
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json)
Hash identifier: GnpGJNNKFkA2kTcu1pWz2G+O25NCh/VGv4anxzQ2h7c=
Subject key identifier: 66:CF:42:80:AC:2E:12:19:B0:87:8D:57:F0:49:C1:A4:2E:6E:74:23
Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7
Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
Manifest number: AA
Signing time: Sat 13 Jun 2026 07:19:56 +0000
Manifest this update: Sat 13 Jun 2026 07:19:55 +0000
Manifest next update: Sat 20 Jun 2026 07:19:55 +0000
Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: 9CsbL1hQZu8soZGeRfvH6h5HonBTmzslMeDRxeyserI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl
rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
Validity
Not Before: Jun 13 07:19:55 2026 GMT
Not After : Jun 20 07:19:55 2026 GMT
Subject: CN=6a2d049c-acba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:fb:74:c6:80:3e:12:88:a6:69:af:42:d3:
85:6a:f1:ff:33:81:ba:78:3d:9e:2a:a8:e9:03:b6:
1e:4f:d8:27:1c:97:e6:c7:a5:51:f8:45:10:55:94:
2c:18:c9:5f:15:08:6b:02:b4:20:9b:9a:9c:9a:09:
7e:fd:de:4a:dd:fa:a8:23:fe:e5:c3:ec:f2:05:cf:
ca:e6:c6:c9:17:6b:96:86:76:c9:cd:c7:cb:83:3d:
2c:67:4b:9e:6e:98:dc:a7:5d:1a:24:14:8e:c4:dc:
75:a9:b0:0b:55:78:bd:d7:ce:d5:64:f4:a9:c2:c0:
b7:4f:c8:25:b8:dd:ee:2a:d8:6d:d6:1a:cf:12:1b:
0b:d1:7a:2f:fc:e3:dd:f9:7d:a6:c0:66:d3:a5:03:
45:79:db:c4:73:65:0c:4e:f6:32:eb:f8:47:6f:c6:
51:04:04:7e:95:10:5e:c4:02:f2:81:56:b4:b0:5f:
78:29:34:3a:c3:69:d8:aa:42:d8:6a:c8:81:90:36:
41:b0:3a:11:ad:02:c5:f5:3a:18:93:da:b5:6a:c7:
70:75:42:b7:7f:dc:9e:a1:95:b5:35:8d:f4:37:85:
4c:84:a7:5e:8c:aa:97:31:3a:6a:60:64:b0:87:3e:
fc:47:c5:a8:c1:4e:cd:a3:e2:3f:fa:54:a9:cf:f4:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CF:42:80:AC:2E:12:19:B0:87:8D:57:F0:49:C1:A4:2E:6E:74:23
X509v3 Authority Key Identifier:
keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:b1:83:be:a3:7f:1c:46:af:21:fa:dc:4d:43:64:14:dd:2e:
bf:9d:f4:16:49:2a:4e:c5:9b:9d:7b:42:5f:d7:cc:1b:86:9d:
a2:df:ce:50:56:ba:83:f4:b0:37:c1:fe:43:ca:0a:04:5a:ff:
07:d2:99:c5:57:45:fb:2a:5a:49:7a:f1:95:67:20:1b:98:28:
d9:81:59:61:a8:0b:d1:22:a0:9d:fd:08:62:1d:03:b3:a5:37:
de:b4:94:53:9f:ca:50:b4:52:9c:23:c0:d6:69:39:f4:de:29:
7e:17:2d:d2:47:e1:18:86:90:aa:3e:0c:93:03:4d:a3:95:c6:
c6:e7:0d:37:50:ea:a7:97:60:2c:69:85:e9:14:70:df:2d:d2:
f6:bf:13:17:9a:9b:db:7f:ec:d3:b6:19:51:17:cc:67:37:ce:
f1:c8:a1:3a:34:15:b8:e5:f1:de:e0:f9:e5:6e:60:31:3c:b2:
54:07:12:a6:d7:8d:04:48:ed:6a:fa:08:42:09:2f:16:7d:6f:
d8:6e:9a:25:99:e8:4a:62:7f:42:65:8e:c7:45:6c:41:2a:59:
45:d2:3e:91:50:24:60:20:bd:b3:f4:0e:ad:74:57:7d:cc:fa:
29:80:09:b6:78:58:4e:32:e5:8f:62:ce:58:eb:54:05:be:7f:
68:0d:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:03:26 2026 by rpki-client