
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft
File: lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft (raw, json)
Hash identifier: zXfuGfxKeKGnHIm0gpDR26gbUPy6fxzqxHINuVvVbpE=
Subject key identifier: A7:90:11:B9:12:F0:B1:D4:EE:76:07:F3:8A:5E:9E:D3:95:48:25:62
Authority key identifier: 94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D
Certificate issuer: /CN=A91E41C9/serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D
Certificate serial: 0984
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft
Manifest number: 0A2E
Signing time: Thu 24 Sep 2026 20:00:18 +0000
Manifest this update: Thu 24 Sep 2026 20:00:17 +0000
Manifest next update: Thu 01 Oct 2026 20:00:17 +0000
Files and hashes: 1: lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl (hash: deXXTfUZjKMschk1MpgrnWkUirG2T9tSpP8iodqDOJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl
rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2436 (0x984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E41C9, serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D
Validity
Not Before: Sep 24 20:00:17 2026 GMT
Not After : Oct 1 20:00:17 2026 GMT
Subject: CN=6ab58151-0f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:f9:61:09:ab:cb:0b:1b:98:e7:af:3d:d4:
31:ef:90:2a:9c:2f:f4:fa:3b:39:19:87:9e:85:6f:
19:8c:09:a8:9d:65:d8:3e:a3:80:b2:8c:58:b1:36:
c6:a4:95:d9:89:23:2d:97:7d:31:93:df:46:7f:22:
06:7c:07:e5:d7:7e:3e:14:06:c9:78:de:60:fc:b7:
82:b1:01:d7:85:5d:ae:68:55:2d:64:8b:d1:4b:73:
ba:e4:25:3f:b2:64:7c:69:55:20:76:56:90:03:aa:
bf:59:d2:9d:0a:60:a4:f0:a8:4d:04:dc:26:ef:20:
55:8e:56:c2:1a:86:89:07:71:5d:5a:5a:a3:bd:29:
b2:c7:b5:96:bf:36:42:53:8e:fb:ad:65:3c:90:bc:
71:8d:61:6f:09:47:48:85:ba:33:75:fe:9c:86:01:
4a:98:27:00:51:85:e8:59:36:12:4b:a9:cd:b7:60:
d3:70:63:c3:90:44:77:88:ab:4f:53:83:6c:b7:9c:
e5:61:b2:09:0d:8a:9f:39:c2:af:4c:1e:18:25:ab:
95:32:2c:42:d6:36:4e:4a:91:8b:e1:23:71:04:be:
ef:60:de:fa:88:b9:de:c4:5d:e2:e5:b2:55:9a:22:
ab:7a:91:c9:19:2f:69:12:31:ab:2f:f1:e5:63:ef:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:11:B9:12:F0:B1:D4:EE:76:07:F3:8A:5E:9E:D3:95:48:25:62
X509v3 Authority Key Identifier:
keyid:94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:64:b6:8e:03:38:79:77:5f:95:8d:00:38:8e:46:8f:fe:0c:
be:6f:29:21:14:a9:ed:71:af:bf:43:b9:fe:e7:c5:50:ba:b2:
41:42:9a:fc:90:47:1b:91:eb:c8:b7:1d:b0:13:f9:da:d0:dd:
2b:f0:1f:b4:b5:72:27:d1:f4:bf:19:ea:85:73:10:1c:ef:c5:
12:1e:66:32:90:dd:80:26:52:55:92:59:dc:d2:5d:5f:46:56:
6a:68:6c:00:21:a0:43:43:81:fd:82:0a:8b:67:d5:9d:ff:f1:
75:c2:f8:bb:81:1f:c9:8e:95:30:bc:ea:0f:77:c9:2c:8a:00:
0d:8c:be:70:ed:dd:10:4c:3d:3b:3b:c3:7c:4a:8e:ed:78:7c:
65:6d:41:e7:2c:b4:7b:73:70:c3:04:f4:87:95:26:ee:dc:84:
65:f3:5a:9c:a7:c7:b4:31:aa:0c:ad:c3:29:d8:23:c9:34:15:
d3:3e:86:e9:ca:1e:2a:3d:e6:fb:b0:a9:73:21:44:71:5e:3f:
03:0e:cb:5f:23:2d:3b:ab:98:fb:8e:75:57:ab:49:f9:31:d8:
b6:27:f8:03:3c:78:dd:37:5d:e7:ee:42:64:dc:c8:97:de:03:
0a:ac:92:2f:b6:cf:54:52:8b:7f:fc:71:cd:d3:22:d6:5f:8e:
8d:48:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:34:24 2026 by rpki-client