
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
File: ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json)
Hash identifier: ZnSCYAk+pp9in9n4b7k4mDkrbG7ol9wnbUmx0luwZQM=
Subject key identifier: 06:0D:0D:42:8C:61:A6:CC:A3:BC:74:3E:05:22:FE:F4:6A:92:DC:39
Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
Certificate issuer: /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
Manifest number: 0110
Signing time: Wed 25 Mar 2026 05:07:42 +0000
Manifest this update: Wed 25 Mar 2026 05:07:42 +0000
Manifest next update: Wed 01 Apr 2026 05:07:42 +0000
Files and hashes: 1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: g9vl8UmGF5D9sh11fgsGv/isLLBTu0YiIaCm/RDI+VA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Validity
Not Before: Mar 25 05:07:42 2026 GMT
Not After : Apr 1 05:07:42 2026 GMT
Subject: CN=69c36d9e-afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:e6:29:80:92:81:15:5e:c7:8d:3f:e6:be:
e1:e1:e0:a7:d7:37:f6:6a:43:a1:97:ba:e0:ea:11:
1c:9c:1c:64:bf:a2:07:e2:4c:cb:d1:ee:22:1d:26:
93:50:2f:d3:78:c1:1c:38:9d:fa:ee:d3:23:e6:7d:
22:37:d8:0c:ea:43:09:93:33:82:70:68:73:63:a5:
ab:64:82:b0:56:70:5a:07:08:cb:4d:bd:70:ec:ab:
e3:32:e2:39:db:90:2d:73:35:e3:b8:64:f2:3a:3c:
ba:9c:f5:87:9c:56:47:ce:dc:a9:81:86:1b:3b:c5:
0a:25:e6:de:d0:fa:43:a7:5f:c0:63:c2:2a:9a:df:
a0:4c:59:f5:ad:e9:07:da:f5:10:dd:48:a9:c5:5e:
78:8f:89:a3:66:a8:1e:36:e0:a4:84:b5:cb:39:c4:
c3:42:51:9a:24:0f:48:a4:7e:63:f6:bb:88:0c:3b:
4a:ca:3a:6d:52:4a:bb:d8:14:34:e1:88:ee:17:a8:
a1:6f:45:f6:68:2f:f8:f7:cd:22:0c:bf:76:a9:bf:
b1:2b:06:eb:87:9b:92:22:91:4f:06:94:43:35:60:
5d:ca:fe:5a:5e:68:5b:16:df:f9:c4:40:de:ad:ad:
f2:e7:3b:32:08:3d:24:80:ec:18:db:dc:29:fe:53:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0D:0D:42:8C:61:A6:CC:A3:BC:74:3E:05:22:FE:F4:6A:92:DC:39
X509v3 Authority Key Identifier:
keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:87:4c:76:6f:13:98:65:5c:31:c7:1c:ca:18:49:49:f6:d9:
9c:3d:0e:90:51:c0:80:ce:b3:47:06:ae:3e:c4:31:6b:3a:b1:
13:60:8b:d6:6d:6f:48:53:db:1e:31:30:fc:65:46:76:2b:4a:
e4:1f:30:60:70:53:82:f2:c6:aa:22:c2:65:93:39:cb:f9:ed:
bf:49:27:20:b3:7f:3d:fd:7f:39:cb:ac:f6:c7:41:8f:32:1b:
1d:84:a2:be:53:bd:5f:9f:de:e0:38:38:00:fd:dc:71:be:3b:
fd:23:02:8f:6a:13:1f:36:3c:fe:3a:92:b1:bb:7d:44:b9:f7:
21:3d:54:5c:c2:f1:ac:ae:8e:9a:e1:de:1a:95:43:dc:fb:c2:
ca:db:fe:c7:9a:ab:a8:8e:e2:d4:95:9a:b6:8e:63:a6:be:c4:
1d:71:31:af:3d:50:95:59:ae:c4:4f:32:06:07:18:99:ab:40:
57:98:5a:21:5c:c1:3b:d7:c3:14:21:24:ce:e5:34:21:d0:92:
51:1c:91:ae:20:c2:11:e1:98:92:c9:2d:0f:f8:69:a1:55:15:
1d:b9:75:7b:eb:f2:d5:95:b1:fc:0e:dd:78:dc:d1:6c:cd:a5:
39:c1:5c:b1:4e:a9:39:46:a0:d2:67:dd:92:be:d2:87:9d:4a:
4c:95:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:40 2026 by rpki-client