
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json)
Hash identifier: 9jQmQhNeMoljDv543PSHUyXxHjdHXICZqR91S5o2Afc=
Subject key identifier: A2:30:A5:89:BA:35:D1:D5:CD:AF:AE:58:E0:81:54:B8:60:15:13:27
Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
Manifest number: 01FA
Signing time: Sat 13 Jun 2026 03:11:55 +0000
Manifest this update: Sat 13 Jun 2026 03:11:54 +0000
Manifest next update: Sat 20 Jun 2026 03:11:54 +0000
Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: tEYvYNwaThU8oEKRi9vnSqDrFWHfrQ8QPMB1WM1vaWM=)
2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: UORe/0TZF8IoRoAarwALcIbpOxjo7QBKBArFHjwhFB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Validity
Not Before: Jun 13 03:11:54 2026 GMT
Not After : Jun 20 03:11:54 2026 GMT
Subject: CN=6a2cca7b-924e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0d:be:51:f5:67:7e:1e:60:e9:72:c6:f8:00:
4c:b9:9c:ba:3f:7b:4e:70:a7:64:ff:06:ee:a2:34:
b8:27:bb:b1:c2:29:2c:5f:24:d3:19:b5:a7:e1:c3:
47:b8:f9:b3:ca:4a:4a:ec:ed:03:df:ba:4f:bc:39:
78:46:fb:58:59:63:e4:71:d7:39:ee:1d:6e:97:81:
3a:2e:12:8d:5f:1a:a0:b0:01:4f:53:17:85:66:97:
27:33:a1:01:63:fe:b4:82:e2:82:a6:65:14:92:47:
d7:ab:16:85:21:7a:b0:4f:a7:51:d1:8f:72:65:21:
c8:d7:10:85:91:28:98:9c:01:89:93:68:e0:b2:21:
8c:58:ed:b9:ba:c7:7a:23:37:e5:bc:76:e1:58:7d:
24:35:2d:41:a3:c6:45:e0:b9:54:e6:25:16:82:df:
4e:e4:d8:64:b4:ab:4b:47:28:57:05:42:77:e4:a0:
25:99:a8:87:51:06:c1:5b:1d:ae:8c:2d:57:b7:d1:
ca:d3:a4:f1:d1:55:95:7d:22:a2:49:eb:d0:36:f5:
d6:51:1b:9a:73:67:43:63:68:37:93:b7:a8:2e:60:
7c:56:52:cd:47:f2:f1:fd:f0:55:77:3e:de:42:13:
66:cd:8c:ae:2d:5e:74:22:a1:5b:e8:a9:a1:8a:c2:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:A5:89:BA:35:D1:D5:CD:AF:AE:58:E0:81:54:B8:60:15:13:27
X509v3 Authority Key Identifier:
keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:68:47:78:96:71:e3:64:87:5e:1c:10:15:cc:5b:f7:28:
92:f1:67:9f:e4:3b:34:f1:60:a1:c5:62:d3:d3:53:f4:ce:e5:
b1:4b:6b:68:43:42:9b:3b:d0:00:39:8e:d6:4a:a5:a1:54:a3:
0e:bb:c2:48:72:f9:35:76:b8:63:80:bb:43:e6:6f:b3:d2:01:
bb:62:5f:a7:05:23:1a:89:8b:18:33:95:e6:fe:a8:c5:e7:0d:
6d:71:2e:32:cc:a2:3b:7b:f1:e6:3a:4c:c1:4a:40:3e:d4:00:
df:f8:75:d7:c8:1f:05:78:f5:f1:73:48:88:7b:c9:17:ba:df:
72:25:4f:d4:86:b2:44:68:b0:44:11:d1:81:95:78:32:9b:ba:
64:4a:34:a8:36:9d:8a:43:6c:8f:09:96:dd:e1:cd:a4:ec:0a:
b3:54:6f:30:c2:7e:75:94:43:3d:d2:15:ae:a3:b3:09:13:9e:
29:24:12:b4:5c:10:08:f4:d7:0f:51:e9:9a:e0:81:f8:b8:08:
19:b8:37:d7:af:f1:8a:79:cc:04:45:93:fe:13:af:94:1b:63:
4f:81:98:4a:4f:17:9a:3c:e2:b6:5b:a7:e2:9a:e5:8a:4c:6d:
f6:e1:4c:b5:8a:72:c4:1a:3b:59:4b:ca:1f:98:d0:57:28:16:
db:3b:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:59:33 2026 by rpki-client