
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json)
Hash identifier: vZGHhg2G/7gqe3oaxWlKtvNcykSPEzqnPmH0Z9rSOUw=
Subject key identifier: 0A:02:D1:32:F2:7B:BA:6F:61:DE:DE:05:2F:ED:DF:2C:A7:E6:B8:95
Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
Manifest number: 011A
Signing time: Fri 13 Nov 2026 06:04:17 +0000
Manifest this update: Fri 13 Nov 2026 06:04:17 +0000
Manifest next update: Fri 20 Nov 2026 06:04:17 +0000
Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: 6dxvTsZa7Dafrx2J9N+/Ukq4wKpI6JnE7my7kyWp/fc=)
2: 2917F838011D11F19AF518A8476F56BC.roa (hash: xJYWdy3vw+vjD1PJdLPXMUN2+mPgPI/QMzbJ06GDJ8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 06:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Validity
Not Before: Nov 13 06:04:17 2026 GMT
Not After : Nov 20 06:04:17 2026 GMT
Subject: CN=6af6a861-80e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:e0:f3:46:d5:23:64:33:2f:77:cf:c4:9b:
5d:83:94:80:8d:ba:a3:b4:66:e7:53:75:cf:f0:71:
f3:8b:e6:96:66:68:ac:1c:0b:38:c6:48:6c:2d:f5:
7a:05:a0:20:23:8b:84:32:d9:f4:13:df:fb:e5:6c:
75:68:cf:26:e4:ba:09:95:4c:d1:0e:42:e6:c4:9f:
84:e5:c0:d5:4b:36:96:42:c4:46:c9:ec:85:2f:71:
1e:bd:0b:e8:4d:35:01:f2:05:78:12:7a:0d:4e:16:
3f:c6:ca:aa:2d:a6:fe:85:a6:32:29:d2:c8:d4:b2:
e2:a9:c6:7c:48:fa:92:35:35:07:19:8b:5b:e3:2c:
23:a2:de:fc:19:fa:c0:17:de:12:97:7c:dc:52:89:
ab:9c:a0:b1:bb:15:51:bc:53:d5:00:a8:ca:90:e2:
d9:72:53:68:92:1e:ad:1a:11:59:1d:af:c7:ae:13:
46:7c:72:52:d9:85:e9:5f:7b:dd:63:ba:87:7c:ed:
63:b1:72:12:1b:54:51:dd:f4:c5:49:64:cf:82:08:
ba:f9:50:b9:5e:3d:17:d4:fc:21:86:4b:d9:cd:6c:
27:95:48:c4:41:ea:d0:15:8d:24:21:b7:79:1c:68:
b3:32:2e:39:b0:ee:dc:a8:f8:fb:17:25:83:55:53:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:D1:32:F2:7B:BA:6F:61:DE:DE:05:2F:ED:DF:2C:A7:E6:B8:95
X509v3 Authority Key Identifier:
keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4f:eb:6e:af:21:bf:44:ea:31:f9:f8:67:36:51:b5:26:b7:
8b:76:bf:60:1e:94:32:3d:fa:d0:22:a6:5c:49:45:a2:0a:47:
01:82:ad:f3:0a:7f:07:1e:67:b1:81:94:e7:dd:7a:2d:b2:61:
d4:64:ad:5e:14:7b:69:10:ba:a3:cc:e1:d6:a8:54:fa:e5:3d:
93:ca:76:06:65:72:b2:4b:1a:f7:74:2a:57:cc:a0:5c:fa:1d:
75:95:18:c6:ce:78:b3:75:21:d7:b5:fe:96:2c:67:ed:a0:2c:
69:5a:1e:f6:6e:21:06:b1:ec:ee:97:fd:b1:66:35:de:85:48:
60:4e:38:5f:f9:1c:71:b5:dd:9c:0d:42:31:9b:2d:14:47:a8:
fa:5d:ed:44:68:5b:aa:eb:cd:2b:36:c3:45:50:14:27:e5:bf:
65:8d:52:2f:7e:d6:9b:2f:5e:a0:36:3a:b3:df:bb:88:55:0b:
82:db:45:04:3d:a8:e5:b0:79:26:7e:8a:3b:88:64:0d:0f:36:
6f:7e:18:3b:e4:15:cf:53:dc:b8:12:15:0e:56:35:c4:15:1a:
f2:ee:70:11:bf:f0:21:d3:9f:60:54:31:14:b7:af:af:17:89:
16:1f:b5:74:93:80:4d:61:67:2c:4c:6c:91:f1:b5:4d:9f:50:
16:2e:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:05:57 2026 by rpki-client