
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json)
Hash identifier: /PhBbFJ1zHoQ64sfaUSg1HfnOL2MrAhBw180yM6ow3w=
Subject key identifier: C8:C3:31:34:80:5E:CC:B2:9A:2C:67:AF:17:65:49:12:D8:F1:5D:77
Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
Manifest number: 0230
Signing time: Sun 01 Mar 2026 23:48:50 +0000
Manifest this update: Sun 01 Mar 2026 23:48:48 +0000
Manifest next update: Sun 08 Mar 2026 23:48:48 +0000
Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: K/yVIGj9oCZdRe2Z+bLHCSMgQZGjiElH2QnhqTOKDxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Validity
Not Before: Mar 1 23:48:48 2026 GMT
Not After : Mar 8 23:48:48 2026 GMT
Subject: CN=69a4d061-713c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:5c:b0:28:29:37:41:a1:d8:a9:43:98:cf:
50:61:70:0b:3f:50:45:10:61:09:26:b9:af:35:57:
6a:05:5b:2e:e3:06:b4:44:88:7c:d8:b9:12:13:d6:
98:5a:61:90:70:ef:b8:da:97:79:14:55:d8:bf:7a:
41:17:7f:22:0c:87:3d:46:7a:86:9a:18:18:c3:24:
82:27:c5:de:d2:7b:f6:9c:21:7a:6d:d1:9c:de:bf:
5a:5c:ff:75:a5:49:9c:5c:63:c9:4a:1d:0e:0b:ce:
0c:24:2e:aa:de:67:d1:60:97:0d:ad:2a:b9:1a:3c:
3c:4b:b8:14:d5:b5:40:90:30:3e:28:77:9b:be:ee:
1f:0c:fc:5b:a0:5f:6c:5a:a4:b0:9c:85:b9:83:46:
eb:1f:25:28:af:93:ae:a3:b5:53:45:15:ae:90:95:
57:1d:6f:61:88:f5:81:a2:e2:97:2e:d9:d4:75:a9:
d1:df:96:f8:2d:ec:57:ac:72:73:42:89:c3:6d:d7:
82:0f:f8:7c:81:89:38:b5:2f:d7:4f:65:6d:02:60:
76:47:8f:37:b9:5a:a7:0d:ee:6d:80:71:a8:09:f1:
48:2d:01:3b:0c:60:65:b2:be:c2:46:b5:ab:80:df:
29:8b:a9:72:ed:f4:54:80:bb:cc:f6:7b:cc:a6:31:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:31:34:80:5E:CC:B2:9A:2C:67:AF:17:65:49:12:D8:F1:5D:77
X509v3 Authority Key Identifier:
keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:76:ea:ad:2a:fd:7a:c5:d9:ef:a7:96:59:f9:ca:8f:e5:db:
7c:eb:55:5b:cf:bd:39:04:b7:c0:5b:37:20:9f:91:af:7a:ab:
64:3c:a0:6c:a9:d3:1c:5a:4c:4c:86:af:8c:c5:8d:51:57:45:
e8:a4:e0:2d:ad:15:f2:c3:60:24:91:c8:b4:e5:08:6d:68:1e:
eb:35:a8:5c:f9:f7:8b:c9:31:60:1a:97:2c:bb:e2:01:26:0c:
52:fa:f5:6d:35:b1:fd:5c:78:b5:b2:a4:7d:ed:5e:05:55:c2:
d7:fc:8d:17:58:a4:b9:16:16:44:2f:d4:54:78:ea:c0:bb:d6:
5a:de:02:08:4f:a5:53:85:a7:37:d0:cd:18:2a:29:bd:32:e9:
4e:2b:52:f4:c7:d0:3d:de:89:b8:90:1a:69:64:48:92:16:c0:
6b:de:7b:75:b3:3e:e7:ab:16:13:e0:d6:08:c6:c8:25:fa:9a:
49:24:9b:42:2d:dd:21:9f:cd:bc:0a:16:08:83:12:3c:ad:1c:
95:f5:3f:87:9a:8a:d6:17:cc:00:43:dd:44:da:4d:cb:a7:fa:
8d:46:a8:4f:c7:6d:0e:8a:79:3c:45:7a:d8:2d:bd:bf:48:cb:
63:81:85:90:67:91:bb:19:58:96:6d:f5:65:59:7c:6e:45:58:
fb:45:cf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:54 2026 by rpki-client