
$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json)
Hash identifier: 7s9w9AtO2Fpj6p7yGJ1y3h/WlzSKZVU9iKkzsjvTOnA=
Subject key identifier: 30:EA:7C:DE:5B:20:A5:BF:BA:43:37:94:FC:C1:00:F4:5B:FE:E3:C4
Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17
Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
Manifest number: 01FE
Signing time: Sun 01 Mar 2026 03:51:19 +0000
Manifest this update: Sun 01 Mar 2026 03:51:19 +0000
Manifest next update: Sun 08 Mar 2026 03:51:19 +0000
Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: p0n1cGPvGC8kT01UpLeix67weOvF0YQAH21T3M1L0vc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl
rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17
Validity
Not Before: Mar 1 03:51:19 2026 GMT
Not After : Mar 8 03:51:19 2026 GMT
Subject: CN=69a3b7b7-5a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:94:8a:bd:65:44:59:01:aa:c7:ff:d7:09:
ec:53:a4:c5:97:65:6f:1a:e8:53:cd:69:41:91:29:
f4:ec:ef:dc:95:13:3f:de:23:f0:aa:ec:80:c2:55:
3e:43:0e:b6:c8:ef:e5:cc:f2:c7:cc:3a:cf:a3:c4:
54:7c:b4:10:6a:dd:f9:48:ed:3e:a6:bb:81:87:47:
a1:80:4e:06:77:c4:bb:55:77:63:f9:36:e8:90:48:
2f:3c:91:33:e4:cc:86:78:1f:07:bb:9b:ea:d1:00:
cf:96:6f:e5:ad:5e:47:b9:7e:fd:6e:d2:47:2f:63:
23:5a:07:78:32:0f:50:cd:64:15:bf:b7:0a:0b:af:
38:3a:fe:3c:47:84:31:2b:ec:8f:be:f1:0b:8a:30:
1d:04:06:2f:36:52:b4:70:92:b3:a0:e2:4a:8f:26:
8f:f8:c0:04:9e:9d:83:be:48:84:84:6e:02:bf:1f:
20:d2:85:3b:d5:37:dc:0b:2d:89:fd:64:25:e3:83:
08:eb:35:c3:3a:e9:ae:70:ed:30:61:5a:a4:d2:c9:
63:15:8e:9d:3d:5e:da:9e:7a:ee:42:50:3c:4b:9c:
78:0b:63:00:8e:06:17:88:61:3c:57:0f:83:e8:cc:
3e:5b:84:0c:cd:50:5b:8c:97:40:14:68:fc:8e:5c:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EA:7C:DE:5B:20:A5:BF:BA:43:37:94:FC:C1:00:F4:5B:FE:E3:C4
X509v3 Authority Key Identifier:
keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:bd:29:7b:55:a2:a7:9b:77:b2:5d:d0:3e:eb:d1:ac:f4:8e:
eb:bd:b0:3f:5d:f7:60:d5:46:49:03:10:eb:37:bf:2d:05:ce:
cd:45:4d:7d:87:f2:29:2a:3f:bf:a7:f1:1c:1a:ed:42:ec:7d:
23:78:be:93:5f:a3:f6:b1:20:d6:7e:92:f8:13:c7:ad:68:0c:
ef:4f:b6:ac:4b:ac:4b:e7:4a:9f:68:78:8a:7c:17:e2:5c:38:
42:de:3b:4d:37:8e:f9:7c:55:60:d0:23:9e:da:c0:9f:ec:0c:
2b:15:a4:5d:68:9c:e0:23:7b:b9:e7:08:ed:09:8f:9f:62:21:
ac:e8:eb:9a:56:f0:43:29:66:6a:89:4e:10:50:c8:07:a5:d6:
15:b1:c4:ce:bd:98:c3:43:02:a3:0c:fd:4e:02:8b:39:a2:7b:
77:e8:32:3f:18:f6:40:f2:b5:fd:0b:f3:0e:f0:c3:f5:ed:bd:
db:42:1a:d7:18:d3:ae:dc:9f:b8:fb:9c:12:7f:9e:a7:31:9c:
52:cb:02:8c:3b:12:90:ed:c7:6f:9b:0f:b8:83:bb:61:0b:fa:
61:35:b0:4a:ec:35:aa:de:91:ee:80:71:76:3b:bf:c0:5d:1a:
4f:70:73:28:86:de:c4:4a:15:06:84:7d:df:ee:cb:9c:47:80:
6e:41:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:42 2026 by rpki-client