
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
File: lHy2dKhYzZGupVJro2aKEeSey5M.mft (raw, json)
Hash identifier: MJ8f7zWGBg/3YfWBF7en9VpJrmtim1OnLiZSYYLElhQ=
Subject key identifier: 12:DF:40:40:97:05:A1:7A:F6:CB:A9:0C:26:5A:C1:63:48:39:65:6D
Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Certificate serial: 049A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
Manifest number: 048D
Signing time: Wed 13 May 2026 00:09:09 +0000
Manifest this update: Wed 13 May 2026 00:09:09 +0000
Manifest next update: Wed 20 May 2026 00:09:09 +0000
Files and hashes: 1: lHy2dKhYzZGupVJro2aKEeSey5M.crl (hash: TB6Hd5hnuX6Kogq6eEBnpqjwYM13v+KRCDZERBbmTyw=)
2: 147D51CA85B111ECB675B552C4F9AE02.roa (hash: 1pV5x+wzFKlIURLdK4W0ATECc1pPeoL8XQh/coLs8yw=)
3: 13F5D28685B111ECB675B552C4F9AE02.roa (hash: 89nb39WeO+2Ub6Nf3O9bYYBJxsIA87zSaSarp1B+j1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Validity
Not Before: May 13 00:09:09 2026 GMT
Not After : May 20 00:09:09 2026 GMT
Subject: CN=6a03c125-2641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:ed:e6:ef:55:60:e6:e2:dc:06:9c:5f:0f:
f9:40:3e:d7:4f:56:8f:0d:7d:32:f5:b8:55:0d:f6:
77:e9:3e:1e:b8:21:d1:8d:3a:3a:27:93:c1:44:03:
9a:ce:99:70:33:da:42:d1:5e:00:87:a8:bf:42:77:
cf:db:86:a2:5b:15:ad:42:4f:eb:1e:16:3f:85:92:
7d:76:21:0d:be:20:f0:5d:ef:7d:c5:51:c5:51:1b:
cf:77:83:9f:6a:89:43:3a:89:98:bb:24:d9:84:7c:
b5:39:dd:81:fa:bb:28:b1:a6:85:43:6c:31:d2:23:
60:1d:f9:77:4f:7e:ef:a6:76:1e:68:92:c8:8a:8b:
e6:e9:37:41:a5:d2:cc:de:c4:94:ac:5c:16:5c:d9:
76:25:53:39:29:c3:7d:84:f4:40:70:9d:13:6c:a4:
2c:d7:df:30:5e:e2:92:3a:e8:ba:cc:5e:d5:33:cf:
03:62:0c:03:04:b5:c7:fa:ff:81:8b:45:a9:25:37:
cc:d9:b4:9a:61:cc:dc:7c:fa:f7:71:f5:d5:44:38:
9c:ce:25:e8:2d:b3:75:37:33:ed:f0:3b:66:be:e8:
21:a7:5e:5a:92:ed:5c:23:46:f8:eb:83:34:06:4f:
f2:18:25:83:f8:3b:b0:5e:d0:77:7d:4e:0f:04:15:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DF:40:40:97:05:A1:7A:F6:CB:A9:0C:26:5A:C1:63:48:39:65:6D
X509v3 Authority Key Identifier:
keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:97:66:6d:62:78:2e:9a:a8:17:bb:11:14:43:39:5a:1c:8f:
5b:22:e8:80:f8:99:f3:fa:b1:a1:ea:fd:99:1f:64:75:1b:67:
c9:5e:b3:db:e9:09:7f:bf:4f:82:e4:af:50:7d:83:97:bf:2f:
82:08:a6:ff:f2:81:59:8a:22:ff:0a:f3:3f:2d:8f:52:c2:ab:
c8:a8:56:92:07:ee:01:72:dc:2f:9b:f7:bd:3d:08:04:d0:e9:
70:b1:24:ea:67:8d:9f:dd:0d:e5:41:f0:d6:75:e1:ec:6a:76:
6d:2c:1e:a6:08:fc:c1:11:41:90:c2:a9:93:e5:d8:38:c3:64:
8f:37:c7:74:c9:b0:fe:b2:01:09:8f:2b:c0:fb:89:09:c9:c2:
ff:f2:f2:a6:5e:3a:bf:33:67:cd:3b:14:ac:b5:e2:da:66:ca:
47:c2:83:0b:d6:45:d8:9d:1d:38:81:3c:68:af:b8:ed:99:51:
4b:0d:03:57:bc:97:61:f4:e5:2a:c6:d4:9e:b1:30:47:8d:db:
16:ae:ae:d4:08:76:e3:c4:17:ed:63:05:56:d1:91:ac:95:b3:
6f:6f:13:ab:b6:49:52:57:de:81:0b:a3:95:d2:46:3e:26:14:
d8:26:1b:04:b0:ba:4c:99:3f:11:bc:a0:91:34:17:3a:da:94:
eb:52:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:14 2026 by rpki-client