
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json)
Hash identifier: 1W7TKjATjyda69oV0rB++8oyDtVcdVZ072ZAh/FtQwk=
Subject key identifier: 28:18:F1:94:76:5D:4C:B1:A3:48:C6:D6:B6:3F:82:B0:8C:D9:4E:D0
Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
Manifest number: 0109
Signing time: Mon 11 May 2026 06:10:41 +0000
Manifest this update: Mon 11 May 2026 06:10:41 +0000
Manifest next update: Mon 18 May 2026 06:10:41 +0000
Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: JGqgGXIzsfwCrW1nuJw1V4/zmXq4NUA+eufJ2zzxk0I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Validity
Not Before: May 11 06:10:41 2026 GMT
Not After : May 18 06:10:41 2026 GMT
Subject: CN=6a0172e1-d36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:bc:3a:fb:b4:cd:ca:fd:41:59:bc:ef:6f:
5a:bd:2c:c7:aa:84:51:44:4a:fb:c7:43:49:39:28:
33:91:3c:af:61:b5:f7:fe:d8:0e:d9:66:85:cc:db:
f6:86:7a:f5:4e:2e:2b:8a:e5:28:a2:85:a2:c3:73:
bd:d1:68:ea:07:ed:6f:14:e1:31:e4:54:fc:70:d9:
4c:6e:72:69:8f:be:9e:03:76:d3:5d:c7:92:f4:11:
f5:c0:22:9c:fa:ab:bf:bb:6d:f2:5b:77:9c:1e:ab:
f0:b3:dc:92:4e:10:8b:bd:ad:94:47:72:e1:d7:0f:
6b:1f:5a:e4:d8:cd:8b:57:2c:f7:4e:5e:ab:1e:13:
43:03:5e:d0:44:0b:1c:52:a6:00:3e:cd:7c:a5:c2:
14:b7:f0:bb:ab:56:ca:b7:3c:27:28:2f:10:0e:7d:
35:ce:51:aa:b5:d8:2b:6c:dc:ce:8d:63:af:25:55:
13:8e:23:fd:a5:95:5b:bf:a9:ba:cd:e9:9b:46:cd:
28:75:53:f0:77:94:39:6b:8e:b4:cd:8c:d1:4f:e0:
61:d2:25:cb:a8:02:e6:45:37:7e:c4:25:bd:5b:b3:
ef:a0:32:9e:57:29:85:59:ff:dc:22:c7:ba:12:51:
a8:f4:f5:9c:6c:4d:f4:f3:64:9b:ca:30:b4:b1:52:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:18:F1:94:76:5D:4C:B1:A3:48:C6:D6:B6:3F:82:B0:8C:D9:4E:D0
X509v3 Authority Key Identifier:
keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:a6:88:13:8f:d1:3c:10:f7:7f:15:a2:c1:6e:03:17:c6:8c:
57:42:80:26:17:02:43:e3:42:19:25:6d:e4:67:45:8f:c6:54:
86:3a:17:69:ee:d8:5b:80:c1:e5:4e:e2:8d:92:e3:88:db:7d:
46:a0:4c:bb:5e:68:fc:50:a6:ca:26:52:f8:5b:77:20:a2:a8:
86:09:71:8f:1e:13:73:6a:85:59:f8:c3:fd:a3:75:a0:03:b1:
54:65:71:a3:9a:fd:78:c8:8d:79:24:78:3d:4d:45:9d:ac:fe:
a1:e9:af:03:a2:93:de:aa:f2:0b:1b:01:15:97:86:75:60:81:
37:63:1a:f6:ea:75:76:07:e6:4e:1c:42:90:78:4e:27:05:a9:
fd:e9:34:e7:ea:31:cf:24:46:12:83:be:3a:36:26:94:24:49:
3a:53:04:70:47:ee:f5:78:52:a2:1b:b8:bd:39:a0:b6:c8:4b:
62:27:f9:42:0a:6e:a6:ce:7d:bc:ae:29:a9:c1:7a:c2:d0:e0:
c5:f8:94:26:7a:42:d1:5c:44:a9:99:74:db:02:ed:88:eb:db:
a1:2c:ff:d3:b8:f6:61:2f:f0:6c:21:84:c2:75:89:c5:ab:ee:
f9:05:ba:e1:36:3d:26:05:53:f7:38:87:04:5e:bb:ec:f9:46:
c9:20:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:27 2026 by rpki-client