
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json)
Hash identifier: 0JYzmjzHqaWRFee0TYA11HFNuvIJ+4VSc2pdl6LPe0U=
Subject key identifier: 44:5A:1F:69:28:4C:ED:D6:1E:2D:B3:E7:FA:32:06:83:59:25:4C:85
Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Certificate serial: 058F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
Manifest number: 0581
Signing time: Sun 20 Sep 2026 23:07:16 +0000
Manifest this update: Sun 20 Sep 2026 23:07:15 +0000
Manifest next update: Sun 27 Sep 2026 23:07:15 +0000
Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: M5P8SxREi5c8hTSqnMF9bJhRedQapx/Ng2CBzGaDP3E=)
2: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=)
3: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1423 (0x58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Validity
Not Before: Sep 20 23:07:15 2026 GMT
Not After : Sep 27 23:07:15 2026 GMT
Subject: CN=6ab06724-1930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:f9:da:91:74:25:08:fe:e6:67:3a:6a:5c:
b0:78:73:c7:12:8e:01:c8:2e:19:fc:7b:29:c6:ab:
34:6c:80:59:5e:9c:94:9c:32:aa:d3:33:30:fc:87:
cc:56:ac:4f:2e:f2:d3:48:a4:c3:52:20:fc:d5:9d:
72:2c:d1:b7:1b:fa:c9:e8:39:3a:e7:22:8e:ea:a6:
3a:2d:76:e6:9a:28:51:c4:d2:51:e6:1c:4c:cb:62:
e9:27:6b:85:e4:e7:56:ad:ed:de:97:57:eb:04:1c:
0f:d2:c9:4a:83:9c:a3:0c:c1:df:3c:83:0d:d3:23:
91:8e:a0:34:84:cf:77:b5:02:78:3e:34:4e:4d:f5:
a4:76:70:ea:cb:87:06:ed:0b:8a:78:69:35:c4:e3:
20:9d:08:99:8a:a5:92:46:56:aa:73:4c:ed:df:82:
84:ef:d1:96:dd:7d:f2:74:14:02:7f:fd:b9:79:4f:
a8:4a:ee:df:26:43:1f:55:b2:1d:08:35:cd:7f:17:
bd:6f:8a:0d:37:46:35:44:78:d9:87:e7:be:b6:00:
3b:8d:f5:c4:bc:c6:12:a8:0f:c6:54:28:08:75:67:
79:e0:48:84:b2:1a:f5:2b:e9:08:f7:35:14:32:02:
bb:96:fb:12:a4:f1:a9:06:c9:87:b1:ce:1c:9a:c6:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5A:1F:69:28:4C:ED:D6:1E:2D:B3:E7:FA:32:06:83:59:25:4C:85
X509v3 Authority Key Identifier:
keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:71:e4:8e:f4:98:bc:5c:40:e0:c7:73:85:ed:a9:02:79:77:
f1:52:3c:a9:4c:b9:61:c3:3d:8a:48:aa:08:d2:69:1a:33:ac:
00:c6:06:77:7e:1d:c4:d4:cb:93:4d:3d:31:a6:90:37:a8:e2:
b7:06:b8:c0:5d:fb:f5:b1:b7:1d:39:27:cf:2d:98:c1:61:9a:
eb:e2:8f:df:b4:91:72:c7:69:25:1e:98:1f:e2:cc:e3:31:7a:
df:0a:37:7d:cd:2b:a0:0e:35:de:a7:5e:51:20:a8:e4:12:d4:
08:b3:e3:b4:d4:6c:a4:d9:80:44:17:5e:4a:06:32:5c:a9:2d:
ec:51:22:ce:2f:fe:91:cb:b8:ab:7d:25:3a:de:47:4a:b1:68:
e0:33:e7:a9:14:f0:0c:2b:d8:8a:21:c8:3a:d7:5a:a2:6a:3d:
c2:78:d7:2b:f2:b5:63:5c:2a:0a:30:e1:55:2b:e1:a7:52:10:
64:6a:fe:82:6a:a8:e9:90:ec:41:f1:27:a7:ec:3a:19:97:62:
90:9e:fa:08:f6:05:c9:b8:6c:1d:41:c2:35:b2:b7:d8:b2:76:
6b:20:f6:23:8c:09:6e:ec:dc:1f:c2:07:a0:be:c3:ce:ab:57:
88:29:b8:d8:7c:a3:37:d0:e7:b2:2a:81:a6:de:32:e7:3b:7c:
af:e7:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:41:27 2026 by rpki-client