
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft
File: lKlQswO0aQDdWjBhAwyJpIloA68.mft (raw, json)
Hash identifier: YY0p9VX4l0ucRN4SIHF4TKagovDvuD9h1BnYUtpCdFc=
Subject key identifier: D3:8B:26:0C:2F:2D:9B:04:5E:1D:44:B9:67:E0:70:EB:51:7E:5E:58
Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF
Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft
Manifest number: 019F
Signing time: Wed 13 May 2026 04:26:18 +0000
Manifest this update: Wed 13 May 2026 04:26:18 +0000
Manifest next update: Wed 20 May 2026 04:26:18 +0000
Files and hashes: 1: lKlQswO0aQDdWjBhAwyJpIloA68.crl (hash: C+t3tn6OA37/fY+8SVrJv/72QT9Qpe71eBj/RcjvACc=)
2: 10771E5497C211F0A9D40817C4F9AE02.roa (hash: Ih6CUVzbaPRdHejVQvZNcYEMy1tnq4yUXbGOoq+u3g0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl
rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF
Validity
Not Before: May 13 04:26:18 2026 GMT
Not After : May 20 04:26:18 2026 GMT
Subject: CN=6a03fd6a-4b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:f7:0d:f6:28:1e:6f:0a:49:4f:05:3c:8c:
a6:57:39:13:c4:37:a2:74:f4:d8:3f:aa:29:97:4a:
e7:f9:eb:90:11:01:bd:9e:af:79:55:e0:dc:92:39:
29:a5:63:8c:e3:69:5f:2a:62:0c:6d:59:27:00:b5:
e2:25:c4:2c:7e:db:8b:f9:cc:ce:48:07:48:67:a4:
69:9b:4e:03:c0:11:cb:ad:4f:e8:19:be:c6:9d:82:
42:b8:48:03:ce:33:0f:6c:dc:89:69:4f:c8:c8:a5:
b1:d5:7a:d7:28:f6:d5:3b:c0:35:d4:31:06:4c:6c:
68:44:46:f9:6f:37:b4:77:e3:39:cb:7c:1e:86:f3:
80:ac:b1:fb:16:33:b2:63:7d:f0:a3:7a:fb:ec:b4:
9c:06:ed:08:10:5b:f3:0a:98:18:c1:65:df:d7:97:
38:23:4e:f4:83:bf:21:c0:95:08:38:94:c9:db:f6:
3e:22:fd:a7:4d:72:2c:54:93:0d:0a:89:92:06:3b:
4d:4a:7e:f3:53:2a:6f:4e:d8:85:77:43:70:97:b1:
49:e1:11:ed:72:da:b6:33:88:82:6b:55:0d:39:ba:
3d:49:05:2b:64:aa:1e:99:48:4a:6e:bc:a1:bf:19:
e8:e4:ca:4b:11:e6:1c:6d:9d:05:2e:16:e2:94:d5:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8B:26:0C:2F:2D:9B:04:5E:1D:44:B9:67:E0:70:EB:51:7E:5E:58
X509v3 Authority Key Identifier:
keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:6e:4f:1d:11:6b:e8:39:33:68:7d:64:bd:c0:84:9c:d1:
dd:c6:0e:3c:22:8b:00:41:0a:01:2f:71:76:44:a8:62:cb:e4:
e4:be:2b:28:fc:23:2f:2e:6f:dd:fa:5d:fa:32:c4:34:cc:3f:
bd:94:12:5a:a1:98:1a:f3:91:06:3d:fc:11:e3:98:f3:f5:ed:
2a:4e:01:21:e0:e7:85:45:52:e2:02:b3:a9:8b:82:3c:64:1e:
8d:cd:70:1c:46:8a:b3:a5:16:24:2f:a6:46:5d:7c:5d:e1:1f:
92:01:9d:a6:f7:09:16:ec:69:89:cf:d9:c8:71:9a:f8:38:00:
da:09:76:f7:c4:52:d8:df:65:15:e7:74:de:40:1a:aa:58:74:
ba:4f:90:91:67:e6:89:45:15:53:82:f1:57:99:e2:01:c5:da:
ad:6f:46:bd:ba:15:5b:ac:a3:ec:9d:4f:7f:7e:e1:c9:fa:05:
7b:68:37:4c:77:13:f3:d2:ae:70:6c:79:6f:d3:0e:10:d7:38:
b2:0b:61:bb:1c:e8:72:18:1c:d5:51:bc:55:70:a8:e6:cc:ea:
36:43:23:37:a0:65:e0:40:84:8c:62:35:ef:70:4f:4a:7a:2a:
fb:a5:12:cf:8f:ff:5b:e8:93:58:37:50:3d:f4:23:4c:6c:85:
ef:04:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:38 2026 by rpki-client