
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json)
Hash identifier: 5gk/m7rrDk5eUTuhCRNx3GyjhPBxi+SSFH2r5hb1Xvk=
Subject key identifier: 7E:2F:0C:96:82:6B:AA:9E:08:BD:80:33:7A:E9:AB:D6:5A:63:BC:66
Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54
Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754
Certificate serial: 0CAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
Manifest number: 151A
Signing time: Thu 16 Apr 2026 18:23:55 +0000
Manifest this update: Thu 16 Apr 2026 18:23:54 +0000
Manifest next update: Thu 23 Apr 2026 18:23:54 +0000
Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: AVBbLd1jn9+g1/SnC8MeJ8UcHiY4Onp6J4DINB9epKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl
rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3242 (0xcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754
Validity
Not Before: Apr 16 18:23:54 2026 GMT
Not After : Apr 23 18:23:54 2026 GMT
Subject: CN=69e1293a-58af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:60:64:bf:34:48:f1:60:88:64:90:0e:e3:
00:ea:f5:ad:6d:4e:a2:6f:a2:ff:5c:72:8e:60:af:
ba:c7:fb:5c:db:30:42:02:e3:ae:fd:6f:0a:ce:92:
0f:55:64:5d:d1:19:5b:01:81:8f:39:d3:61:05:fd:
4f:d0:48:88:4b:9e:b0:0a:53:8c:2a:4b:09:3f:d5:
eb:a4:36:a1:4b:53:a6:b5:8d:eb:b2:e2:77:85:33:
eb:bd:fc:b2:79:d7:db:57:78:2e:b3:83:c0:85:61:
79:41:bb:02:f3:57:ad:7b:b8:0e:94:ca:41:40:59:
01:12:1e:b9:13:d0:f4:04:f6:8b:49:52:24:3b:7d:
62:22:8d:7f:8d:00:1b:0b:51:4d:6d:e5:04:f8:e8:
bc:21:f0:7f:09:e9:77:13:ce:90:41:43:e4:fa:75:
2a:af:b8:53:cf:cd:fa:f1:7f:2f:07:cb:71:d1:53:
c0:d4:ef:7a:fb:d2:8c:ce:de:e4:a8:f5:f2:3b:ed:
92:54:44:6d:e5:7b:ba:93:70:b9:56:94:07:d7:ea:
72:12:0c:76:99:28:a3:fd:2d:ac:f2:00:af:12:e5:
9e:00:af:79:7e:1d:e8:13:70:fe:73:e9:21:09:0b:
85:64:b8:32:08:23:bf:47:9c:a2:6e:6c:ec:6f:7f:
fd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2F:0C:96:82:6B:AA:9E:08:BD:80:33:7A:E9:AB:D6:5A:63:BC:66
X509v3 Authority Key Identifier:
keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c3:aa:1b:16:97:4e:19:00:36:79:e1:12:54:78:6b:06:38:
0d:be:89:f7:cb:aa:ef:5d:98:53:bf:26:af:70:c8:3c:97:20:
bb:85:ed:b3:b8:99:39:9c:7e:a5:72:01:86:81:bb:0d:ea:76:
2a:97:61:cf:e7:34:18:a7:fb:b8:4a:51:73:df:cd:98:da:de:
d4:3c:0a:8f:79:b5:54:f5:13:cb:37:74:7d:ed:4c:9c:40:16:
59:db:07:07:b3:cd:19:7a:a0:49:2e:2d:46:c3:65:80:24:f3:
be:f9:43:e1:90:7a:89:13:2b:88:0c:a1:8b:fa:92:eb:b7:e4:
a4:3b:71:c0:0a:9e:8d:85:52:20:5f:2a:55:6d:d0:4a:cb:0a:
84:e0:6d:0d:55:00:51:75:44:2e:7a:c4:79:aa:25:97:2c:d0:
ac:72:e4:ec:4d:e1:97:0b:9c:1f:b3:70:77:13:a5:41:f3:9f:
b4:11:a3:89:ad:77:bf:36:f6:3f:28:92:18:e7:f6:b1:65:2d:
fc:39:8d:36:f1:17:c4:28:ed:31:01:b7:8f:83:e7:4f:d3:2f:
22:cd:d2:e4:89:df:d3:81:67:45:41:a7:c9:9d:c7:26:68:b8:
3f:b5:a1:f9:01:0b:e9:3f:ca:e5:b5:8f:e3:1f:fa:d2:8e:be:
c6:db:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:21 2026 by rpki-client