
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json)
Hash identifier: QGkiyJ3dzDWdCJIlmnolymGJf+EUEeHPyOd1EJEmvUw=
Subject key identifier: 5B:22:50:60:B1:80:A4:C5:B9:00:F5:6E:42:D3:23:F0:9E:48:BC:95
Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
Manifest number: B6
Signing time: Fri 17 Apr 2026 06:45:11 +0000
Manifest this update: Fri 17 Apr 2026 06:45:10 +0000
Manifest next update: Fri 24 Apr 2026 06:45:10 +0000
Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: mzukpNqqQWpRCC/QvSL/HiOTPOpiYKxRwUXjO6WgZAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Validity
Not Before: Apr 17 06:45:10 2026 GMT
Not After : Apr 24 06:45:10 2026 GMT
Subject: CN=69e1d6f6-305b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:27:72:76:36:a0:75:5a:bb:8e:22:14:f7:
2d:43:f1:15:61:b9:f9:08:06:2e:6a:a3:30:72:dd:
8d:50:d3:0d:3b:8d:ab:6f:d0:b8:e6:1f:d0:5f:d7:
4b:c8:f4:f6:f8:7e:ea:6d:a2:8d:77:a1:00:06:e7:
b7:4f:d5:d5:d4:e3:00:83:00:7b:00:36:5b:2d:85:
18:24:96:8f:fd:ba:61:a1:76:72:c0:72:c9:ce:a5:
69:19:ab:0e:57:7b:46:11:84:da:1a:3f:0d:a6:97:
15:50:ca:83:a7:69:b8:94:b2:cc:7b:a8:37:e5:87:
99:17:96:08:ef:41:b1:4e:88:38:6a:a5:4f:62:dc:
bb:12:4c:9d:84:af:e1:0c:2a:9f:5a:98:37:56:e6:
8e:ea:46:6e:ed:6f:01:82:4a:a8:03:30:81:04:79:
63:23:e4:a8:d5:8a:45:c1:ba:6d:4c:81:f4:d0:6d:
eb:c4:86:05:ee:0a:b9:1b:dc:6a:6a:0e:af:56:ad:
10:f3:4c:e5:3e:a1:c5:92:66:ef:f3:7d:f4:9d:70:
79:4c:17:c6:e4:19:76:0a:87:5a:b4:ee:c4:6a:d1:
70:86:49:19:c8:d6:0a:51:d9:28:2d:43:6e:1a:e0:
29:0d:9e:3f:cd:83:ac:9d:5d:82:52:11:de:b2:3c:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:50:60:B1:80:A4:C5:B9:00:F5:6E:42:D3:23:F0:9E:48:BC:95
X509v3 Authority Key Identifier:
keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b8:bb:99:95:98:93:be:74:06:db:56:6d:98:24:e5:56:37:
1a:bd:1f:ab:09:6b:f9:ea:d0:e4:79:65:5d:72:e6:d9:4d:5c:
90:1d:89:6d:39:1a:09:5d:3b:5d:ec:de:af:1c:84:23:d8:cf:
8a:13:f0:89:50:58:70:86:40:4c:82:8c:09:f0:89:33:ec:c8:
78:1b:8c:bf:d5:79:18:1f:6e:27:49:ba:c8:7e:65:17:3a:d4:
89:f4:c9:c2:02:69:be:15:0e:16:64:04:9e:d3:b2:67:f0:5c:
a8:99:e1:e0:e3:37:3f:c5:1e:12:79:23:68:b2:f5:02:b8:74:
97:d8:63:80:17:ff:45:24:e3:d1:2b:d4:16:1a:c6:9c:6b:60:
71:11:96:25:28:3c:96:f3:51:ef:1d:7d:7c:9b:74:a8:4c:90:
85:55:de:6e:3b:78:d0:c3:aa:c5:d7:99:3c:fc:75:25:83:37:
01:bb:be:ad:83:ab:1f:c7:1b:6d:87:b6:7b:6f:63:94:cf:bf:
66:89:6f:b8:6b:d4:2c:7f:ba:59:4b:f1:69:4e:10:2c:00:54:
18:2f:b2:61:21:95:f9:26:a4:8f:64:ec:33:ee:22:54:a2:13:
9b:a7:70:71:03:02:76:98:82:6e:6b:04:b6:cc:58:35:fa:9e:
68:0f:97:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU4QUExMTAvBgNVBAUTKDk2NzNCNUNDRjBBOEVBNUNFNDFBMkU0NzYzMTFGMzc1
Q0Q4M0MwRDIwHhcNMjYwNDE3MDY0NTEwWhcNMjYwNDI0MDY0NTEwWjAYMRYwFAYD
VQQDEw02OWUxZDZmNi0zMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArz4ncnY2oHVau44iFPctQ/EVYbn5CAYuaqMwct2NUNMNO42rb9C45h/QX9dL
yPT2+H7qbaKNd6EABue3T9XV1OMAgwB7ADZbLYUYJJaP/bphoXZywHLJzqVpGasO
V3tGEYTaGj8NppcVUMqDp2m4lLLMe6g35YeZF5YI70GxTog4aqVPYty7EkydhK/h
DCqfWpg3VuaO6kZu7W8BgkqoAzCBBHljI+So1YpFwbptTIH00G3rxIYF7gq5G9xq
ag6vVq0Q80zlPqHFkmbv8330nXB5TBfG5Bl2CodatO7EatFwhkkZyNYKUdkoLUNu
GuApDZ4/zYOsnV2CUhHesjxiEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsiUGCx
gKTFuQD1bkLTI/CeSLyVMB8GA1UdIwQYMBaAFJZztczwqOpc5BouR2MR83XNg8DS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNThBQS9DMTkzOUNFNjI0
MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZsemtHaTVIWXhIemRjMkR3
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdOSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NThBQS9DMTkzOUNFNjI0MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZs
emtHaTVIWXhIemRjMkR3TkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeri7mZWYk750BttWbZgk5VY3Gr0fqwlr+erQ5HllXXLm2U1ckB2JbTkaCV07
XezerxyEI9jPihPwiVBYcIZATIKMCfCJM+zIeBuMv9V5GB9uJ0m6yH5lFzrUifTJ
wgJpvhUOFmQEntOyZ/BcqJnh4OM3P8UeEnkjaLL1Arh0l9hjgBf/RSTj0SvUFhrG
nGtgcRGWJSg8lvNR7x19fJt0qEyQhVXebjt40MOqxdeZPPx1JYM3Abu+rYOrH8cb
bYe2e29jlM+/ZolvuGvULH+6WUvxaU4QLABUGC+yYSGV+Sakj2TsM+4iVKITm6dw
cQMCdpiCbmsEtsxYNfqeaA+Xjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:33 2026 by rpki-client