
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json)
Hash identifier: dkFfqcNIXxAMDhhDuWwh7FnkbIYxulvamqCki1tatNI=
Subject key identifier: FC:21:5B:27:BA:B3:B6:52:C3:F0:D0:A1:F1:57:13:73:13:36:9D:32
Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Certificate serial: 062E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
Manifest number: 0601
Signing time: Tue 24 Mar 2026 22:44:51 +0000
Manifest this update: Tue 24 Mar 2026 22:44:51 +0000
Manifest next update: Tue 31 Mar 2026 22:44:51 +0000
Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: Ojsyiy8LVpI20u2qU6zMNhF2T6dHp9H5YdygrnvgAiA=)
2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: bH1L9ZSWpulV/YHi19WJkDCesjZJBYuj3hbuB5QanKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Validity
Not Before: Mar 24 22:44:51 2026 GMT
Not After : Mar 31 22:44:51 2026 GMT
Subject: CN=69c313e3-62e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:07:62:be:70:b1:43:4b:49:15:cc:b7:40:
0f:e9:a7:55:52:5d:fa:42:41:22:14:38:f9:2c:ce:
0a:e0:85:a6:65:eb:67:0e:01:50:69:bc:06:73:39:
82:b3:c3:39:05:6a:a6:2b:08:cb:66:92:84:a7:ae:
19:8c:57:24:f3:44:26:54:d4:14:60:5a:15:56:1d:
e7:0a:19:d5:a8:16:fb:6e:82:9b:93:b0:1f:50:7c:
a7:66:94:ab:b8:9d:db:3e:0d:0e:f2:b0:21:9e:4e:
63:62:ac:66:29:77:aa:39:ae:7f:5d:fe:c9:6d:6d:
a5:e6:e0:56:b3:23:4e:d1:c8:ae:2a:17:32:ff:21:
bf:f3:b2:51:64:14:07:a4:0a:2a:43:81:cf:24:99:
0a:7a:d1:9c:3b:54:06:fd:c8:ef:5d:fa:0c:f1:2e:
79:68:7b:49:98:d6:70:3a:60:77:15:69:9f:3f:1f:
d4:6f:99:03:07:3d:cc:a2:16:ce:65:a0:99:4d:aa:
a8:22:6d:93:3c:e6:06:5f:71:9d:b9:71:52:3e:80:
4f:2f:80:ca:f1:1f:67:31:87:20:04:6f:07:fc:d3:
aa:c1:c5:df:79:0d:3d:03:3b:16:aa:5b:4c:72:54:
6e:56:ba:92:63:55:7c:90:ee:5c:a2:5b:ff:a9:07:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:5B:27:BA:B3:B6:52:C3:F0:D0:A1:F1:57:13:73:13:36:9D:32
X509v3 Authority Key Identifier:
keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:0f:21:ab:ce:e4:4f:b6:12:4a:9c:9c:cf:7d:3a:77:98:7c:
2d:d9:3b:4d:c3:d9:d8:6a:16:98:e9:12:e6:ab:08:81:98:51:
bb:67:a8:4d:70:5b:4e:1d:56:d2:2b:4d:4e:e5:19:f7:db:c4:
26:b8:f8:eb:df:a9:ce:57:23:66:62:30:54:47:52:5c:41:c8:
ae:32:f0:e3:b2:03:df:95:7a:7a:11:10:14:dd:77:ba:de:1c:
0d:65:19:51:28:fc:85:20:b7:23:9a:4b:17:ce:b1:f4:d8:9a:
8a:b0:02:46:00:67:cd:81:2a:5a:00:78:61:4c:9f:27:76:ac:
4b:18:e2:1b:7e:f2:03:a0:82:ec:33:c5:8b:fc:8c:50:c5:31:
96:dc:ab:13:19:6c:3b:74:cc:45:35:02:5e:c7:57:81:5b:78:
af:f4:f3:d8:40:a6:26:6a:21:59:b6:06:06:d0:6c:4b:f8:e3:
e5:06:c8:e1:9a:81:bb:6f:ed:31:3a:05:c5:bf:ff:0b:46:8c:
92:c8:d9:81:02:03:eb:10:51:3d:e5:aa:4d:bb:4b:4c:c7:61:
b0:68:fe:49:86:73:c6:ea:dd:fb:e2:8a:11:ff:88:20:76:e1:
7e:b6:8d:07:55:3e:49:d9:ff:b4:49:4b:6e:b4:d0:81:38:a6:
43:b5:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:40 2026 by rpki-client