
$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json)
Hash identifier: CE3kpx7Be4ZFAmSZvqsmRUQXGHkbzLgEw3qJcpVcvaU=
Subject key identifier: F3:5B:94:6E:30:2A:47:7D:A5:67:E4:2C:AE:7F:27:13:F0:5F:28:56
Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Certificate serial: 07B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
Manifest number: 07AD
Signing time: Sat 18 Apr 2026 21:21:27 +0000
Manifest this update: Sat 18 Apr 2026 21:21:26 +0000
Manifest next update: Sat 25 Apr 2026 21:21:26 +0000
Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: DJbzkuYky1Fc4wB22q9rjb4N/jOJJIaLq8rn2RStgA0=)
2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: xUgWZPS3OqCqcDCU2NsD4bCGdV7LPQ4bmn/sE/hHG+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 21:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Validity
Not Before: Apr 18 21:21:26 2026 GMT
Not After : Apr 25 21:21:26 2026 GMT
Subject: CN=69e3f5d7-dd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:d6:61:40:b9:9e:ea:e6:59:31:3e:f4:26:
d6:ca:00:ce:78:ea:06:d1:e1:0c:12:2e:0b:5b:b5:
84:f0:fe:df:d4:b0:51:34:11:e1:32:a8:a4:da:1f:
33:c9:b4:2e:33:af:b1:2b:2e:87:49:1f:34:14:d9:
80:34:fd:a7:33:af:92:58:24:9d:c0:ff:68:ec:c0:
41:84:2c:0a:e0:ef:03:4d:2e:c1:d4:3a:8b:b6:90:
29:40:fa:35:59:fb:46:e8:58:68:71:37:df:40:6d:
3a:e7:2f:19:40:76:fa:7a:09:e6:aa:7f:25:05:cb:
0e:35:e7:d7:fd:25:f4:87:a8:29:83:12:33:26:79:
3a:23:7c:a9:d3:85:0c:ed:8b:f8:a1:44:ab:39:e4:
24:61:6f:e4:ea:e1:b8:5b:0b:e8:2d:15:10:93:e3:
30:31:6b:6b:d5:2a:08:82:15:71:8d:94:14:68:c7:
ee:94:6a:fb:b2:1f:d2:5f:1b:8c:e6:c9:29:40:1b:
c6:d4:a8:14:9e:1e:b9:31:ee:99:81:44:97:86:9e:
a7:d1:9b:3e:3e:97:02:73:cc:8b:65:fe:2b:44:a9:
b6:b3:a2:68:54:b2:7b:1c:51:9e:d2:c9:9b:11:d3:
6f:55:0c:c2:14:c8:37:c9:69:45:2b:58:75:03:b5:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5B:94:6E:30:2A:47:7D:A5:67:E4:2C:AE:7F:27:13:F0:5F:28:56
X509v3 Authority Key Identifier:
keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:ac:65:ba:32:57:ee:43:14:93:c6:08:23:ea:a4:ea:4a:35:
e4:96:f7:5b:fd:62:76:62:6a:4b:0a:d9:3f:b6:2a:c6:e7:05:
4b:77:0e:91:22:e6:2a:3c:23:bc:16:6f:db:17:81:93:e9:db:
7f:2e:57:bb:4b:d7:87:66:bf:ce:c0:8d:82:a1:ee:82:a4:4e:
43:4a:97:9a:e5:d3:09:85:c4:17:2b:1d:fd:1d:ce:4e:43:9e:
fb:40:6d:7c:14:dc:17:8e:1a:8c:d9:9e:f1:89:a9:76:e2:e4:
87:1f:6e:2f:2d:8b:52:c1:c3:76:15:84:18:e8:a8:d2:18:c0:
4d:47:6b:03:96:e1:e5:19:c4:98:43:7e:34:d4:cc:aa:52:a6:
c3:01:18:3a:52:9d:4f:a0:df:6e:cf:be:12:49:dd:f8:c3:ff:
db:c8:be:a4:80:78:0c:54:fa:a5:75:32:d0:70:49:1f:da:50:
51:e2:fc:02:49:ca:ae:5e:a4:30:5c:74:97:57:37:da:ab:83:
31:c4:da:c4:01:a3:8c:40:61:3b:3e:ca:11:27:36:22:c2:b8:
67:b0:8e:c7:55:49:48:31:fc:61:48:5c:62:8f:c1:62:d9:10:
26:15:75:53:fa:e3:54:04:2f:0f:c0:12:ff:a2:0c:77:ea:ac:
e6:ff:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:48 2026 by rpki-client