
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json)
Hash identifier: cF0sTmnyuoy4T+Mq9mGt2YtjpF3j8B4HXgMMFYyGXMw=
Subject key identifier: 85:54:02:B0:92:A8:B6:84:F6:0F:91:E9:95:CE:BF:7D:E1:E6:9E:E4
Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0
Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
Manifest number: 0156
Signing time: Wed 25 Mar 2026 04:16:33 +0000
Manifest this update: Wed 25 Mar 2026 04:16:32 +0000
Manifest next update: Wed 01 Apr 2026 04:16:32 +0000
Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: 6MyDqtPmPhLuTWZ+fVzK3caxgaatojHf8Tl32eO7pgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl
rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0
Validity
Not Before: Mar 25 04:16:32 2026 GMT
Not After : Apr 1 04:16:32 2026 GMT
Subject: CN=69c361a1-a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:4c:68:f6:c4:41:b6:83:d7:be:06:ed:51:
dd:f2:5f:f2:43:de:71:e0:dd:67:52:ff:eb:1d:d3:
05:1a:f2:7d:bd:df:b3:cd:91:ed:ce:d6:74:b3:d3:
a4:b1:bd:69:ce:0f:56:90:e3:9a:82:ff:e5:8e:b6:
4b:e2:fc:f0:ef:aa:df:3a:e3:b0:2a:7e:23:7f:7f:
f4:3d:bf:6f:92:6f:1f:c4:f7:32:fe:a1:b4:b0:ba:
47:78:c6:1f:d4:2d:2c:b8:ad:fb:2c:b9:b1:a3:37:
59:3f:f3:3d:8f:6b:4d:b0:cc:43:39:6a:b9:91:0a:
a3:15:84:d3:39:44:1f:35:d4:b2:65:bb:2e:1c:e0:
d9:47:a6:3e:7d:1c:ed:87:29:ef:32:6e:00:cf:03:
dc:e1:c2:8f:2b:04:5c:ab:c6:a8:d3:fe:f3:fd:82:
9f:f1:de:f0:4c:24:c3:51:c0:27:b0:55:98:c9:66:
2d:41:be:41:0e:a8:32:3a:d3:92:0b:a5:05:94:93:
67:80:53:db:5b:d7:29:41:b9:68:6f:9e:4a:b1:0b:
d5:7c:ea:03:1e:8b:b3:24:25:24:16:09:f9:78:78:
5d:12:20:72:19:42:c5:f1:41:7d:90:df:e5:46:40:
c6:e6:34:2d:5a:ac:15:bc:2d:c5:e4:d8:c6:c7:da:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:54:02:B0:92:A8:B6:84:F6:0F:91:E9:95:CE:BF:7D:E1:E6:9E:E4
X509v3 Authority Key Identifier:
keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:30:45:0b:0c:a2:bf:46:84:64:26:47:0d:2a:ee:8d:c3:a2:
07:bf:08:46:b3:e2:71:c1:73:cd:31:a0:85:4a:39:d9:56:d8:
ac:0d:f6:4a:09:b5:80:36:80:b3:94:00:05:b0:d6:01:2d:82:
d9:f2:2b:a4:9c:e9:a7:4b:56:15:ae:de:e0:a7:1a:4e:df:dd:
7b:6c:b4:bb:c2:40:16:e9:4a:c8:83:ce:9f:39:e8:d5:1b:0e:
5e:5d:51:32:48:8b:3d:ff:0a:c9:24:5c:e6:71:b0:ac:5e:2b:
75:29:e4:90:a0:f1:73:59:61:a1:6c:76:ea:8b:68:e7:ab:0f:
e2:b0:cb:9a:76:82:83:7c:e2:2b:cd:ab:e3:08:15:c9:24:4f:
f7:5d:23:b7:28:a6:49:41:12:e1:91:39:62:85:e0:e5:ff:54:
34:0b:fc:be:51:15:60:78:01:66:92:06:3c:46:c7:7b:0c:89:
fb:17:81:ee:dc:69:f4:57:fc:4e:cf:01:3f:45:07:e5:3f:0d:
7b:dc:1f:f5:c1:28:bb:04:98:f2:cb:68:4c:76:96:f5:7e:12:
5f:fa:c9:1c:1c:12:70:f8:8f:a0:2b:89:12:c7:4c:43:cd:92:
8f:d5:f2:da:d7:9c:80:e9:ba:0c:57:f5:c9:ce:2d:69:81:f1:
d3:3b:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:09 2026 by rpki-client