
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier: U+oJUTRyZDTLF+MwEXackxfI+YXlhEZBNvtEqYQkagE=
Subject key identifier: 9F:44:D9:3A:3E:E7:EC:3A:AD:45:46:09:2B:2D:0E:6B:9F:17:6F:85
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial: 0414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number: 0406
Signing time: Fri 27 Mar 2026 00:12:24 +0000
Manifest this update: Fri 27 Mar 2026 00:12:24 +0000
Manifest next update: Fri 03 Apr 2026 00:12:24 +0000
Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: GBSZLD7d5oXcW1ccdzF5jl8oQxOGMgIhCY3bmH1ci4o=)
2: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: +eVu6aJGYqpyml/eLiLIE2eDY1fRJJpwPH8tGhdgBEM=)
3: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 5Q805Ctiz/A7dYa4MT9/HeE0VGVoYx9KlmeoT0i5WY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Validity
Not Before: Mar 27 00:12:24 2026 GMT
Not After : Apr 3 00:12:24 2026 GMT
Subject: CN=69c5cb68-4eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:18:25:89:0c:2b:61:a3:fd:2b:29:64:a8:71:
f6:0b:20:4e:26:32:66:6e:7c:a8:3f:b1:56:1d:15:
4e:00:b1:84:6c:4a:ca:3c:4e:48:ef:ae:69:11:e5:
9c:d8:7b:0c:86:a8:84:a5:f3:66:75:f8:dd:5e:32:
20:ab:4d:9b:5e:6b:5d:e8:95:eb:d1:ad:4a:56:49:
df:94:e1:4c:6c:2b:04:ae:a9:6d:e1:25:8f:64:c2:
fb:a4:a9:f5:9d:2d:a6:2d:f4:ff:17:57:cf:19:20:
19:12:28:9f:fa:a0:c6:e6:10:1c:c3:bd:5e:cf:dc:
f1:9f:a4:dd:54:67:42:af:f9:bd:8c:cb:0f:bb:96:
95:81:90:78:36:4e:46:2e:1c:73:19:98:86:96:79:
b2:f3:43:7f:48:6d:01:91:ad:77:07:91:ec:94:dd:
e3:73:7e:e7:5a:00:dc:da:9f:f5:22:87:82:9e:50:
43:19:49:0d:47:97:ef:db:45:87:22:20:5b:ac:36:
f9:80:4b:fe:03:27:7b:c9:57:7e:1d:71:3c:a7:4e:
cd:0b:8d:db:b6:f2:5c:ec:3c:71:ca:a5:07:89:3e:
f3:52:4b:26:61:e2:e3:41:f5:98:04:8a:f0:60:fc:
97:d0:5d:c5:78:a1:95:a2:34:1f:30:1f:54:3a:be:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:D9:3A:3E:E7:EC:3A:AD:45:46:09:2B:2D:0E:6B:9F:17:6F:85
X509v3 Authority Key Identifier:
keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:86:85:05:8c:4f:3b:43:5f:50:5f:00:d0:1a:a9:6b:c6:9e:
5b:3b:a9:32:f3:b9:8d:94:d7:ad:92:07:75:aa:d8:40:30:82:
6f:a0:ad:41:61:59:65:5f:03:a7:2c:53:58:e8:bd:01:37:1c:
9e:d2:13:e5:e6:73:0a:9c:55:27:fb:6e:ef:a7:52:9e:11:5b:
e2:04:3a:59:3a:fa:92:ac:d3:c1:63:67:34:c0:ad:68:0f:9b:
8e:b9:53:b8:26:02:69:a1:52:57:cb:c9:6d:77:f4:27:47:5d:
5e:1b:f3:dc:ad:e6:f7:70:00:d3:dd:2d:63:26:87:f1:f6:77:
b9:7a:d0:4d:ca:05:a9:98:d6:0c:ac:78:be:85:a6:26:b6:5c:
d5:d1:14:d3:04:a4:83:62:71:56:2a:30:a7:2e:3c:39:9d:3a:
f9:f3:5e:d8:45:25:2e:99:6c:ca:e4:6a:34:5a:de:14:10:e9:
b1:9c:91:62:5b:29:55:ad:d9:d3:58:9c:e9:3c:96:4d:e3:b5:
87:11:1b:22:61:63:42:95:b4:1f:c2:56:85:e4:a1:20:19:eb:
e2:03:26:a6:17:8b:e1:a0:dc:13:8d:7a:4a:79:50:c1:7b:ec:
a7:f0:55:3c:2e:d7:7a:52:18:42:e9:7b:5f:ed:08:6d:10:ad:
d7:f0:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:54 2026 by rpki-client