
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json)
Hash identifier: fWp0bXoOv22TtG0wqEj/rd96oRMkzM74/tLFrEu96PY=
Subject key identifier: B9:41:AB:07:9A:4F:BE:64:FC:01:52:F8:A9:5C:05:1B:A0:F7:B2:8A
Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Certificate serial: 0D46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
Manifest number: 0D3D
Signing time: Thu 24 Sep 2026 18:06:58 +0000
Manifest this update: Thu 24 Sep 2026 18:06:58 +0000
Manifest next update: Thu 01 Oct 2026 18:06:58 +0000
Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: bb7VUcrBXf8I8a8mXxnOaQWkhoNtmqHt4jj3fBMmSOY=)
2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3398 (0xd46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Validity
Not Before: Sep 24 18:06:58 2026 GMT
Not After : Oct 1 18:06:58 2026 GMT
Subject: CN=6ab566c2-92ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:14:93:5d:24:26:ec:9e:9f:0b:b0:7c:c3:
bf:1f:d4:d7:17:97:5b:c9:d7:fa:8b:1b:78:d6:02:
95:d7:91:12:eb:07:96:53:8a:f0:95:d9:be:20:59:
15:c0:5b:51:9e:58:ee:04:8f:9b:84:0f:c8:21:4e:
3f:35:ed:14:90:03:2c:d1:4f:b2:2a:f7:40:52:d6:
be:dc:a4:3c:21:46:36:7f:b4:fb:d8:28:86:c7:9c:
db:ec:c2:a8:42:f4:e8:2e:b2:95:64:52:3e:8e:87:
34:e9:cf:a0:83:29:17:37:d6:f9:9f:c8:d9:60:92:
df:e9:91:07:4d:15:01:a0:6e:21:88:d9:d4:c5:b2:
3b:b1:02:83:e8:a2:f3:8a:c0:be:44:ed:e9:29:2b:
92:3b:c4:8e:f8:3f:6f:81:d1:a5:65:21:b3:88:7c:
86:14:d9:ad:08:f2:97:aa:0b:d9:4e:2e:26:81:87:
f9:1b:bc:9b:26:1d:64:28:8b:fa:6f:17:cd:d7:09:
6f:10:09:77:0a:62:8b:4d:b5:bd:3c:10:47:3f:c0:
03:cb:1d:9a:3b:a9:6c:84:46:0f:71:bf:01:ac:e2:
7e:b2:ea:d6:19:43:56:cb:bb:2c:50:51:18:22:d1:
67:d5:32:1d:4a:60:da:70:4e:ee:68:ff:11:fa:10:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:41:AB:07:9A:4F:BE:64:FC:01:52:F8:A9:5C:05:1B:A0:F7:B2:8A
X509v3 Authority Key Identifier:
keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:71:d9:30:47:00:5c:c6:2c:3a:5e:d9:87:c9:e0:6f:c9:ac:
b6:46:6e:1b:34:32:b7:78:15:3b:a2:a9:bd:68:ee:0d:5b:d0:
46:ae:b3:40:9e:27:12:07:d0:d8:0d:12:23:f7:51:db:ce:e3:
a1:13:fc:30:28:f4:d5:ec:55:dd:ae:a5:62:bb:98:e7:de:e6:
2d:72:30:92:a2:6a:de:a4:ad:63:0c:0b:c6:44:98:20:c0:27:
65:29:bd:2c:ac:f7:ce:c5:19:ba:be:f3:56:5d:f2:70:87:76:
e1:68:ee:64:4f:9f:28:36:10:8f:3a:1e:bb:a7:b8:6e:de:f4:
45:d4:df:51:f6:31:f9:c7:09:43:3f:f6:41:4b:73:68:e5:76:
8a:89:91:2b:46:db:9e:03:df:4d:37:01:48:e1:c5:cb:e3:d9:
ba:6e:e3:80:4d:38:45:59:8d:8d:7b:0f:67:3a:24:1a:c2:80:
bd:7a:60:63:a8:73:60:2e:77:4a:1a:e5:77:28:ca:8e:2d:9d:
be:78:5d:7e:00:09:cc:2e:18:cd:12:69:8d:17:ef:35:7c:f3:
5f:10:a3:69:54:9c:92:ac:1d:3d:56:3c:33:93:92:74:14:0d:
81:51:d2:09:71:7c:f0:eb:b1:ac:8e:16:57:33:59:10:36:6a:
96:de:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:49:34 2026 by rpki-client