
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
File: lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json)
Hash identifier: AsPIJgc1C2iiPvSSgjYnhDYYee6SlKMufcRPpEG2yJA=
Subject key identifier: 89:BC:36:92:52:96:85:CE:94:71:D4:2D:41:84:00:45:8F:6D:66:21
Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66
Certificate issuer: /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
Manifest number: 176D
Signing time: Mon 02 Mar 2026 01:05:01 +0000
Manifest this update: Mon 02 Mar 2026 01:04:59 +0000
Manifest next update: Mon 09 Mar 2026 01:04:59 +0000
Files and hashes: 1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: co9vnUla0brd1IFJP4nAbKZBuoEcfLn3JIzQZkSu6HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl
rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
Validity
Not Before: Mar 2 01:04:59 2026 GMT
Not After : Mar 9 01:04:59 2026 GMT
Subject: CN=69a4e23c-a325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:26:7d:cd:9c:db:0d:3b:27:67:79:91:7a:6e:
cf:41:19:38:78:2e:29:d4:64:62:d7:39:65:9b:e8:
bc:cb:dc:78:aa:27:04:79:8c:7d:56:fc:05:03:03:
f4:72:02:64:32:ed:c3:b4:68:ca:db:c1:a4:e2:bf:
f5:f7:ae:af:97:bf:78:55:7b:8b:42:6d:87:33:e7:
38:7a:56:b3:1a:d1:d9:7d:27:8f:42:ad:4a:96:77:
32:40:49:de:ce:98:83:41:72:4c:24:44:25:15:4d:
2c:18:56:0e:20:f2:37:39:21:e2:ac:31:9b:61:a3:
dd:a2:36:d3:c7:85:7f:91:cb:42:ab:03:2a:73:3d:
eb:08:d3:25:3d:39:dc:05:b8:4f:de:a6:ce:5b:c8:
04:52:02:7a:75:c9:03:2e:9e:56:c1:e9:d4:0b:c1:
39:30:9d:8a:2b:e9:a0:4f:ed:c8:27:9d:08:5d:0b:
90:14:98:64:ed:3a:13:e7:13:69:c7:16:d6:3f:04:
b3:f8:d4:7a:5d:78:fb:43:5b:f1:2a:65:c2:f1:a0:
0c:00:62:82:1d:5c:2e:65:7e:e4:0a:8c:14:bc:8a:
63:fa:50:bf:30:d1:60:55:52:37:2d:c7:f9:df:d4:
b6:5b:ce:28:c8:b0:7d:2f:de:af:66:a4:6e:61:f6:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:36:92:52:96:85:CE:94:71:D4:2D:41:84:00:45:8F:6D:66:21
X509v3 Authority Key Identifier:
keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:20:10:44:14:ba:1e:49:42:50:1b:ed:07:58:87:1d:fb:44:
29:17:69:88:91:49:3c:68:e5:fe:1f:2d:b8:26:6d:17:cd:74:
ba:fc:ef:9d:52:ac:fa:f5:cc:81:b6:cb:29:ba:50:c0:d7:f4:
1d:be:20:a0:59:08:0b:ee:27:72:1d:53:9b:a3:b0:9c:a1:2f:
73:33:1a:82:f6:a4:a8:e0:f3:b4:5c:9d:54:89:0b:19:8e:84:
3b:3f:87:ea:4d:1d:f7:9e:1e:c9:fb:88:14:b7:99:da:6d:e5:
52:38:59:bb:f0:e1:87:70:eb:d1:54:bd:bb:b1:5a:73:c2:8a:
58:9f:63:d4:fe:d4:92:6d:6f:d8:38:c9:97:1c:8f:b3:de:b4:
fc:0f:c7:48:c9:b1:3b:f8:30:21:56:ce:6d:ab:c7:c0:4f:d1:
ef:fb:2c:a7:fc:4d:f4:bd:1b:79:6f:6e:cc:3c:c6:b1:fd:1d:
cf:c6:7f:b8:4a:31:77:29:e2:64:a6:15:ab:73:07:75:cc:0e:
66:76:1b:05:b4:f1:39:72:15:29:12:0b:0e:cd:18:82:69:ab:
6a:77:b9:b6:56:c0:a4:fa:9b:15:1a:76:58:24:15:ca:64:fb:
4b:be:15:54:25:f5:4b:8a:01:d7:65:34:3c:38:61:5f:eb:96:
e8:a0:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:52 2026 by rpki-client