
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
File: lNLPRKNppCI0T3ZXg78B6YKpxAE.mft (raw, json)
Hash identifier: yc2syJMjXZzN6e/nwd1eovcjHGBDtGsm5wTtEpQhbhI=
Subject key identifier: 93:D5:42:3A:DB:88:29:C2:07:82:24:A9:3D:6E:57:E2:84:5A:0A:84
Authority key identifier: 94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01
Certificate issuer: /CN=A91D2A10/serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
Manifest number: 1F
Signing time: Mon 11 May 2026 09:05:28 +0000
Manifest this update: Mon 11 May 2026 09:05:28 +0000
Manifest next update: Mon 18 May 2026 09:05:28 +0000
Files and hashes: 1: lNLPRKNppCI0T3ZXg78B6YKpxAE.crl (hash: TFECBQVIzPnF2kKNhK3gGZprt4nAY8yv/ih5+UiduN8=)
2: A1E11254233211F193BBD607A5833773.roa (hash: yATqUA3STQ8R5PmkT2WcIp8HtIqcDGU6lhFcb0afmd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl
rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A10, serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
Validity
Not Before: May 11 09:05:28 2026 GMT
Not After : May 18 09:05:28 2026 GMT
Subject: CN=6a019bd8-5eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4f:4a:50:29:1e:0d:de:b3:8e:02:27:06:73:
03:fa:f0:8a:0f:e9:76:e9:b7:fb:d8:31:26:77:77:
d1:f6:a9:a6:54:81:4c:7a:f7:f6:e7:80:1d:60:61:
c8:30:6b:ba:8e:75:71:e0:67:d0:98:50:ea:87:50:
d3:4b:ae:f4:b8:50:87:2d:2c:6f:e3:25:de:99:82:
36:96:46:d2:ba:bd:35:1b:1d:ff:47:1b:ac:0d:b4:
f7:f0:57:24:f7:41:17:6c:de:be:c7:2c:0b:48:e5:
de:1d:01:5c:8d:56:99:77:8a:3e:83:cc:08:42:90:
93:37:6d:11:c2:c2:71:14:bb:0e:f2:f5:57:2d:c9:
0b:cb:f7:79:25:03:17:01:d9:e2:be:30:40:cc:ec:
03:48:74:ed:c8:71:d2:df:76:02:ee:0a:8f:b8:89:
50:30:02:a8:40:db:c4:3d:3f:13:64:29:39:be:ca:
01:8b:4d:8f:6e:66:50:b7:c5:2c:2c:cc:87:d1:3e:
ca:5b:65:e9:9e:65:f3:38:50:ce:6d:8d:de:c7:5a:
2b:a1:fb:83:4d:28:21:8d:ce:22:1f:63:69:c4:d9:
ff:88:ac:8c:08:67:5f:09:04:04:20:de:64:f6:57:
7e:74:cf:99:97:4c:ac:5d:45:c8:e0:40:d3:15:91:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:42:3A:DB:88:29:C2:07:82:24:A9:3D:6E:57:E2:84:5A:0A:84
X509v3 Authority Key Identifier:
keyid:94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:3b:4b:41:57:1a:06:a7:33:54:0c:f7:1c:a1:fa:98:50:
d1:99:58:32:dd:1a:ca:1d:9a:a6:7c:9b:01:02:5d:e3:74:90:
16:39:35:2e:bc:ac:ab:f0:7a:8e:4e:aa:1e:5c:ec:18:c6:f0:
3f:df:bb:15:f4:d6:ac:60:cd:d9:31:7a:3d:e4:83:dc:7c:a6:
c3:82:5b:e2:53:0b:72:81:b8:0a:d7:f0:32:2a:ed:4b:c0:1e:
2d:04:c1:f8:2f:4c:a7:35:3b:1d:5a:22:5a:79:25:b8:f7:51:
6a:6f:21:bf:73:09:0b:1b:3f:ed:93:4a:57:3f:66:28:9c:a3:
e7:12:a3:14:55:8f:7a:b3:56:4c:70:ca:c2:47:b5:e0:fb:22:
ae:6e:83:da:87:e0:04:98:8a:09:fd:e2:17:4a:f5:da:64:84:
65:83:9b:db:4c:83:28:bd:02:af:07:0d:3a:68:f0:c5:ac:8a:
2b:43:0e:43:7a:87:fe:aa:17:17:29:17:91:f2:24:39:13:3f:
f9:25:e1:27:4b:b6:94:5c:2b:2a:16:97:6c:6f:5b:ca:53:53:
dc:53:db:6d:d7:44:5e:7e:0d:da:ef:82:ce:1c:82:f9:8b:a1:
5c:00:43:19:45:9a:8f:ad:91:ca:62:3a:43:62:43:e9:56:08:
c5:99:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:54 2026 by rpki-client