
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier: NoFm/d2aI823Oj791nFlJdMSWzV70S89gRc0SMa/0Mo=
Subject key identifier: DB:43:02:28:62:E5:B6:54:5F:E6:B5:DF:C7:E4:9E:B0:84:45:B2:A2
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number: 0204
Signing time: Wed 25 Mar 2026 02:26:38 +0000
Manifest this update: Wed 25 Mar 2026 02:26:37 +0000
Manifest next update: Wed 01 Apr 2026 02:26:37 +0000
Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: tChRG9puRuvhTAyvftZAMj9whA3y137JgJ1GvTbpWu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Validity
Not Before: Mar 25 02:26:37 2026 GMT
Not After : Apr 1 02:26:37 2026 GMT
Subject: CN=69c347de-2b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:5e:b9:df:62:73:09:12:30:32:57:46:c6:
33:10:aa:95:28:04:e4:c8:d7:44:d5:5b:51:c0:3d:
9a:6e:a5:af:55:f7:20:c6:c7:66:d9:1b:43:84:da:
b2:0d:ee:67:c4:a4:09:ca:ef:77:eb:7f:47:a0:9d:
5b:d8:25:f8:c9:9e:00:77:58:2f:09:22:68:a7:da:
21:33:0f:8f:2d:a0:89:27:41:2c:2d:f2:63:51:c9:
2f:86:f9:7e:21:9d:c6:8d:0a:57:16:5e:01:fd:aa:
32:43:03:73:76:80:db:2a:12:87:b7:f8:25:13:fd:
43:92:99:3f:5b:7e:47:94:ed:10:97:5a:67:0f:f7:
73:c7:94:29:94:fc:98:47:92:06:9d:f3:aa:46:67:
f0:50:ef:4d:70:f5:6c:98:8d:14:c4:b0:04:e3:bd:
48:f8:97:10:31:15:b1:b3:22:1d:a7:cc:70:d6:33:
d7:27:86:a7:82:11:cd:6d:e1:3b:69:23:bf:97:b6:
64:97:14:78:e7:45:9f:30:bc:cd:77:bb:04:09:5b:
33:f1:dd:a4:c2:24:6a:45:b5:aa:a5:b8:3c:9b:d9:
58:c9:2b:61:a6:f1:8f:4f:5f:c7:94:b7:c2:ef:72:
d7:62:c8:e8:c4:5f:39:2a:ba:ea:d5:b0:86:06:6c:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:43:02:28:62:E5:B6:54:5F:E6:B5:DF:C7:E4:9E:B0:84:45:B2:A2
X509v3 Authority Key Identifier:
keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4d:21:db:0c:1b:16:a4:a4:86:fd:a9:ef:57:61:97:b0:ff:
2c:88:b0:53:3e:80:8c:6e:89:6d:8a:5d:d3:3b:25:a9:f3:c5:
d1:c0:3b:71:ef:d7:78:50:79:75:a8:36:29:a7:e5:8a:db:df:
77:81:8d:98:2e:e9:05:1d:7d:0e:15:1a:ab:4b:46:6b:a5:c4:
dc:03:91:40:9c:2f:c7:49:99:b7:0c:4e:21:4b:ab:61:f4:85:
38:23:32:38:a0:5c:d2:7a:62:27:65:67:f0:e9:92:a3:76:d7:
7e:9b:ec:3c:9f:65:cd:f9:67:79:3b:7a:8c:8b:60:3f:8c:be:
cb:6f:7a:f2:f3:03:13:1a:2f:a8:fa:98:95:36:97:0d:cd:ac:
67:03:4a:3d:cd:ec:3c:73:d5:d4:4e:91:5d:67:a4:6f:0c:7e:
23:99:11:64:cf:39:f6:30:99:4e:d8:d3:a3:99:1c:2c:36:6d:
ba:42:e4:f8:15:8e:e2:ce:25:b7:83:f0:b6:9b:ba:f1:9a:7f:
68:c9:7d:38:d3:a7:d7:4a:ac:15:ca:a3:fb:ed:09:6b:9b:ed:
99:b8:46:7a:5e:5e:ea:00:68:f5:93:80:12:85:d1:c1:6c:ff:
eb:03:72:04:5d:96:a1:b4:5a:08:d5:1b:5f:c4:bb:33:2b:1c:
c1:87:e9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:07 2026 by rpki-client