: Mar 24 22:08:43 2026 GMT
Not After : Mar 31 22:08:43 2026 GMT
Subject: CN=69c30b6b-86b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:1c:6b:20:f7:cf:a3:39:e4:d5:82:1a:10:
35:48:2a:76:66:58:e6:d0:e4:e0:8c:e7:24:e8:49:
4c:e0:0d:5c:90:0c:87:c6:91:b6:7d:6b:35:49:d5:
14:f7:e2:e2:85:cd:e1:83:52:a1:0a:cc:3f:29:1d:
d1:e4:1e:67:bb:b5:af:c2:89:37:c6:99:76:2f:7d:
c3:bd:89:27:05:b9:b6:8d:54:47:12:aa:ee:5f:c0:
77:48:7a:22:1d:e3:a3:ee:a5:93:63:27:fc:d5:fc:
b6:d5:29:48:eb:06:81:78:c5:b0:64:a7:22:40:04:
70:8a:d0:c8:f1:b0:42:ac:b1:ee:ea:e0:a3:f1:85:
57:a0:ef:84:13:fe:e9:b9:2f:96:39:22:c8:9b:c3:
84:fa:b8:8f:ad:67:e9:5c:64:5a:cc:60:7c:37:aa:
50:7b:55:d1:4a:cd:23:61:96:70:05:82:35:1d:4a:
f1:ea:fd:da:5e:bf:48:47:75:f7:d0:b6:37:12:2c:
42:e5:bb:20:f7:26:b3:6b:5e:4a:67:d7:bd:a3:10:
17:d1:ea:43:c1:73:31:f6:62:f3:1b:e4:c6:65:e7:
cd:12:89:70:ba:fd:2f:58:a7:21:14:0a:cd:25:f0:
18:bf:9a:c9:b0:84:83:48:74:c4:6f:14:0b:65:ff:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:80:96:9C:F5:AF:4E:F9:7A:60:04:F6:E9:3B:54:AA:3B:5E:78:C1
X509v3 Authority Key Identifier:
keyid:2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4e:2b:e6:33:60:b5:f1:ff:e1:48:77:fe:ae:58:60:05:78:
03:73:16:50:7a:73:27:97:be:4f:aa:1c:9b:4c:0c:15:d5:94:
50:27:0f:4a:b3:f2:9b:61:11:eb:51:7a:b8:eb:7f:98:59:94:
b3:35:cb:64:e9:f1:74:c0:e7:e8:83:99:68:8d:ef:fa:25:d5:
c5:7c:3a:51:79:90:b0:a0:8b:84:db:54:f0:24:d2:2c:0c:4a:
0a:b7:11:4d:55:a5:64:15:2f:76:3a:dd:d3:50:61:11:6c:6c:
a2:5e:26:48:10:a6:75:e8:72:57:a6:19:ca:12:72:df:c6:96:
1d:d5:87:9b:54:e5:95:b7:4a:81:c3:b5:e6:c7:8c:8d:58:26:
ac:ed:29:5c:0f:f8:fe:42:55:69:92:c5:ca:cb:41:6a:85:99:
ea:a7:b7:21:5c:b0:e4:1a:7f:b6:04:22:da:98:0d:92:d9:42:
3d:2f:5e:2f:5a:3f:aa:54:6b:b9:f9:98:01:84:18:0a:21:1d:
69:30:3c:a1:1a:86:3b:45:6c:e5:c5:3b:b0:07:2d:cd:29:f8:
28:9e:75:4d:e6:93:ea:5f:17:54:4f:2e:eb:8e:e7:ce:72:7f:
da:f8:34:c2:34:f5:08:6f:ce:2e:56:c1:99:68:ac:bd:e6:3f:
42:96:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:15 2026 by rpki-client