
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json)
Hash identifier: xAwr8TnFIdO80BebX1wpuDn5V/5Li9d+drQwUg03CIU=
Subject key identifier: 3E:75:6A:05:46:89:51:6A:D2:24:05:29:92:B1:E2:CF:A9:3E:FF:F9
Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
Manifest number: E4
Signing time: Sun 01 Mar 2026 07:38:02 +0000
Manifest this update: Sun 01 Mar 2026 07:38:00 +0000
Manifest next update: Sun 08 Mar 2026 07:38:00 +0000
Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: Z/P77i+C87Hi0HhmudiV7eCds0SVq9r+W8NVX5a+wYE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Validity
Not Before: Mar 1 07:38:00 2026 GMT
Not After : Mar 8 07:38:00 2026 GMT
Subject: CN=69a3ecd9-04b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:e8:1e:62:e3:70:73:2b:94:5a:a8:2c:0a:
ae:17:cb:25:5a:2e:a1:dc:ea:f0:ae:c5:3c:66:54:
ea:51:84:b0:84:84:bd:29:4e:bb:ef:a2:9d:52:3f:
18:a9:12:3b:b5:a0:24:00:82:f1:da:94:b1:9d:be:
97:d5:39:27:81:e9:ff:ff:49:f4:1f:41:90:ab:1a:
fd:a8:ac:e0:fc:31:d9:dc:49:e7:28:3c:96:32:a3:
a3:f0:a3:21:7b:2d:c5:e2:f6:1f:cb:d9:d4:ed:44:
08:89:46:05:4e:4a:5c:7e:a1:1e:1c:82:df:0f:5b:
dc:f1:41:60:e2:57:e5:0a:66:87:6b:fe:53:bb:f3:
a4:b6:49:7c:9b:ef:2a:93:e8:26:90:1b:a9:a7:10:
92:c9:a3:ee:b7:c8:ae:b5:7b:4b:82:8d:24:6c:b7:
b0:4e:3e:82:87:73:4a:e2:f0:e4:93:26:a2:a1:e8:
30:54:33:0b:6a:30:1e:2c:c8:79:51:01:6f:31:92:
78:7e:7b:1d:07:43:a2:6f:94:57:05:9d:02:9a:95:
b4:ae:f1:6b:13:2e:a4:b6:cb:b3:ee:9a:d8:a8:b5:
57:ca:3b:b7:cf:2e:e5:b8:be:d1:25:b1:76:d8:ea:
a9:7b:29:a6:8f:7a:17:f0:75:12:12:16:25:9d:16:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:75:6A:05:46:89:51:6A:D2:24:05:29:92:B1:E2:CF:A9:3E:FF:F9
X509v3 Authority Key Identifier:
keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:95:73:f8:e6:87:9d:8d:f6:1d:c8:bc:3e:68:7d:49:ee:05:
8d:13:f6:ab:b4:b7:21:1b:32:24:96:19:e6:58:85:f4:d2:b6:
4d:44:38:d2:e7:eb:db:6c:ca:6d:c0:0d:45:a4:ba:de:b3:9b:
98:ee:6a:18:9a:b3:24:25:28:07:e7:b9:25:ca:69:13:b6:6f:
91:f2:18:18:fd:a3:a8:64:d1:a8:9d:8b:05:a4:c6:c1:d1:70:
45:e2:99:5c:43:7d:48:71:83:95:05:45:21:cb:ca:89:df:5b:
88:6a:3d:6e:7a:3b:ad:e3:5c:fc:4d:23:9f:ee:a4:32:60:a6:
69:b7:84:b2:70:4a:4e:aa:e1:c5:c5:d0:4c:51:a1:f8:00:f7:
af:be:ee:91:3e:2a:b2:73:72:2f:4e:65:ac:ae:31:1d:48:08:
48:b6:1e:93:74:87:78:78:56:2e:b7:01:e2:69:49:80:68:4e:
56:84:60:9c:26:63:61:ef:43:77:3e:08:61:cf:51:bc:62:9f:
51:81:97:c5:22:c4:02:a9:d8:d7:51:37:bc:56:a5:81:bb:c4:
d9:5f:63:b3:19:03:e1:a2:15:2c:ad:cf:e5:55:b2:b2:9a:ef:
09:34:c4:f4:e7:0a:be:91:d1:e2:5a:37:a2:ec:3d:23:a8:ac:
3b:5a:0c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:45 2026 by rpki-client