
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
File: laNNlXWF4FXwNo5HTaPR-bvPqN8.mft (raw, json)
Hash identifier: 1yBWBX7xklttOnbh1UqxTT0pZpIMsxK/v2YAsdgmY+U=
Subject key identifier: 65:1D:D9:2A:E7:09:9C:A3:EC:42:56:03:D2:AC:94:80:C8:5B:A2:57
Authority key identifier: 95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
Certificate issuer: /CN=A91D2B56/serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
Manifest number: 0C
Signing time: Mon 11 May 2026 09:18:29 +0000
Manifest this update: Mon 11 May 2026 09:18:28 +0000
Manifest next update: Mon 18 May 2026 09:18:28 +0000
Files and hashes: 1: laNNlXWF4FXwNo5HTaPR-bvPqN8.crl (hash: /wIFA10yLeEvFAhZ0iK/PsGdGdnHTWqv0/IE4xhQrAo=)
2: 04EDE6343E2B11F1B4A6C6E4B6833773.roa (hash: iVmvGDCFN84Pkf1vGvrKze2zsX7JLtz20kszTrEJLI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B56, serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Validity
Not Before: May 11 09:18:28 2026 GMT
Not After : May 18 09:18:28 2026 GMT
Subject: CN=6a019ee5-faf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:fa:1f:e7:0e:d8:a0:5e:18:17:c9:fa:e6:
02:34:fa:43:05:41:c5:9b:69:da:03:41:da:8f:0c:
8d:9b:6d:03:60:22:37:1d:cd:74:68:87:8c:3a:3a:
e4:cf:61:0b:2f:d0:f2:b7:3a:bb:65:8d:f6:ea:67:
2f:70:5c:89:4a:d2:a9:1c:28:6c:9d:0b:bd:af:81:
3c:98:87:8b:e0:4d:75:b6:2f:fb:d2:23:4e:0f:de:
2e:4a:24:eb:ec:16:e5:00:30:d1:9f:cb:f9:81:b6:
ba:8c:4b:9c:e0:2d:ab:e6:5b:8e:ba:a6:4f:a2:0b:
e1:74:cf:ed:0d:a9:b6:70:f7:48:15:c6:a4:00:d4:
4b:ff:c9:f0:4a:1f:24:0c:7e:fa:9f:d0:83:b7:d0:
29:87:21:cb:78:36:47:c0:f9:7a:15:c4:e1:d9:b4:
4c:8e:16:d6:76:6f:32:66:9f:41:62:3e:c5:de:75:
32:5c:ef:78:c9:b8:f0:51:e7:9c:32:82:c0:a7:63:
02:af:6b:4e:bb:d4:41:f0:f7:54:79:16:d9:de:ae:
ea:10:71:15:50:c2:d5:1c:08:52:26:e2:0f:6e:e3:
d1:05:97:3a:7d:86:7c:fc:eb:08:f5:77:5c:8d:ff:
92:24:f7:6d:01:7e:fc:bc:44:5c:18:65:3a:79:26:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1D:D9:2A:E7:09:9C:A3:EC:42:56:03:D2:AC:94:80:C8:5B:A2:57
X509v3 Authority Key Identifier:
keyid:95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:84:d3:5e:27:b1:c0:1f:cd:f4:e4:8a:20:e0:0f:16:9e:63:
eb:c4:dc:d6:68:fe:25:fc:06:8b:20:cc:f7:81:0c:f1:27:66:
85:63:1d:21:b8:02:4b:d7:36:78:6f:6d:27:f5:97:b6:a2:83:
92:c7:ca:cb:68:f4:7e:90:7f:71:d9:5f:81:c3:8a:3c:c9:fb:
eb:18:55:af:50:39:ed:8e:19:e5:1a:bb:03:89:b2:27:49:8c:
eb:9b:fb:0e:9a:6d:b1:1b:67:3e:fe:d7:43:05:e4:37:06:b4:
f4:6f:85:5c:0c:4f:1a:4a:20:14:45:c7:c1:39:b2:19:02:69:
d7:70:85:6e:74:77:47:85:c9:cc:bd:f6:c2:56:44:cd:86:e1:
18:e7:2a:4c:eb:72:fb:4e:fa:aa:36:84:ca:af:99:d3:21:10:
2c:cb:8e:ff:c6:15:c3:16:f9:d0:da:7d:54:94:01:35:49:66:
59:42:29:c0:67:2a:6b:5b:fb:81:0e:86:53:16:11:2f:00:9b:
e3:7a:1e:da:bc:63:38:c8:2c:6d:04:11:95:82:ce:38:91:21:
d8:1e:24:ab:b0:49:2b:5e:7c:ae:66:56:3f:fe:e5:8a:05:15:
5c:2a:7a:cd:80:05:ba:5c:84:4f:ed:fd:4f:d0:9c:a0:66:88:
7b:95:0f:8c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MkI1NjExMC8GA1UEBRMoOTVBMzREOTU3NTg1RTA1NUYwMzY4RTQ3NERBM0QxRjlC
QkNGQThERjAeFw0yNjA1MTEwOTE4MjhaFw0yNjA1MTgwOTE4MjhaMBgxFjAUBgNV
BAMTDTZhMDE5ZWU1LWZhZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWcPof5w7YoF4YF8n65gI0+kMFQcWbadoDQdqPDI2bbQNgIjcdzXRoh4w6OuTP
YQsv0PK3OrtljfbqZy9wXIlK0qkcKGydC72vgTyYh4vgTXW2L/vSI04P3i5KJOvs
FuUAMNGfy/mBtrqMS5zgLavmW466pk+iC+F0z+0NqbZw90gVxqQA1Ev/yfBKHyQM
fvqf0IO30CmHIct4NkfA+XoVxOHZtEyOFtZ2bzJmn0FiPsXedTJc73jJuPBR55wy
gsCnYwKva0671EHw91R5FtneruoQcRVQwtUcCFIm4g9u49EFlzp9hnz86wj1d1yN
/5Ik920Bfvy8RFwYZTp5JovrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZR3ZKucJ
nKPsQlYD0qyUgMhbolcwHwYDVR0jBBgwFoAUlaNNlXWF4FXwNo5HTaPR+bvPqN8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjU2LzM4QzFFOUFBM0Uy
NzExRjFCQTI0QzU5REI1ODMzNzczL2xhTk5sWFdGNEZYd05vNUhUYVBSLWJ2UHFO
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbGFOTmxYV0Y0Rlh3Tm81SFRhUFItYnZQcU44LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
QjU2LzM4QzFFOUFBM0UyNzExRjFCQTI0QzU5REI1ODMzNzczL2xhTk5sWFdGNEZY
d05vNUhUYVBSLWJ2UHFOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCnhNNeJ7HAH8305Iog4A8WnmPrxNzWaP4l/AaLIMz3gQzxJ2aFYx0huAJL1zZ4
b20n9Ze2ooOSx8rLaPR+kH9x2V+Bw4o8yfvrGFWvUDntjhnlGrsDibInSYzrm/sO
mm2xG2c+/tdDBeQ3BrT0b4VcDE8aSiAURcfBObIZAmnXcIVudHdHhcnMvfbCVkTN
huEY5ypM63L7TvqqNoTKr5nTIRAsy47/xhXDFvnQ2n1UlAE1SWZZQinAZyprW/uB
DoZTFhEvAJvjeh7avGM4yCxtBBGVgs44kSHYHiSrsEkrXnyuZlY//uWKBRVcKnrN
gAW6XIRP7f1P0JygZoh7lQ+M
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:49 2026 by rpki-client