
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json)
Hash identifier: YLAgR+VogttAzysA9PyaKNsTs53G+0uZUwdoFFQI26Y=
Subject key identifier: 3A:2D:62:F2:97:9D:F4:F1:D7:79:C2:9A:3E:97:B5:BB:6C:CF:D5:62
Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Certificate serial: 0D00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
Manifest number: 0CF7
Signing time: Tue 12 May 2026 18:17:00 +0000
Manifest this update: Tue 12 May 2026 18:16:59 +0000
Manifest next update: Tue 19 May 2026 18:16:59 +0000
Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: wrSUUMoHzXrXS8+zaYKJI6u5iWbb1XlBl1Kl/hC6eJ8=)
2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Validity
Not Before: May 12 18:16:59 2026 GMT
Not After : May 19 18:16:59 2026 GMT
Subject: CN=6a036e9c-0ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:74:2c:ce:01:8b:2b:d2:b1:c3:76:8c:18:
ab:71:6d:9a:f8:82:7c:33:8d:c3:f8:70:bc:03:9e:
09:65:d5:d5:b4:84:a5:ba:3a:d7:9a:80:28:75:50:
b9:b5:df:2b:dc:77:74:1c:0f:1d:11:82:ae:61:55:
70:e7:9c:a7:01:fa:eb:ac:00:79:10:eb:08:9a:e6:
18:59:93:52:84:2d:5b:e1:99:90:31:50:21:9d:64:
81:ee:fa:31:4a:86:86:9f:d6:51:81:fd:e5:f7:6a:
82:65:73:2d:c6:12:01:99:78:af:f5:93:89:fe:f6:
6b:ff:95:b8:78:7d:65:96:5a:7b:a3:78:19:76:cd:
16:dc:88:dd:cf:b2:bc:db:9a:c4:7b:7d:ae:2c:e4:
39:73:83:13:c9:33:17:23:5f:88:b9:8d:d1:98:9e:
b1:71:3b:7d:21:cd:41:06:4d:7a:86:ba:85:e7:2e:
98:c1:cb:fc:1a:58:58:73:c8:e1:2a:2c:00:98:16:
01:26:2e:81:38:10:9c:32:17:57:06:9c:47:5f:db:
3d:b0:4e:11:f8:c9:fc:85:4b:69:b8:53:ec:cc:63:
b9:32:d6:9e:5b:30:1f:19:0c:aa:4c:37:ad:0d:3d:
a6:67:cc:98:92:ab:3c:c0:d4:b7:9a:61:b5:97:5c:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:62:F2:97:9D:F4:F1:D7:79:C2:9A:3E:97:B5:BB:6C:CF:D5:62
X509v3 Authority Key Identifier:
keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:f9:cc:3c:27:17:ad:23:ad:9e:18:e3:f0:3b:58:48:28:
b6:b5:52:ce:77:f1:21:b6:7a:bb:69:63:ba:9a:2b:eb:96:b9:
9d:b0:47:36:43:b5:7a:27:25:c2:38:10:f2:9b:9b:f1:8d:79:
bb:ba:bd:d7:ba:f1:4a:60:2e:b0:60:18:12:78:13:2a:3f:e5:
ad:dd:ff:a6:6d:85:a0:21:eb:01:42:9f:01:1b:7d:e1:82:83:
3d:89:80:1e:20:19:88:af:36:0a:22:e9:36:e5:92:5e:a1:8f:
dc:c2:00:17:53:fb:0c:3b:1d:0e:3e:85:72:fe:bc:c9:49:2a:
44:55:56:2f:f9:75:a6:19:db:ad:3e:76:a6:f0:48:f3:a3:1a:
b5:9d:76:68:f6:25:c7:ba:d7:6a:09:b1:a3:9b:da:d6:24:a5:
d4:69:c3:3e:9e:59:83:ef:50:f2:f7:99:00:61:c5:47:98:8b:
88:72:f5:d8:00:f7:78:cc:bb:ec:1b:72:40:ab:80:8a:2f:57:
ce:83:26:ff:ce:ab:99:4d:ca:29:5f:f4:c7:99:9d:bc:d0:5e:
e0:52:83:7b:82:b1:91:34:b3:4e:e9:59:54:a2:15:c4:83:5c:
1f:e2:22:27:46:1c:3d:0d:5e:d5:e8:49:65:eb:70:00:05:b4:
ff:78:e5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:38:46 2026 by rpki-client