
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
File: cLpsN0BJKqpJbOn3BQf-g3072BI.mft (raw, json)
Hash identifier: kisYeLWSwLdXe36XrUED4laKm6P4tEJhjWsOdSrzi24=
Subject key identifier: A4:AA:BE:B8:43:B3:90:AF:BB:E4:6D:AA:78:FC:14:7B:83:2F:4E:10
Authority key identifier: 70:BA:6C:37:40:49:2A:AA:49:6C:E9:F7:05:07:FE:83:7D:3B:D8:12
Certificate issuer: /CN=A91CCABB/serialNumber=70BA6C3740492AAA496CE9F70507FE837D3BD812
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
Manifest number: 42
Signing time: Sun 19 Apr 2026 08:03:09 +0000
Manifest this update: Sun 19 Apr 2026 08:03:09 +0000
Manifest next update: Sun 26 Apr 2026 08:03:09 +0000
Files and hashes: 1: cLpsN0BJKqpJbOn3BQf-g3072BI.crl (hash: i+D2/pq9ylv9Q8fOeC3xkAszKsrTG7/oNL9RftFekKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.crl
rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCABB, serialNumber=70BA6C3740492AAA496CE9F70507FE837D3BD812
Validity
Not Before: Apr 19 08:03:09 2026 GMT
Not After : Apr 26 08:03:09 2026 GMT
Subject: CN=69e48c3d-2294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:e7:2a:5f:66:8b:7a:32:05:73:6c:fc:ce:
96:72:a8:9a:36:b9:ff:e5:db:8d:24:91:f1:61:c6:
09:33:57:0f:ba:22:4e:f2:83:4b:0e:fa:38:23:68:
69:a9:45:0d:80:e9:31:22:3c:25:48:13:97:31:a2:
a7:a7:e2:bd:76:ca:f7:9f:e5:03:1b:e0:66:75:50:
3b:79:fa:7a:e0:24:a5:68:0e:32:06:d0:74:f6:76:
94:4d:5d:48:6b:d4:78:32:6d:36:59:41:0d:90:d8:
49:bf:a4:e3:e8:d1:2e:b5:2c:57:af:e2:14:e1:f0:
aa:30:6a:ac:b6:8a:bf:b5:67:9b:ce:1c:08:52:86:
df:a6:67:53:33:75:50:27:03:35:23:72:82:db:19:
75:7c:e0:88:de:de:3f:db:9d:dd:2f:6f:14:75:b4:
82:8f:50:e6:ad:b9:01:40:89:3a:b5:22:da:82:16:
03:f4:eb:d0:bb:be:70:00:26:12:1b:de:f8:c6:e8:
17:00:b6:26:d3:8e:b8:b6:12:82:86:92:44:2c:c8:
fe:7b:23:d1:6e:34:cf:b4:26:10:24:0a:32:44:63:
cc:7e:dd:d2:45:a9:60:9c:11:b2:2b:36:b2:ae:c7:
bc:d4:70:3b:b5:ba:e0:ff:22:9f:eb:f1:4e:6a:1c:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AA:BE:B8:43:B3:90:AF:BB:E4:6D:AA:78:FC:14:7B:83:2F:4E:10
X509v3 Authority Key Identifier:
keyid:70:BA:6C:37:40:49:2A:AA:49:6C:E9:F7:05:07:FE:83:7D:3B:D8:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:7d:77:8c:b3:9e:a1:1f:85:ac:56:88:08:b0:e8:36:31:de:
80:fe:0d:22:4d:c1:05:4a:35:23:24:67:f6:0d:38:aa:41:3b:
55:89:36:63:46:49:c3:70:96:24:11:85:a9:ce:81:2b:3d:e8:
30:53:7c:b9:c4:34:53:b4:bc:86:d4:e7:98:57:8b:22:be:96:
f1:ce:68:76:f3:cb:f7:61:d9:4c:b3:ec:d1:1e:21:2e:61:1f:
b8:0a:ce:a8:99:e4:01:6a:40:77:27:c9:61:23:5d:ed:80:86:
62:92:07:09:36:b8:c1:5b:a3:35:4b:93:81:3b:b0:2e:95:cc:
00:42:c2:53:a5:9d:74:9f:f9:58:36:c3:d5:8a:83:7e:50:fc:
b7:d6:80:4c:c2:01:2a:7d:7f:d9:19:0b:cb:b9:2b:58:61:d0:
a8:3c:ef:7e:87:8c:31:fc:54:06:44:c2:d9:d9:da:e3:d5:e8:
d2:b2:6d:4f:38:f9:13:0a:82:7e:68:e8:40:aa:d4:c5:b3:72:
66:2e:3b:c5:16:dc:a8:43:9b:44:7b:27:90:6d:ef:bf:9a:27:
b8:11:93:99:9f:41:c2:c5:50:08:cb:f6:85:cb:e7:59:75:5e:
78:58:ea:89:40:65:5c:7b:ab:9d:c3:15:da:8a:2c:ba:6e:ed:
ed:7d:05:fa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0FCQjExMC8GA1UEBRMoNzBCQTZDMzc0MDQ5MkFBQTQ5NkNFOUY3MDUwN0ZFODM3
RDNCRDgxMjAeFw0yNjA0MTkwODAzMDlaFw0yNjA0MjYwODAzMDlaMBgxFjAUBgNV
BAMTDTY5ZTQ4YzNkLTIyOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtl+cqX2aLejIFc2z8zpZyqJo2uf/l240kkfFhxgkzVw+6Ik7yg0sO+jgjaGmp
RQ2A6TEiPCVIE5cxoqen4r12yvef5QMb4GZ1UDt5+nrgJKVoDjIG0HT2dpRNXUhr
1HgybTZZQQ2Q2Em/pOPo0S61LFev4hTh8Kowaqy2ir+1Z5vOHAhSht+mZ1MzdVAn
AzUjcoLbGXV84Ije3j/bnd0vbxR1tIKPUOatuQFAiTq1ItqCFgP069C7vnAAJhIb
3vjG6BcAtibTjri2EoKGkkQsyP57I9FuNM+0JhAkCjJEY8x+3dJFqWCcEbIrNrKu
x7zUcDu1uuD/Ip/r8U5qHKA/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpKq+uEOz
kK+75G2qePwUe4MvThAwHwYDVR0jBBgwFoAUcLpsN0BJKqpJbOn3BQf+g3072BIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUJCLzQ4RTY4RTQwREQ3
ODExRjBBNTg2QjEyODM4NkY1NkJDL2NMcHNOMEJKS3FwSmJPbjNCUWYtZzMwNzJC
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY0xwc04wQkpLcXBKYk9uM0JRZi1nMzA3MkJJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
QUJCLzQ4RTY4RTQwREQ3ODExRjBBNTg2QjEyODM4NkY1NkJDL2NMcHNOMEJKS3Fw
SmJPbjNCUWYtZzMwNzJCSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAhfXeMs56hH4WsVogIsOg2Md6A/g0iTcEFSjUjJGf2DTiqQTtViTZjRknDcJYk
EYWpzoErPegwU3y5xDRTtLyG1OeYV4sivpbxzmh288v3YdlMs+zRHiEuYR+4Cs6o
meQBakB3J8lhI13tgIZikgcJNrjBW6M1S5OBO7AulcwAQsJTpZ10n/lYNsPVioN+
UPy31oBMwgEqfX/ZGQvLuStYYdCoPO9+h4wx/FQGRMLZ2drj1ejSsm1POPkTCoJ+
aOhAqtTFs3JmLjvFFtyoQ5tEeyeQbe+/mie4EZOZn0HCxVAIy/aFy+dZdV54WOqJ
QGVce6udwxXaiiy6bu3tfQX6
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:17 2026 by rpki-client