
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier: 5Fq8XUBokQUGq1AZekA/bmBliQdT/5FvnMeZURwPpQY=
Subject key identifier: 5E:3C:DF:37:DC:B7:62:DC:00:34:D8:1F:CE:45:7B:74:6F:EE:65:E1
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial: 0401
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number: 03F7
Signing time: Sun 01 Mar 2026 01:17:50 +0000
Manifest this update: Sun 01 Mar 2026 01:17:50 +0000
Manifest next update: Sun 08 Mar 2026 01:17:50 +0000
Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: hIsuHCn3DwW87edJwPdouwOBr2TZarPFcCgNCZIuzAA=)
2: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: ZnO5JlWoEl5dNZhohsJyvbgouMlAXBiHwRW5x4khv3w=)
3: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2gg461BffUf/xT7BkrRnrVM5ZugLJyBnhbCMdi11J1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Validity
Not Before: Mar 1 01:17:50 2026 GMT
Not After : Mar 8 01:17:50 2026 GMT
Subject: CN=69a393be-964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:df:9c:84:31:45:25:75:87:08:59:08:db:
1f:51:4a:a5:5b:70:9e:80:cc:b3:bb:a3:be:b1:af:
85:d2:c8:dd:14:a2:92:c1:a1:e0:3a:79:8b:84:bd:
8f:8e:eb:94:55:ef:6c:c3:b6:d5:72:53:6e:65:38:
07:74:b6:ae:20:f6:55:2f:83:29:b5:49:25:5d:0f:
5a:a8:4a:92:f5:5e:7d:58:e2:3b:42:0f:2e:80:f7:
fa:ee:3e:73:85:db:b0:58:7b:4b:64:9e:34:71:8e:
a6:0e:2b:15:a2:2d:3b:14:75:d6:bc:04:f1:45:ef:
5c:70:40:b1:02:17:7e:a6:32:4b:5f:7d:ed:31:75:
f0:56:9e:36:76:96:c4:12:8e:45:6c:7a:b3:55:a8:
fe:4c:90:bb:26:29:bf:99:06:f3:19:d9:9d:7a:85:
eb:c7:12:2a:e0:1c:95:3d:aa:6f:54:9d:10:bd:b6:
4f:ce:f2:56:a2:13:86:32:cd:20:87:bb:86:de:d6:
29:07:db:01:1b:23:a3:2f:3f:71:a2:51:61:20:e6:
17:e8:e8:de:c7:91:9a:d1:a2:b3:86:11:1c:3b:f4:
0b:83:88:80:29:a3:2b:2b:27:58:73:15:e1:7e:c0:
71:08:e5:d3:40:9d:ab:a9:79:52:c8:c1:80:c7:30:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:DF:37:DC:B7:62:DC:00:34:D8:1F:CE:45:7B:74:6F:EE:65:E1
X509v3 Authority Key Identifier:
keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f4:7c:64:72:b1:44:e0:8d:91:e1:8a:70:1f:0e:58:d1:4b:
82:ca:70:49:7c:2b:61:54:ba:06:54:06:b9:b7:1d:d3:cf:68:
5f:68:0e:e8:c0:b5:fc:78:22:8c:b4:d8:9a:fd:3b:57:60:4f:
dd:54:fc:8c:80:a5:19:e9:fb:ef:53:be:54:5c:a4:8f:00:cf:
f1:38:de:e2:7a:df:24:6e:16:8a:0a:24:72:a1:e5:5b:15:c8:
d4:64:fc:ea:a8:96:da:72:3f:bd:d7:2c:81:83:d6:96:18:6b:
fb:e7:ad:a7:a8:48:ad:5b:ff:65:4d:14:92:d2:1f:52:aa:c6:
a1:08:54:3d:70:ef:bf:4b:0d:77:c8:25:58:5d:d5:46:01:9e:
ab:50:14:38:91:e2:a0:16:dd:1f:c9:be:4a:8f:73:b5:be:28:
02:03:1f:cf:73:ac:cd:c1:e1:9c:12:16:91:e1:d2:4e:f1:af:
d4:d9:41:39:65:b8:9e:0f:a9:1b:52:6c:d9:36:8f:2b:d6:ed:
ed:1c:15:d2:ba:30:44:b6:ab:d0:38:f7:43:fd:28:a7:82:36:
54:d8:9c:ed:5a:d9:17:e0:94:00:cf:50:cd:ef:25:b0:b6:ad:
67:09:ab:12:cb:b0:53:0d:61:04:2d:f4:f7:b4:f5:57:5a:76:
d7:c2:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:45 2026 by rpki-client