
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json)
Hash identifier: O8nv8MfhivT9xMKA8dKo7EYmwa91zxEFROwQvcBQ9jE=
Subject key identifier: 72:FA:7C:B6:A5:FE:93:3C:10:E3:FD:52:58:A7:EF:46:B5:A3:6A:F0
Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Certificate serial: 049D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
Manifest number: 0489
Signing time: Tue 24 Mar 2026 23:41:46 +0000
Manifest this update: Tue 24 Mar 2026 23:41:45 +0000
Manifest next update: Tue 31 Mar 2026 23:41:45 +0000
Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: SyirmTIUZJ6aPNIbZ9G/z8S1jrvWEZMk+LK7/RsmQDg=)
2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 2aYC0ELWow+IfSe343bqAO+DbKR4exbO+moWs9x1JMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Validity
Not Before: Mar 24 23:41:45 2026 GMT
Not After : Mar 31 23:41:45 2026 GMT
Subject: CN=69c3213a-0912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:08:54:cf:6a:52:74:f0:fc:be:0f:73:c7:
42:c3:70:ce:11:76:67:ba:06:1a:3b:90:4f:b0:24:
e9:50:f0:bc:8e:52:c1:ed:62:2f:08:ac:ba:a6:39:
ae:2c:f5:88:2c:25:7b:af:68:7f:58:2b:83:e9:e3:
ca:ec:0b:ed:69:7b:87:e2:2b:ed:ed:d9:77:44:0c:
3a:c7:93:66:06:bd:e9:51:67:c8:f5:5b:6e:70:e2:
e3:82:28:7b:09:87:cf:d4:93:96:42:1a:34:55:e1:
bb:b0:23:a0:c8:fb:84:78:c5:79:64:ab:72:f2:14:
d5:96:a5:0c:98:f8:0b:3d:0b:e5:35:55:0b:8c:12:
c7:33:68:8f:7c:c7:fe:ab:a2:70:4a:3d:fa:c6:95:
37:c4:8c:f0:57:42:12:fa:6b:0d:12:b6:79:4f:f3:
69:39:26:4b:d1:5a:fd:7a:1d:31:7a:b6:39:95:57:
f6:4b:f4:17:da:26:56:2d:e6:6f:b2:d5:45:9d:55:
e7:58:bd:9e:70:b4:93:82:93:af:2a:e9:13:92:7d:
b4:b1:8c:e6:60:bc:08:bf:56:8a:8a:09:3b:12:51:
26:84:d3:c3:52:37:7f:28:89:1f:ad:0a:26:21:ec:
29:02:01:be:aa:4e:72:24:96:f0:fa:59:2d:12:f2:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FA:7C:B6:A5:FE:93:3C:10:E3:FD:52:58:A7:EF:46:B5:A3:6A:F0
X509v3 Authority Key Identifier:
keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2f:78:ac:06:67:e9:a1:26:dc:89:61:93:27:e3:09:18:9c:
74:3f:4c:9c:7c:e7:fb:1b:90:5a:5a:3c:27:42:d9:c2:94:1a:
08:d2:2e:53:65:15:42:12:fe:31:09:8a:e8:06:8f:a0:1d:9c:
90:92:9b:3c:b1:64:98:c5:10:e0:05:2a:b8:3c:cd:fb:94:90:
60:ad:09:1c:e3:61:ba:ae:a2:54:7c:77:40:f1:68:b9:56:cb:
bd:78:4b:20:c2:07:a2:d6:6a:b6:0e:10:3b:7d:72:df:9e:8d:
b4:d9:7d:db:d0:60:1a:4f:4f:91:5e:76:c1:e7:37:93:9c:5f:
14:b3:22:15:33:19:5b:dc:ee:72:59:0c:d6:a1:3d:97:5d:1e:
9b:68:ae:cf:69:05:b0:d0:22:bf:76:c2:82:8a:80:e5:b5:c9:
45:3e:1b:e5:38:33:26:cb:ab:5d:a3:6a:07:f2:1e:49:3c:cf:
25:6b:77:dc:73:98:cd:b8:17:b2:7e:90:c6:04:a5:18:de:d6:
36:b3:10:5c:a1:c5:79:9f:2d:3b:13:18:ee:d2:b0:05:3c:31:
ce:80:c7:79:8e:6a:a3:fa:40:5e:4d:46:ea:11:b9:58:b6:5f:
72:e9:ef:45:76:9d:e6:c0:d7:46:83:7e:be:e3:92:94:0d:c1:
78:6d:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:30 2026 by rpki-client