
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json)
Hash identifier: P8+DwORZFUCuSTeVOWrsuhoqiU73/7kmb05JNWchEKo=
Subject key identifier: A8:5D:0D:0E:5A:D1:14:50:AE:5D:B7:6A:5B:D4:53:BB:35:2F:54:B4
Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
Manifest number: BC
Signing time: Mon 11 May 2026 07:09:50 +0000
Manifest this update: Mon 11 May 2026 07:09:49 +0000
Manifest next update: Mon 18 May 2026 07:09:49 +0000
Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: Nj8/iG6QmP+3xw8K4oGhm2bOQUWN/OtVAxH07Cdlr7M=)
2: 2917F838011D11F19AF518A8476F56BC.roa (hash: xJYWdy3vw+vjD1PJdLPXMUN2+mPgPI/QMzbJ06GDJ8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Validity
Not Before: May 11 07:09:49 2026 GMT
Not After : May 18 07:09:49 2026 GMT
Subject: CN=6a0180be-b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:0e:7d:c9:2e:e0:8b:95:0a:1d:83:1a:35:
92:9b:2f:6a:9e:f6:a2:82:eb:28:6e:4a:43:64:a0:
f4:1e:39:a0:df:e2:44:c8:3d:ff:41:96:eb:d5:fc:
df:ff:a9:22:12:9c:2b:b4:c2:af:5e:de:6c:8b:96:
84:5d:26:32:de:4d:67:7a:34:10:a9:45:de:95:2c:
b2:54:03:05:c5:0b:33:ce:b4:cf:b8:19:26:21:06:
10:53:15:aa:05:0e:8a:e1:bf:df:7e:77:1a:7f:a0:
8c:81:c1:a9:55:b1:1b:ce:ac:3e:9f:41:12:ec:9a:
d8:a7:35:ec:0a:cd:9d:aa:37:01:ae:aa:a4:05:67:
0a:3c:13:c5:ad:23:38:ea:6a:0c:bb:23:74:ba:7e:
db:1e:1f:80:7f:e7:17:97:15:51:32:76:dd:94:c6:
ca:11:79:62:3d:64:c8:c7:d2:1b:08:7b:41:80:89:
3d:45:5d:b2:77:ae:66:94:62:73:15:48:04:47:a4:
f2:50:85:26:ce:d4:45:f5:ae:a2:fd:78:f3:1c:5a:
c7:07:6d:a8:ef:73:4e:70:2e:d9:3a:9d:ff:0a:cd:
60:92:ab:d8:e7:16:8a:b9:25:9d:63:1c:6a:b9:8b:
3e:65:82:b3:41:c4:18:ef:96:e5:e4:4b:29:b6:a4:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:0D:0E:5A:D1:14:50:AE:5D:B7:6A:5B:D4:53:BB:35:2F:54:B4
X509v3 Authority Key Identifier:
keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:d3:91:c9:06:8b:55:e1:ed:9c:fd:37:47:85:17:04:da:1f:
6f:94:98:b4:27:7b:17:a6:86:a9:13:84:99:40:6d:91:23:9a:
c3:ce:64:17:dc:2c:8f:f1:eb:3d:3e:4f:b9:13:8e:e1:3f:0b:
1e:5e:7c:64:66:54:93:6f:9b:7c:f0:89:de:15:d1:d8:f8:51:
a6:bf:dc:cf:eb:1d:a4:07:9f:85:18:97:99:28:14:18:06:ed:
b7:3a:78:e2:57:24:69:9e:28:51:17:81:83:07:f5:4a:6b:ac:
9b:29:9e:23:99:49:54:41:c9:d8:b8:f6:6a:e7:4e:11:47:36:
81:6b:ed:ee:36:b9:f0:b5:bd:ce:99:da:77:ef:69:79:88:40:
5c:e9:1c:7a:42:0c:da:2b:49:f4:76:78:8f:d6:49:f3:23:48:
af:da:60:1f:f6:0c:52:32:e4:e5:41:ba:55:3a:79:0b:1c:aa:
a5:e6:7d:da:d1:a8:44:5b:54:da:99:02:be:f5:aa:18:29:a0:
e6:ab:02:cf:c6:69:4f:54:fc:5b:c0:dc:82:83:31:ea:c7:d2:
b1:a4:33:cd:62:2f:2e:b7:6c:c5:be:bf:0d:f4:46:a7:3f:78:
27:51:ad:d1:5c:a7:2a:b8:9b:12:1c:b1:03:67:6a:f9:41:c4:
1d:dd:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:27 2026 by rpki-client