
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json)
Hash identifier: /yqO5bxZVshzPz7v1a3IDnchkWrCIkyjCnjlBIBknt0=
Subject key identifier: 84:47:8E:79:5B:DE:EB:E0:90:0D:D5:07:B1:92:1F:6F:80:95:D7:28
Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7
Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
Manifest number: 76
Signing time: Sun 01 Mar 2026 09:12:35 +0000
Manifest this update: Sun 01 Mar 2026 09:12:35 +0000
Manifest next update: Sun 08 Mar 2026 09:12:35 +0000
Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: tbhwbqRXDGq5qQ1UUAv/474lJwi5MIh/VMrSsYLfteg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl
rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
Validity
Not Before: Mar 1 09:12:35 2026 GMT
Not After : Mar 8 09:12:35 2026 GMT
Subject: CN=69a40303-1f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:34:7a:cc:f7:bc:24:26:6c:69:bd:d2:48:
8c:8d:7d:46:99:db:91:07:97:67:66:8f:33:2c:e3:
fa:d6:d0:35:c4:92:d6:aa:3f:75:5f:d2:97:d8:e6:
73:c3:97:68:5e:58:96:2b:ad:b7:57:9f:bd:54:93:
3b:19:e2:56:32:86:f2:0c:df:3e:3b:b6:05:c5:37:
62:a2:7a:89:42:1e:b7:d2:80:cd:e5:bc:0e:55:79:
b9:d4:0f:fa:dd:95:ab:c6:6d:e3:d3:6e:ea:d6:89:
8b:63:b9:68:42:31:32:36:eb:16:a8:fe:82:b9:69:
cc:9f:33:8f:e7:8e:7b:78:94:3c:b6:ee:4f:37:a6:
ab:e5:f5:30:26:8c:a5:32:3c:c7:6c:fa:0f:e6:8a:
ca:94:1d:85:e4:7d:ef:e0:df:75:17:cf:a5:c0:ed:
73:f2:c7:7f:53:40:69:f8:cb:9c:33:ff:ae:79:25:
7c:2d:9d:40:e2:30:5a:30:21:53:71:cd:be:20:62:
5b:c3:10:a6:77:8d:a6:e1:32:82:04:b4:01:95:41:
8f:16:f6:0f:12:02:7b:ce:02:ec:c4:ff:ea:8d:64:
64:6d:8a:a0:7e:74:a1:6b:79:4d:22:9c:75:de:32:
41:ba:7d:94:e7:a3:57:10:40:99:25:c0:45:b6:62:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:47:8E:79:5B:DE:EB:E0:90:0D:D5:07:B1:92:1F:6F:80:95:D7:28
X509v3 Authority Key Identifier:
keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:f8:18:8a:0b:91:b0:32:93:1f:32:6d:63:ce:c1:e0:22:01:
c7:18:f6:d7:a0:b1:c7:6d:98:59:78:a6:f1:2d:7d:42:f8:32:
50:78:3d:96:97:23:7a:53:c0:fa:85:71:72:f8:a7:ec:8b:97:
d3:ed:fe:29:8b:4b:e9:38:94:57:21:dc:20:52:84:d3:81:be:
7c:ba:6d:5f:8d:9a:ad:0f:a9:21:3d:c1:13:fe:52:59:5d:a8:
2a:e3:db:19:2d:f0:a6:e2:31:52:28:f6:ee:bb:c9:8a:f4:a1:
e6:f3:4d:b7:5c:3f:a4:20:05:46:54:44:63:55:4d:5c:5f:48:
cf:ad:f1:be:55:20:fa:82:f9:e9:2d:ac:fa:5a:74:81:cb:c3:
2d:92:b4:2a:e5:a4:33:7c:2e:1e:d0:0b:ed:8c:49:5f:63:8a:
3f:41:17:d4:e6:83:11:3b:3e:bb:59:1a:39:66:0c:e0:04:27:
81:ce:25:90:b1:89:12:9a:b5:fb:d6:c8:35:26:e4:c8:ca:61:
2c:e6:83:d4:f5:72:de:38:53:76:c6:b5:1a:9a:87:ad:45:3e:
d8:4e:15:6c:d1:c1:59:34:ac:93:e4:73:d9:fe:c9:d6:f2:dc:
69:a8:73:94:0d:a1:fa:03:67:20:8d:d9:71:08:ae:c9:af:79:
23:ae:f5:a1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RUIwMTExMC8GA1UEBRMoOTQzMzQ5RkRCNkRDMEFGMTVDRDU3NERBNDJGOEVDN0I0
OURDMERCNzAeFw0yNjAzMDEwOTEyMzVaFw0yNjAzMDgwOTEyMzVaMBgxFjAUBgNV
BAMTDTY5YTQwMzAzLTFmNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkdDR6zPe8JCZsab3SSIyNfUaZ25EHl2dmjzMs4/rW0DXEktaqP3Vf0pfY5nPD
l2heWJYrrbdXn71UkzsZ4lYyhvIM3z47tgXFN2KieolCHrfSgM3lvA5VebnUD/rd
lavGbePTburWiYtjuWhCMTI26xao/oK5acyfM4/njnt4lDy27k83pqvl9TAmjKUy
PMds+g/misqUHYXkfe/g33UXz6XA7XPyx39TQGn4y5wz/655JXwtnUDiMFowIVNx
zb4gYlvDEKZ3jabhMoIEtAGVQY8W9g8SAnvOAuzE/+qNZGRtiqB+dKFreU0inHXe
MkG6fZTno1cQQJklwEW2YgIPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhEeOeVve
6+CQDdUHsZIfb4CV1ygwHwYDVR0jBBgwFoAUlDNJ/bbcCvFc1XTaQvjse0ncDbcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxL0Y2QTY0NUQ2NjdB
MTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0Ri
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbEROSl9iYmNDdkZjMVhUYVF2anNlMG5jRGJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
QjAxL0Y2QTY0NUQ2NjdBMTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZG
YzFYVGFRdmpzZTBuY0RiYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBG+BiKC5GwMpMfMm1jzsHgIgHHGPbXoLHHbZhZeKbxLX1C+DJQeD2WlyN6U8D6
hXFy+Kfsi5fT7f4pi0vpOJRXIdwgUoTTgb58um1fjZqtD6khPcET/lJZXagq49sZ
LfCm4jFSKPbuu8mK9KHm8023XD+kIAVGVERjVU1cX0jPrfG+VSD6gvnpLaz6WnSB
y8MtkrQq5aQzfC4e0AvtjElfY4o/QRfU5oMROz67WRo5ZgzgBCeBziWQsYkSmrX7
1sg1JuTIymEs5oPU9XLeOFN2xrUamoetRT7YThVs0cFZNKyT5HPZ/snW8txpqHOU
DaH6A2cgjdlxCK7Jr3kjrvWh
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:55 2026 by rpki-client