
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier: ARC7OeA+Jo1tB31nDbGEbckD/tSsDPNFxfw6yS+Am/o=
Subject key identifier: 70:89:FC:12:8F:C9:3A:FB:16:32:50:70:44:85:5B:17:1F:A7:F4:61
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial: 0475
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number: 0468
Signing time: Fri 17 Apr 2026 00:03:01 +0000
Manifest this update: Fri 17 Apr 2026 00:03:00 +0000
Manifest next update: Fri 24 Apr 2026 00:03:00 +0000
Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: SmaNdQRvzsiKGrMkfyfkLVylQoUcWVOmxUNij/GxCHw=)
2: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=)
3: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Validity
Not Before: Apr 17 00:03:00 2026 GMT
Not After : Apr 24 00:03:00 2026 GMT
Subject: CN=69e178b5-644a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:9a:8c:e7:7e:d5:36:1a:1e:72:2c:65:5f:
e7:84:73:64:f8:6b:50:13:bd:3f:73:84:a5:72:db:
7d:c7:ac:56:cf:34:97:28:bc:fe:de:00:ee:68:d4:
22:2e:2c:a1:5b:4f:aa:e9:5f:01:30:ae:c0:3a:22:
f1:65:87:06:52:c4:11:8c:1d:b2:5e:0e:47:68:83:
fc:15:1e:20:ef:29:e4:c1:b1:e1:54:c0:70:bc:bb:
fc:43:b7:ec:62:fe:04:35:9b:0e:f8:5b:73:38:cf:
47:30:e0:ad:65:9d:d7:bc:d7:46:15:85:80:4a:f5:
08:14:92:e0:1d:21:a4:36:3b:a2:07:98:10:6d:1a:
ef:c1:ff:f9:56:b6:6f:9a:8e:11:ac:df:7a:ef:41:
5f:fb:eb:55:69:f5:11:a4:65:74:f4:f8:d9:9c:be:
b1:3a:f0:0e:f3:ca:bc:c5:c4:90:ec:b4:81:bd:c4:
0f:d1:9b:a6:ae:02:4e:03:ba:5b:ad:e4:ed:80:c4:
f1:30:52:4e:5b:0a:42:f9:2d:5c:ee:40:67:3c:0e:
cc:0d:50:93:81:72:99:57:9f:e1:a8:cb:80:ce:9c:
bc:ca:19:63:37:47:53:66:54:f9:c4:66:48:63:03:
e1:b2:49:95:cf:05:cb:ea:3f:05:4a:73:ec:89:78:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:FC:12:8F:C9:3A:FB:16:32:50:70:44:85:5B:17:1F:A7:F4:61
X509v3 Authority Key Identifier:
keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b8:ba:c4:a3:a4:03:3c:2c:0c:a9:93:08:9e:21:f9:b6:49:
80:76:36:0e:a0:9b:9d:02:ae:ce:61:fa:a2:e7:5a:ee:8b:db:
dc:6a:8c:67:f2:60:4f:e4:e2:cd:4b:8a:3e:f5:78:99:0d:44:
86:4e:e5:a3:6d:97:a9:3a:0e:c9:cb:30:ee:63:2d:6f:c6:92:
a7:35:0d:14:02:94:3d:23:87:e0:77:e9:06:0b:ba:2a:b9:3a:
49:7e:00:57:05:ac:4d:9e:9b:a8:8f:de:e7:e6:46:2f:ed:0b:
5f:15:cf:7e:f3:fe:e1:ff:b2:0d:68:26:0e:65:10:b4:7a:98:
61:ad:6f:c0:12:bf:83:f9:a9:66:5d:57:67:d3:23:4f:b2:43:
f3:29:07:ef:81:49:13:aa:e7:1a:1a:cc:f3:c7:3b:72:cd:b7:
40:0a:6d:d4:d3:c4:ea:9a:b4:5a:62:3a:2b:31:d6:98:b2:3b:
8a:6d:de:9f:bd:09:64:7c:05:b6:25:19:d5:a5:a8:5c:f3:0c:
87:ba:18:8b:6a:8b:1b:ed:10:20:6a:31:b6:25:74:69:03:ce:
3e:c6:61:07:c6:d9:e1:d8:34:62:8f:c5:de:ff:9a:82:c8:4f:
53:d4:5a:f9:f1:81:dc:94:21:3c:d7:4f:8e:8b:14:93:74:22:
99:0e:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:42 2026 by rpki-client