
$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
File: l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft (raw, json)
Hash identifier: tzPE3ns9wqNYTgc9fgDuZmRJ7keAbkjsecaCfumoVKw=
Subject key identifier: 69:78:B9:F2:EA:91:3D:2C:DD:4B:32:29:90:33:CB:19:7A:24:E5:0A
Authority key identifier: 97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8
Certificate issuer: /CN=A91161EB/serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
Manifest number: 04
Signing time: Wed 15 Apr 2026 08:47:02 +0000
Manifest this update: Wed 15 Apr 2026 08:47:02 +0000
Manifest next update: Wed 22 Apr 2026 08:47:02 +0000
Files and hashes: 1: l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl (hash: z/QmwPLArjItJzZ5UEnj1RQwLTOvpjA07tJll7Z6/9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl
rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91161EB, serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
Validity
Not Before: Apr 15 08:47:02 2026 GMT
Not After : Apr 22 08:47:02 2026 GMT
Subject: CN=69df5086-e7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:5c:ed:b1:92:57:7f:4c:82:53:ea:6e:bd:
4f:3e:ba:b8:00:ed:91:3f:2d:4c:a8:f4:bc:f8:5b:
c6:78:0a:e3:89:21:0f:72:ce:88:d7:45:a6:94:fa:
b6:73:f9:d7:cb:6b:b5:57:87:ec:d7:4a:cc:d9:39:
cb:a0:e9:36:bf:e1:43:8d:05:49:2d:f5:bb:6a:9f:
10:64:17:d8:2c:25:fa:bc:71:3f:b2:fd:80:be:e1:
22:85:30:58:10:07:eb:5a:c2:df:c5:9b:14:62:38:
eb:df:c7:66:57:08:88:78:95:29:66:1d:1f:b2:3e:
1b:00:9a:ad:4a:bd:da:7a:02:50:f8:ec:2b:79:1c:
06:32:f6:ea:15:b8:b9:33:cb:60:96:92:f8:32:b2:
50:db:bb:d3:7a:04:a4:5b:83:c5:ec:a5:75:87:35:
45:36:86:fd:b2:a8:83:26:9b:35:18:94:41:7a:f1:
dc:fa:d9:e0:59:e7:d3:cf:7d:ed:2c:e3:b3:c9:e8:
da:0e:e8:a5:df:38:cb:6e:8e:b1:ff:a6:b1:af:77:
db:67:2d:25:6d:87:7f:2a:86:61:8e:fb:62:65:61:
4c:7b:88:70:e2:cc:f2:98:c0:8e:23:c6:e6:c5:7a:
6b:a0:85:d6:ae:2a:b4:2b:97:b7:ee:1d:79:37:ff:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:B9:F2:EA:91:3D:2C:DD:4B:32:29:90:33:CB:19:7A:24:E5:0A
X509v3 Authority Key Identifier:
keyid:97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a3:bf:00:be:7f:59:3f:c8:f7:ed:7d:95:58:11:f3:1c:11:
f1:2b:05:e3:a9:ec:94:75:2e:73:e6:b2:1f:26:14:32:1c:04:
3a:8c:f1:2e:7a:f7:d7:66:c2:c8:10:93:18:d0:ef:2b:fd:0d:
97:14:49:19:c7:76:15:01:f6:04:e1:a1:ba:b9:3c:a9:7a:6f:
af:7e:15:32:69:7f:5e:fb:a9:06:1b:3d:2c:8b:dd:f2:db:9a:
cb:d7:22:a2:bc:0f:e1:a8:87:7d:ec:d9:1e:0b:2e:c0:fe:d5:
d9:30:27:3b:5c:52:fb:a4:bb:c0:bf:5f:50:3b:4a:49:45:a9:
8a:f8:a4:dd:b3:55:c4:66:dc:bb:76:21:ab:c9:c3:92:1d:e3:
27:1d:4f:f1:cb:98:b8:f4:0a:92:af:03:86:b5:e2:e4:3c:6e:
b1:3c:9a:8c:91:b4:10:7b:de:cb:0e:0a:e5:55:c7:5e:a6:30:
87:0e:ba:72:9f:24:24:3b:34:1a:61:a7:d5:8c:50:d1:e6:42:
48:13:5e:33:60:81:e8:4c:5b:24:01:64:b2:1f:ea:ff:85:a6:
24:1d:2e:f3:ff:da:51:75:ca:b7:86:cc:07:d5:fb:e6:87:92:
b5:25:f8:15:67:32:61:5e:da:25:3c:5b:af:07:2b:d7:4e:7a:
ca:d0:10:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:12 2026 by rpki-client