
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json)
Hash identifier: W2/h23jacMr+sRv7jE1WLR2naunxodTRcs1dmMeXqRk=
Subject key identifier: 24:6E:7A:F0:A8:36:30:7F:96:12:40:90:2D:48:28:09:49:97:1F:4D
Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
Manifest number: 014E
Signing time: Fri 25 Sep 2026 05:20:56 +0000
Manifest this update: Fri 25 Sep 2026 05:20:55 +0000
Manifest next update: Fri 02 Oct 2026 05:20:55 +0000
Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: AtWfVq8ga3Vt42nQwWJJRjfIuBdXldMpgbOrvnFLLU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Validity
Not Before: Sep 25 05:20:55 2026 GMT
Not After : Oct 2 05:20:55 2026 GMT
Subject: CN=6ab604b7-0340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:d2:aa:ee:ad:66:ab:fd:ce:b6:9c:4e:3f:
c0:ac:ef:a7:6a:ed:6d:1d:fa:ac:63:cb:a7:71:fa:
b8:bb:fd:fc:d2:5a:06:f0:3d:cc:c9:97:64:3f:32:
af:c0:15:b8:d8:a9:2c:03:77:0c:eb:d9:f5:4c:d9:
dc:a2:ad:33:81:55:46:14:b6:8a:52:ba:70:ef:91:
ed:04:94:87:9b:12:bc:d2:e4:f1:4f:54:ab:36:07:
7e:a6:ae:0d:a1:35:ce:ca:ba:3a:eb:7b:ee:44:ca:
11:5e:29:f4:a7:11:d6:57:9e:02:fd:2b:1a:25:df:
a2:71:ef:f2:5d:3a:1e:a3:cf:0d:a8:02:66:fa:0a:
48:7c:90:24:c1:04:5b:ea:49:cd:e2:55:dc:a0:08:
6c:6b:d7:14:15:ba:29:73:88:58:7b:00:3b:df:3d:
b9:c6:29:2b:de:9c:8c:24:70:f3:c3:8b:14:a1:c8:
62:5e:81:88:86:0b:7a:ce:16:36:a3:7e:98:6a:38:
be:1c:bc:35:58:51:ae:be:04:54:30:1b:f8:05:30:
22:a8:3e:5e:90:17:4a:66:4c:7a:57:c4:48:e1:8c:
2d:4a:c6:ba:4f:b4:41:84:eb:2d:de:89:99:ca:34:
ae:5f:41:68:f1:f0:08:e4:b0:1c:52:20:5d:cd:bf:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6E:7A:F0:A8:36:30:7F:96:12:40:90:2D:48:28:09:49:97:1F:4D
X509v3 Authority Key Identifier:
keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:9d:5b:fe:04:cb:86:e9:f3:c0:92:19:38:80:eb:d1:57:05:
19:bc:24:d2:53:50:2e:70:4f:d8:8f:00:c1:b9:ca:fa:3d:66:
b3:71:37:03:00:45:f4:c6:86:c4:3e:9b:8e:36:15:17:39:b1:
c7:90:ee:9f:12:67:2c:10:16:3b:c0:a1:c7:50:41:71:f6:98:
b8:09:ea:46:62:2d:6c:c5:64:fe:ae:2f:04:3d:7d:7f:db:d7:
60:1c:8a:53:92:44:cf:ff:0e:38:97:aa:05:51:86:f4:fe:c0:
20:6a:ea:0a:36:60:77:06:03:b0:8f:c7:c3:ba:6f:43:7f:46:
01:1f:12:f6:37:cb:a8:dc:37:9c:1b:bf:b6:33:a1:67:da:a5:
83:94:86:cc:49:98:84:59:4f:af:aa:48:4e:e7:55:03:f9:73:
5f:df:76:a3:9d:e9:66:21:c8:f6:1f:68:27:fa:87:3e:c4:8a:
3b:78:2b:0b:d3:43:1a:11:cd:79:60:e3:1e:dc:a5:fb:b3:05:
4c:1b:29:0a:39:c7:e4:b6:85:20:2c:51:ed:5f:80:44:f3:46:
00:f2:f9:70:3c:ad:47:a1:87:42:ff:31:b6:f1:c4:62:c7:d0:
55:36:de:27:7c:da:cf:d8:5e:a8:88:4a:fa:b3:17:b9:d8:7b:
5f:35:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:53:44 2026 by rpki-client