
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json)
Hash identifier: JUQzoS5lG7NbwYlO61G8G3mg0kZoMV1DE0Vu7mWGxNY=
Subject key identifier: C1:0E:28:1A:98:5E:50:FA:49:1C:68:E5:DD:24:03:44:6A:B0:F2:3A
Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0
Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
Manifest number: 0162
Signing time: Fri 17 Apr 2026 04:35:13 +0000
Manifest this update: Fri 17 Apr 2026 04:35:12 +0000
Manifest next update: Fri 24 Apr 2026 04:35:12 +0000
Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: ivA4CHgNYnhIHp3kL+PnikZTz10xPDHKK9Wiev4sDRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl
rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0
Validity
Not Before: Apr 17 04:35:12 2026 GMT
Not After : Apr 24 04:35:12 2026 GMT
Subject: CN=69e1b881-56a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:00:9a:2a:2a:96:0a:3c:70:2a:ab:f2:75:
af:33:2b:01:01:93:20:45:4c:78:36:60:53:05:fa:
6f:5b:6d:c3:3e:a2:4d:9e:05:ad:d5:e2:c5:38:a9:
53:06:67:b6:f2:3e:00:ce:5c:4f:0b:44:f1:c5:23:
77:e9:29:34:b3:49:2f:cd:c2:5a:d2:be:45:ec:a3:
32:b1:1f:ca:a1:dc:2a:9f:8a:e2:7b:75:cf:d6:61:
ea:05:fb:35:3b:3d:6a:f9:a9:71:db:ba:9b:3f:4f:
36:c0:d8:85:ed:a3:d3:c7:e9:19:68:a2:51:aa:c7:
b7:0e:4f:e5:f3:59:e5:da:26:d6:58:3c:d4:8e:ca:
8a:b8:ca:e8:22:4d:5b:b5:8e:e8:94:86:62:de:f0:
c2:e0:5c:8e:83:51:89:e8:86:25:7b:f5:54:96:76:
07:21:60:71:c8:2c:67:10:3b:9c:41:6e:84:08:4c:
f1:e2:69:ec:16:04:f1:47:38:a9:db:6e:4c:03:76:
40:ae:41:4a:53:0b:31:96:74:20:0f:85:ba:d4:80:
22:f5:eb:ff:89:01:21:b4:f3:09:fc:5c:f6:33:37:
21:6c:d3:66:20:ec:8d:55:64:3b:13:32:3d:ab:a0:
d8:fb:93:83:77:5e:e2:ab:78:be:6b:7b:e6:f7:70:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0E:28:1A:98:5E:50:FA:49:1C:68:E5:DD:24:03:44:6A:B0:F2:3A
X509v3 Authority Key Identifier:
keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b9:4d:ca:74:78:d3:09:ec:a4:09:19:8d:64:71:ab:83:3b:
7d:5f:65:b2:87:c1:3b:fe:b6:3b:61:e8:f5:dd:00:1e:8e:6c:
01:5c:e5:f5:1b:4c:4e:7b:32:7d:c9:a0:2a:38:66:26:17:4d:
50:68:98:aa:08:6c:b9:ab:32:0b:a2:04:c6:45:3e:dc:70:c1:
a7:5a:f6:49:f9:04:bd:11:7f:6b:67:b6:a2:ea:cd:14:94:64:
b5:54:72:d9:37:03:bc:ca:d1:49:6b:cc:e2:0e:97:36:26:85:
ea:ff:f4:70:d5:27:d2:2e:a8:5b:16:cf:4c:43:50:e9:5a:57:
d0:d2:d0:c5:39:11:36:42:85:77:b8:50:68:87:54:69:84:10:
b6:47:9e:d9:65:b0:99:b1:af:1d:47:a0:96:e3:fd:bf:f2:b4:
c9:17:00:60:f3:e6:e3:ff:e3:e6:8a:c8:3e:79:70:80:f3:5a:
1c:31:2d:e2:2f:bf:78:81:e8:af:30:c2:99:f1:64:91:40:dc:
d5:aa:77:a0:66:0f:af:fe:02:7e:d3:29:59:fe:38:c9:b9:89:
fa:30:e6:11:96:e5:05:1f:64:d1:de:c0:81:b6:e7:17:d0:32:
cd:6c:62:d5:31:bd:5f:df:c3:1b:e8:33:9f:54:74:79:65:c0:
50:74:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:52 2026 by rpki-client