
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
File: Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json)
Hash identifier: xL6Os5aQkGg6dZucfsOavzIfVgWHGhUs/KM8SBe24os=
Subject key identifier: E0:8D:93:BF:6A:A1:28:82:3E:74:B8:5D:2F:52:80:41:73:B4:2B:44
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Certificate issuer: /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial: 0390
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
Manifest number: 0388
Signing time: Mon 05 Oct 2026 00:45:08 +0000
Manifest this update: Mon 05 Oct 2026 00:45:08 +0000
Manifest next update: Mon 12 Oct 2026 00:45:08 +0000
Files and hashes: 1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: uGgTqQPnpLSIPxO4Bga1QfcQNUfLnfN3dcnWe6g8hjg=)
2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: z9m+uvmmZmgBXsz1OFhoOX9NKLKtBpx/ZqKVtid9t1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
Validity
Not Before: Oct 5 00:45:08 2026 GMT
Not After : Oct 12 00:45:08 2026 GMT
Subject: CN=6ac2f314-c165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:c7:c0:94:30:8f:04:9d:d8:73:96:ae:8c:
0c:07:49:14:99:f9:6e:7e:be:5e:3a:6c:3d:ea:af:
a1:20:43:0c:1e:79:ba:75:50:ee:76:06:5e:44:aa:
0a:ef:89:fe:72:25:0b:fd:37:be:19:bb:d8:9d:37:
2f:62:95:4b:92:96:71:fb:f0:ab:94:e5:58:bb:11:
37:00:cb:d1:a4:88:3a:8d:ca:48:ee:86:f7:17:10:
cb:fc:69:98:64:3a:66:90:e9:45:5b:73:bd:9c:24:
df:96:55:73:fb:66:53:80:dd:94:1a:b5:08:80:20:
8d:78:f2:4f:77:28:67:76:0c:3a:0e:f8:29:df:81:
72:08:f5:c2:45:0c:a7:7a:e8:51:ca:07:e9:3c:eb:
61:73:86:58:0d:e9:20:47:35:54:12:68:04:d4:af:
be:66:21:70:ac:04:f4:e6:33:fc:7b:83:b2:59:3c:
34:16:2f:f6:47:70:69:5d:de:14:19:df:46:23:4d:
19:cc:f4:76:ac:32:1b:07:bf:fd:2f:f8:67:51:b7:
5a:96:57:c2:25:13:32:a6:87:a3:42:21:1b:e8:ae:
ce:02:67:7f:20:0f:a6:6a:b1:c9:f5:c9:08:0e:09:
9b:f8:e6:25:8d:50:42:b4:74:f2:ed:09:62:d3:c4:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8D:93:BF:6A:A1:28:82:3E:74:B8:5D:2F:52:80:41:73:B4:2B:44
X509v3 Authority Key Identifier:
keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:33:87:a4:79:9f:b9:d8:4c:9f:17:aa:76:97:8e:4f:4c:85:
bf:49:87:08:46:f3:3f:05:f4:70:da:2d:a9:09:c2:e0:7a:80:
ff:d8:5b:b4:ec:e2:8f:5a:6f:55:59:5b:31:d6:a3:80:0d:c4:
ae:d2:c8:3f:a3:29:85:91:39:ec:d3:16:52:ff:af:ba:5f:b4:
79:63:5b:f3:81:ce:1f:f8:eb:8a:90:66:cb:7c:2a:33:ee:d1:
0e:26:e8:99:1c:af:0c:63:11:d4:08:0f:f6:bf:ae:31:a4:c4:
20:76:d0:61:9b:55:73:5c:e7:a8:86:97:15:e7:5d:68:81:8d:
67:22:79:77:6e:d6:db:92:db:f1:51:4e:8a:c9:ee:7e:48:d9:
d2:39:4a:96:56:1b:7e:9b:5b:fc:a5:99:96:0b:47:7f:03:be:
f9:1a:75:21:c5:0b:68:02:ed:4c:53:ad:3f:44:72:81:d8:51:
db:b1:32:4b:06:b8:1b:04:e1:3f:8e:47:36:5a:9e:8e:e6:1b:
cc:ef:6a:36:4b:b5:0f:3b:45:75:1e:94:78:eb:8f:05:12:31:
f7:46:32:c8:0f:9e:48:85:5f:56:ad:1b:d8:0a:83:12:59:5d:
08:82:c6:0e:39:31:5c:4a:37:46:98:d3:67:6c:01:fc:17:22:
ff:33:34:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:24:18 2026 by rpki-client