
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json)
Hash identifier: QDpN57IR1Uy7FP/Zq6yWbnAjbdSwj+FEniDoEB8IvmM=
Subject key identifier: 14:3A:84:56:09:5A:FF:44:DA:8C:08:95:CE:C6:F2:04:45:DA:46:68
Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0
Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
Manifest number: 01B2
Signing time: Mon 21 Sep 2026 03:59:23 +0000
Manifest this update: Mon 21 Sep 2026 03:59:22 +0000
Manifest next update: Mon 28 Sep 2026 03:59:22 +0000
Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: SC5rRtlHk746fXF5bJqTcauSRZc5n5aK7yViW4o+yzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl
rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0
Validity
Not Before: Sep 21 03:59:22 2026 GMT
Not After : Sep 28 03:59:22 2026 GMT
Subject: CN=6ab0ab9b-60fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:06:64:db:01:3d:3d:a9:0e:bf:46:cf:14:
af:4b:4e:e4:1f:76:7c:e8:e2:0f:9f:0f:c4:82:1d:
55:60:80:7c:3d:73:d0:6f:39:5d:01:d8:03:80:6b:
f2:66:34:b3:87:2e:cd:0a:1e:42:3f:80:c1:10:65:
b5:8d:a9:95:ba:b4:d1:f1:54:9f:ac:0a:ba:b8:6c:
5f:b5:45:01:bc:39:10:dd:f6:9b:c1:ea:c4:f8:d0:
5d:91:c8:df:87:7f:73:19:de:f7:6b:b5:53:3c:86:
6b:d0:58:eb:7e:c4:df:f0:11:fc:b1:7c:4d:76:c3:
53:c1:86:64:a0:44:e3:24:9b:46:77:c6:2d:ad:1e:
ef:6f:06:04:1b:2c:74:06:2e:43:03:f2:b6:ae:fb:
2b:d3:f8:9f:99:da:00:dc:cb:98:ed:7a:ed:59:f6:
c6:68:c9:12:a2:82:30:80:f9:0f:ae:ba:fa:f4:3e:
7b:6e:37:78:a2:c5:02:fd:9e:ef:3c:43:2a:2c:17:
7f:07:7c:d1:dd:47:0c:2b:a0:7c:a5:7f:ed:c6:20:
41:67:9d:18:95:b0:03:97:12:b6:3b:e5:6e:e3:70:
f2:5e:90:53:67:13:c4:f2:48:b9:8f:5e:ae:d8:e8:
59:99:23:ef:61:d1:59:a7:c5:77:8b:bf:3b:dc:76:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:84:56:09:5A:FF:44:DA:8C:08:95:CE:C6:F2:04:45:DA:46:68
X509v3 Authority Key Identifier:
keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:72:86:ef:1d:55:31:6f:cc:bc:47:97:b9:89:fa:bf:1e:e7:
28:e7:0a:1d:49:5b:0f:b8:0e:53:e5:59:62:47:cb:2f:67:f6:
dc:2e:be:6a:46:9c:ba:14:32:24:cb:b1:d2:ea:39:5a:7f:61:
8e:d0:3a:e0:5c:df:2e:f1:e4:0d:97:62:9f:e0:e3:07:a3:ff:
93:e0:ec:21:cc:e2:0d:76:b0:8e:5b:36:7d:72:3a:1e:00:ea:
65:a5:27:d0:e7:56:f9:40:35:0b:c3:a6:38:1e:ac:e2:9d:f2:
1f:f2:45:f5:4f:ad:d9:46:6f:57:49:2f:15:8f:81:8b:b2:dc:
c5:66:3a:73:30:13:0f:03:6b:53:4e:38:14:9e:16:e3:4e:0d:
55:bc:d3:98:6d:60:0c:60:95:bb:5b:b7:0c:31:77:a7:2d:95:
07:e5:08:41:cd:5b:37:48:33:89:45:9b:7d:b9:e3:50:c7:a9:
78:20:47:07:e7:c1:59:d2:c6:f8:c8:32:8f:fa:da:f5:92:b7:
b0:5c:61:de:79:93:ab:26:68:d5:2a:8b:07:b4:6d:18:d8:e4:
f0:cb:2d:75:2a:f2:93:37:42:5b:15:70:2c:a9:46:54:4b:66:
2c:03:1c:4b:5b:ad:cf:4c:d6:49:9f:8f:b7:78:2a:bc:40:9e:
85:dc:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:21:25 2026 by rpki-client