
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier: oNeyWcm9TxWHPw5+Pk2EtzGq6m6UcFIaRVvYoeazBBw=
Subject key identifier: 51:A5:6A:F7:0D:ED:EE:A8:88:E1:DB:41:F6:D4:E4:EB:DB:30:90:CA
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number: 0123
Signing time: Mon 11 May 2026 05:50:07 +0000
Manifest this update: Mon 11 May 2026 05:50:07 +0000
Manifest next update: Mon 18 May 2026 05:50:07 +0000
Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: 2Grj1moLxM0wzVocR4TE6hKhstX27NXq4K/2sqZF02M=)
2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: 0xJgLLQMgNeeyXMGKZCWdqUjam0KGjviyUJK/ppp7i8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Validity
Not Before: May 11 05:50:07 2026 GMT
Not After : May 18 05:50:07 2026 GMT
Subject: CN=6a016e0f-27e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:ac:80:6a:71:30:30:71:83:a9:ba:65:c7:
f4:59:66:f6:eb:56:c3:32:19:c1:34:78:ea:d2:0d:
c6:6f:40:8d:7c:b7:c4:e2:5c:51:c6:b4:5e:43:a3:
31:e7:ec:f0:49:1e:20:a6:fd:d6:03:0c:0b:6e:4b:
a5:7f:17:d4:2f:f3:0d:ec:00:e9:f3:61:fb:b7:a9:
4b:c5:9b:bc:8f:86:b3:ee:7f:84:3c:3b:41:91:77:
11:e6:fe:ca:f7:51:a0:2c:0d:aa:68:65:c8:20:4f:
13:e0:88:e0:40:38:f3:c6:99:f8:e0:93:b9:96:85:
3f:58:7e:3f:d5:bf:66:b5:7e:90:70:cb:43:7a:a5:
b8:3c:37:1e:94:a5:04:2a:6c:60:bb:aa:9a:c4:97:
67:b0:8b:88:b9:ac:01:7d:c8:81:e4:80:c5:1c:a6:
05:d4:2f:c9:ed:83:9f:2b:41:30:7f:6a:ec:4d:39:
0f:30:3e:5d:05:9b:53:05:d4:5a:bb:3f:e3:cc:a0:
d3:70:37:5c:58:70:c8:65:23:4c:f3:dc:ba:e9:ec:
43:f0:3b:8a:51:f3:f1:65:4d:40:1f:5e:27:92:f5:
3c:ac:d9:88:96:54:61:a0:68:48:c9:dd:db:7f:32:
09:d6:a5:89:6f:e6:0d:1d:6c:a1:38:a5:c3:39:bf:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:6A:F7:0D:ED:EE:A8:88:E1:DB:41:F6:D4:E4:EB:DB:30:90:CA
X509v3 Authority Key Identifier:
keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:d1:69:dc:a1:f3:9f:b4:ef:73:5e:62:9d:ad:7c:55:1d:92:
06:3f:89:bc:15:f9:df:1e:5c:76:3d:33:c1:82:79:40:b1:4f:
a5:05:6c:41:8c:02:6a:e4:ba:d1:00:c1:bf:f3:bc:8b:50:28:
4a:bd:60:80:0e:46:7c:a3:c8:7f:5f:20:43:9f:fd:df:75:95:
c2:84:90:25:3b:9a:ff:b2:6b:50:9b:fa:01:39:80:b3:dc:bf:
e8:97:b4:3b:4e:fb:0b:e9:bf:39:9d:f1:28:29:2c:9f:f5:ca:
52:9e:d3:a9:8e:c1:ab:dd:ea:63:8f:8b:2d:89:c0:28:db:fe:
ad:9e:17:85:f6:a2:3e:f7:db:0c:62:4c:44:3f:4b:b9:d4:99:
c3:d7:29:b0:e0:7e:03:f3:f1:95:e5:b4:a4:26:53:90:b5:31:
da:6e:22:52:11:f1:ea:56:fb:64:5b:79:28:13:ae:a2:ea:b9:
8d:9f:a3:1d:36:04:ff:7b:f4:a8:c7:22:a3:7e:d6:71:12:ed:
b9:f5:10:67:a2:fc:5e:2b:86:7e:6f:ef:69:47:89:59:50:1e:
f9:f9:d4:b6:e8:30:13:fb:d0:a2:94:ab:37:c2:33:81:ab:5f:
c4:45:58:48:23:7e:47:33:5b:ad:1a:4f:e2:07:70:d9:36:99:
02:e3:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:37 2026 by rpki-client