
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json)
Hash identifier: bpk4BYJ/pfg+z2Dl3nGN4WNrU6SWsHBgr7pR/wXuAdM=
Subject key identifier: F4:5B:88:71:0A:A2:82:56:6D:DB:0C:6D:7D:08:56:1D:1C:7A:38:FC
Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Certificate serial: 0D25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
Manifest number: 0D1C
Signing time: Wed 22 Jul 2026 18:26:27 +0000
Manifest this update: Wed 22 Jul 2026 18:26:26 +0000
Manifest next update: Wed 29 Jul 2026 18:26:26 +0000
Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: QDf7kMqb07nrDxJ2RDHHt/eCNDvk8xzYXT5/Dp+f/C0=)
2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3365 (0xd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Validity
Not Before: Jul 22 18:26:26 2026 GMT
Not After : Jul 29 18:26:26 2026 GMT
Subject: CN=6a610b53-f117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e3:cc:ca:a4:af:74:e2:45:01:fc:5e:d5:ce:
24:06:27:86:c9:3a:5b:af:df:a4:2c:87:fd:af:26:
cb:bc:04:91:eb:c8:d4:43:b9:d0:9a:3c:03:a5:e2:
b4:ab:f6:93:f8:80:fb:5a:ea:02:ec:4b:eb:a0:21:
5c:75:9f:6f:70:85:c1:d2:24:1c:27:15:60:67:4a:
1a:c3:1c:0d:0c:3e:cf:b2:e7:42:2c:f8:bb:e4:07:
04:fd:49:92:a9:43:85:28:1e:6b:a8:5a:9d:79:a2:
77:9c:ba:ae:e4:74:f1:48:80:f8:79:ed:f2:9f:31:
3d:b6:13:a7:a0:82:17:a3:5c:28:22:ec:e3:dc:3e:
6f:80:1e:4c:01:84:ec:68:ac:e1:0e:f6:1e:7c:70:
09:bc:1f:bb:6f:35:2a:e9:ff:6e:2f:78:73:43:f5:
e9:c6:2b:fc:7c:aa:7e:04:30:dc:e8:b3:04:f8:1f:
d7:59:76:fc:78:b8:00:aa:62:b5:9a:b5:06:fb:f7:
5c:0b:1a:fb:c5:bf:2d:a9:3f:a2:23:07:2f:ac:51:
66:03:05:d9:07:93:21:8c:cf:b4:b3:83:4f:a1:1b:
1a:b1:6f:f3:2c:5b:93:57:a6:bc:e7:eb:92:ab:f5:
14:09:82:3f:e5:9d:6d:23:9e:46:51:60:16:b1:1f:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:88:71:0A:A2:82:56:6D:DB:0C:6D:7D:08:56:1D:1C:7A:38:FC
X509v3 Authority Key Identifier:
keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:5f:98:5e:fa:15:e1:ea:a7:5f:3d:6b:1d:70:c8:99:8c:df:
85:6c:56:83:8a:21:8b:34:13:dd:ce:c5:3a:7a:be:3e:9d:99:
a2:86:80:70:c4:01:56:f1:a7:c2:19:b7:cc:98:2a:43:62:41:
97:ec:13:44:13:20:21:f5:28:26:ea:9e:57:67:85:f5:fe:3c:
09:03:d3:33:3b:df:fd:bd:0f:09:08:ce:10:43:d4:f1:96:b6:
ff:66:de:42:52:05:ec:60:2b:57:3b:28:e0:65:bc:3a:58:89:
d5:f7:ed:a5:a7:3a:0b:30:dd:fd:10:88:dd:d7:11:4c:94:93:
c6:01:c5:d3:ed:c0:5c:f8:db:b2:88:ed:d8:80:5d:3c:2c:64:
af:96:fc:43:7d:90:04:51:8b:72:c9:26:95:3c:fb:51:73:6e:
88:9d:44:dc:ab:d8:4d:8d:da:df:35:22:2a:97:aa:a5:de:ab:
df:4d:8a:0d:16:d7:13:bd:a7:43:ca:0a:3a:cd:d4:e1:0e:2e:
97:25:72:a1:1d:7f:75:d1:62:97:22:ce:4d:9e:6c:3a:01:4f:
1b:bc:0c:f8:e8:23:7f:2d:02:ef:6f:e6:ba:a3:3d:82:30:76:
2d:05:dd:8f:42:a4:00:01:2b:60:ad:0c:f3:a8:be:2c:87:36:
5a:f0:eb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:14 2026 by rpki-client