
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier: QXKCQOfjU1JS4kmYD49TqfJ7UiViVXVnGTU8KxBp6Sk=
Subject key identifier: 4F:CA:29:8A:11:D6:BD:FD:E8:3E:83:A6:84:95:A0:CF:70:E2:24:50
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial: 08A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number: 0898
Signing time: Tue 22 Sep 2026 20:28:57 +0000
Manifest this update: Tue 22 Sep 2026 20:28:56 +0000
Manifest next update: Tue 29 Sep 2026 20:28:56 +0000
Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: dStznyTCm89RMJczjlpsaglXOMRwJBhraSpcVEYK4Kw=)
2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: PnvDWjWzjaNuJRVmvtkfv01lOJ4mbsRef16ZNQueyWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215 (0x8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Validity
Not Before: Sep 22 20:28:56 2026 GMT
Not After : Sep 29 20:28:56 2026 GMT
Subject: CN=6ab2e509-6b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:79:a7:7d:69:0c:99:db:df:72:5d:29:10:
93:09:90:33:3c:63:fa:b8:bf:ba:c9:ce:03:ca:48:
50:fb:cf:1f:8c:9d:a2:a7:64:42:29:1a:c3:5d:1e:
f1:9d:a8:a9:33:ff:7e:48:a8:3e:fd:5f:ed:9d:02:
cb:ee:44:62:8d:72:7f:c8:fb:30:4d:94:96:ea:7b:
2f:76:ad:9b:37:70:48:fb:c2:7c:ce:77:ef:6e:69:
51:97:f7:98:f1:55:2d:b3:5d:db:9e:c3:61:29:3b:
c3:c1:bf:a9:e0:e4:eb:58:b1:5c:d4:bc:2e:4e:26:
7f:01:6c:70:d4:53:94:ad:cc:e2:51:be:0f:85:37:
d7:06:07:27:6a:69:9f:41:0b:5a:c4:fe:a3:0f:95:
73:14:43:66:14:75:b7:a4:76:e0:3a:2b:b6:b2:b2:
22:b8:79:85:26:89:df:f8:53:53:87:f0:e6:27:17:
3b:22:b7:5a:06:75:d5:c1:de:89:d5:41:6b:23:0d:
7c:1f:39:c1:ea:33:c3:e9:e4:54:44:4c:24:85:68:
ae:f7:64:de:be:5a:12:58:03:b4:21:e6:b5:94:b9:
86:d5:3b:0c:53:7e:ef:24:df:b3:1d:06:23:ae:24:
3b:ea:da:ae:90:f3:96:da:bf:ea:0a:2e:a7:8b:e7:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CA:29:8A:11:D6:BD:FD:E8:3E:83:A6:84:95:A0:CF:70:E2:24:50
X509v3 Authority Key Identifier:
keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:79:4f:f4:4a:59:b7:64:4f:a6:0b:7b:f3:ac:7b:59:43:e9:
a5:51:9d:14:8d:c0:88:2f:db:1a:8e:50:fe:ac:3d:b1:6a:c4:
92:af:13:89:f3:e2:d3:93:76:a4:03:ea:5e:c8:40:ce:6d:ad:
35:ab:38:f4:f5:ea:fb:6f:d9:66:7c:b0:25:4a:2c:96:7f:ae:
f3:b2:4c:e1:e2:db:68:09:7b:a6:a7:96:40:d3:27:c5:40:0f:
0f:42:31:51:57:b6:a9:c1:68:a0:db:11:09:4b:4a:8a:3b:43:
3c:5d:57:06:08:35:14:c6:e1:66:34:35:96:a2:ee:65:56:9f:
3d:19:3a:c6:68:6d:8e:73:3d:44:ed:2c:1b:db:92:15:ea:10:
ed:0e:23:50:d9:a2:47:0b:10:08:7f:a8:68:c2:b8:b6:7f:e6:
91:a2:45:c7:00:2c:56:d2:15:7c:80:23:e4:5b:1b:e8:20:2d:
44:e7:97:05:4b:19:7b:e8:53:56:5e:ab:10:bc:de:31:f4:88:
2b:c5:1c:c0:f6:59:b9:57:37:fa:6a:d9:13:e6:a7:cd:59:1c:
0b:96:1a:d2:e9:3c:51:09:fe:66:7c:cb:ab:ad:f9:52:fe:0e:
9e:99:54:77:da:99:c9:4b:fb:66:0e:22:f8:77:74:17:fe:89:
15:92:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:53:56 2026 by rpki-client