
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json)
Hash identifier: /gJlCRaeeAPd2lpzllXsKv3Hv8E7cAstdYb9MXql6us=
Subject key identifier: 86:E1:3C:4B:9C:93:56:62:86:FC:45:E2:B9:84:33:EA:14:28:06:07
Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
Manifest number: 0234
Signing time: Wed 17 Jun 2026 02:41:34 +0000
Manifest this update: Wed 17 Jun 2026 02:41:34 +0000
Manifest next update: Wed 24 Jun 2026 02:41:34 +0000
Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: noGhJyUJgXxKVXB/vkumP1X3MSgmO4gr5uovt4iZGUo=)
2: 252E9EB4652411F196C4FA3A8447A888.roa (hash: uLZNLe/3LKewURqIVc5uNnrl/e0YDlahAtsJGHncajc=)
3: 25C794C0652411F196C4FA3A8447A888.roa (hash: N45LL33IihqS/P4Wkd4Y5RM4yOWChQgClLZI5lkYTq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Validity
Not Before: Jun 17 02:41:34 2026 GMT
Not After : Jun 24 02:41:34 2026 GMT
Subject: CN=6a32095e-ee44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:94:5d:12:31:4f:26:75:ce:e9:a3:be:86:20:
db:c9:6a:22:13:ce:28:91:5c:8e:5c:ef:c6:fa:a8:
3b:d9:34:81:07:7f:09:70:fe:bf:95:ae:f1:82:d4:
97:7f:73:a8:f9:0e:c9:76:19:ae:c6:68:99:1c:15:
43:2e:1b:a2:3e:1c:d4:9b:28:92:93:3a:33:9c:57:
fa:3e:3e:47:77:98:ad:41:0e:00:ec:92:4e:72:bb:
87:50:55:41:5b:9a:d7:7e:8b:85:22:03:60:65:1c:
e3:9a:3b:89:3a:31:9e:ed:b9:ea:17:b4:07:5e:00:
9c:3a:83:0d:31:0f:c5:9e:6f:56:af:b1:da:f9:94:
6f:86:34:07:59:3b:9c:f2:21:b8:65:ca:04:05:58:
61:43:02:41:67:cc:01:3b:0d:15:fe:c7:46:44:c9:
80:5e:90:ff:0f:8d:52:de:6b:fd:14:76:08:3c:9b:
94:57:c9:67:31:a6:10:f0:d8:37:8b:99:d2:93:ff:
b4:1f:54:96:0c:3f:89:9a:51:39:80:04:ba:68:e2:
7a:77:ac:eb:a2:51:bf:29:d7:d4:0d:c3:8e:bf:4e:
75:0c:79:f5:99:a4:97:8f:7d:38:d4:d3:6f:9c:d2:
be:de:cd:ac:af:71:07:fa:e5:bf:5e:da:b9:c9:a7:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:3C:4B:9C:93:56:62:86:FC:45:E2:B9:84:33:EA:14:28:06:07
X509v3 Authority Key Identifier:
keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:2e:03:6e:af:2c:2d:44:33:9d:f9:27:11:5f:cf:3f:d5:8a:
c9:12:06:59:39:3b:69:b5:f8:53:fc:a8:ad:be:84:91:5a:9a:
8b:ec:e9:b0:45:cf:e4:85:d8:d2:84:8c:5b:a9:37:7a:b4:eb:
4e:8c:2e:29:83:07:33:12:be:ab:0d:d1:c0:34:7a:9f:e0:00:
ff:1a:82:68:36:79:37:6b:5b:df:1c:31:9e:44:cf:64:55:34:
24:64:47:37:3a:9c:d8:46:b2:56:74:22:f2:83:66:69:2a:ac:
03:88:99:58:63:bc:ca:ad:fe:4f:0b:7d:fc:c7:b2:04:35:27:
7c:e9:e7:d6:39:cd:44:8c:71:62:1d:2d:6d:4c:14:36:8b:cb:
de:c0:55:2e:c6:a5:8e:3f:31:f7:7d:46:25:d5:39:8c:d6:20:
11:32:ce:14:e2:25:a6:85:23:8d:41:e2:d7:55:d0:5a:a7:d8:
b3:f5:b7:b6:b8:0d:b8:d6:b3:06:05:5f:1f:f2:d4:02:09:d4:
92:30:18:27:97:8a:77:b2:6f:bf:dd:8a:e3:23:70:78:98:0c:
5d:b6:39:f1:ea:cf:b6:48:ab:31:25:ff:e3:89:95:ab:cd:5c:
4d:ac:e5:7c:4b:42:3a:ee:95:bb:cc:89:24:f6:5b:33:f8:70:
1d:bb:82:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:57:21 2026 by rpki-client