
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json)
Hash identifier: hyRwyZDBYk2hU972NJx5ATiNoFc5/nARW3XYXqdFANU=
Subject key identifier: EB:C7:B3:81:89:38:07:1A:B2:7E:29:ED:36:0A:9E:B0:CF:E1:9A:DA
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial: 0301
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
Manifest number: 02FB
Signing time: Fri 17 Apr 2026 01:10:05 +0000
Manifest this update: Fri 17 Apr 2026 01:10:05 +0000
Manifest next update: Fri 24 Apr 2026 01:10:05 +0000
Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: RAqmIdsC1oM2Wfwe7rJJ/fJ2h8gb2MlWupmpGJivG5w=)
2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: 9iIS+oJqtvIaxuE21AB7CyjRvSUfkuTKrVFukQPlVNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Validity
Not Before: Apr 17 01:10:05 2026 GMT
Not After : Apr 24 01:10:05 2026 GMT
Subject: CN=69e1886d-f4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:c8:bc:bd:e2:6c:ac:c3:fc:eb:79:54:b3:
f8:3d:6c:dc:6f:9b:4c:08:97:cd:dd:52:b9:54:2f:
25:26:d7:f1:46:8d:61:99:ca:87:97:e9:39:bc:f9:
92:39:68:cf:95:3e:95:da:39:d8:7d:40:a6:bc:fd:
28:43:91:a6:de:5b:33:3b:a8:cd:b9:2a:75:f4:01:
fb:0b:b3:06:50:08:06:11:e8:e2:0f:d8:aa:36:15:
f6:4e:e5:8f:ff:4c:4d:d5:ce:d6:a4:19:30:d9:d2:
34:0c:06:ff:7f:15:63:51:f9:34:2a:43:58:ca:8a:
ec:1d:60:cb:b0:b0:62:5b:dc:12:5a:68:bf:7a:e3:
8f:d9:c0:d9:3c:fe:03:b0:71:ce:7f:08:6f:18:fa:
06:93:14:78:5a:a7:a8:89:04:fc:86:87:38:b8:6d:
f7:69:d6:d4:3f:23:07:d5:d1:3f:33:9a:6c:2b:50:
2c:52:b9:53:18:12:a8:8c:53:36:65:73:63:3c:d0:
8d:8f:10:90:9d:a3:49:28:66:9b:a9:7b:de:46:6c:
9a:bd:17:a3:b5:2f:06:2d:c2:38:9e:8c:e2:b2:9d:
02:1a:7b:ac:ad:5e:75:de:65:3c:09:b3:89:ae:51:
8a:b0:a5:22:70:62:e1:6f:fd:0a:f3:0e:cf:7c:ba:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C7:B3:81:89:38:07:1A:B2:7E:29:ED:36:0A:9E:B0:CF:E1:9A:DA
X509v3 Authority Key Identifier:
keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:55:2d:d1:c3:c0:90:98:96:b8:92:fc:7a:a1:8f:0c:bb:80:
03:3f:c8:ac:ca:59:e0:b3:d4:db:d8:1a:7a:3a:8f:83:c1:9c:
fb:a3:8d:d3:e8:b2:5d:d5:27:a9:72:d6:b6:a5:e4:6b:3c:af:
ab:ee:93:8a:9d:5f:71:09:a5:f3:75:70:20:f9:b4:36:b9:be:
d8:e1:0b:ea:5a:66:a7:71:1c:a9:4e:24:b1:29:19:7c:ad:01:
6d:76:83:15:b2:cd:75:ee:66:63:e5:ba:5c:52:ad:0a:09:07:
bf:01:54:48:34:8a:19:93:d6:47:87:a4:98:00:63:b0:bc:38:
dd:ce:9a:9d:90:c5:35:6d:bf:14:34:4f:c0:74:87:39:23:8e:
70:e5:49:99:e2:e8:39:d3:4e:1c:75:5c:8d:47:67:ed:9c:a5:
a6:b0:91:c7:4d:b3:9a:89:40:f9:c2:ed:37:f8:d4:c5:bf:c1:
56:4d:70:43:63:33:fa:e3:0b:75:4a:03:cb:44:8b:16:44:c7:
19:40:db:e8:c3:d1:d4:2c:1c:79:16:ea:66:ae:0a:18:09:92:
2a:e7:14:96:8c:3a:f7:4b:82:6f:e4:a4:18:1e:c3:ee:1c:30:
11:16:08:26:36:17:45:90:f9:53:33:f6:9a:c7:c1:b5:2a:c8:
d8:12:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:08 2026 by rpki-client