
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json)
Hash identifier: PLLg4JVgy1pYsvEpVzOprc7JpyrwEEAT2XqBXIaq8sw=
Subject key identifier: B4:CD:01:57:2F:B3:61:16:16:25:0F:06:26:F5:EE:83:B1:88:7F:FE
Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88
Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
Manifest number: 015C
Signing time: Sat 13 Jun 2026 05:05:46 +0000
Manifest this update: Sat 13 Jun 2026 05:05:46 +0000
Manifest next update: Sat 20 Jun 2026 05:05:46 +0000
Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: szAGTnXwANwWvwlKigLIlfjYKOfUXwYxX1NoPi87y2A=)
2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: jUaYUA+q8jmfLhomac7iMQOSZ4bFSAIAI1vEmJtWXwE=)
3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: kjJfld5TN3m5ZabsgjU4rPFFeonEnHjU7OWPFlkhgEU=)
4: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: d4S5QC9WpRroo4q9uH7u+G1i3yLbKbKg652rT+oJ1eM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl
rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
Validity
Not Before: Jun 13 05:05:46 2026 GMT
Not After : Jun 20 05:05:46 2026 GMT
Subject: CN=6a2ce52a-247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:ea:c0:87:67:2a:bd:12:83:26:8f:ed:a1:
8c:f0:6e:30:f6:28:84:18:66:f6:80:39:50:8b:6a:
a9:37:2e:7b:09:88:8b:8d:7e:be:46:7d:2c:78:60:
b9:24:be:05:9b:68:c4:d8:8f:08:a8:cf:4c:25:27:
12:69:b4:df:00:26:88:e0:0e:3f:a1:c8:7a:af:6e:
11:d9:63:37:37:f9:29:ee:6f:2b:9d:3b:d5:6e:f7:
01:55:57:0a:f0:53:d0:d4:76:93:2f:dc:8f:8a:c4:
2d:4b:8b:6d:4f:50:cd:81:8a:2c:af:b7:58:23:59:
3c:03:0a:b5:cf:3f:15:0a:1d:2c:50:3b:d0:40:e1:
5a:33:98:f7:d7:10:e4:e6:8c:66:6c:d6:1d:69:40:
98:c7:cf:30:9c:4e:01:30:b6:95:72:d5:80:97:17:
81:7c:07:1d:3d:dd:2b:98:66:60:ff:17:23:cb:27:
ee:d4:83:52:d3:2a:95:e7:4e:71:b4:c9:13:4b:0c:
ae:97:9e:f5:1d:83:3b:23:2d:47:59:99:8e:4f:8b:
c9:11:29:e7:b4:24:8d:db:7f:58:3e:3a:0b:0d:ab:
76:7e:49:78:00:aa:4a:d8:cc:6c:a6:3c:4b:98:80:
65:87:9a:a1:6f:88:d8:c7:e9:34:4a:47:8e:74:09:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CD:01:57:2F:B3:61:16:16:25:0F:06:26:F5:EE:83:B1:88:7F:FE
X509v3 Authority Key Identifier:
keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:94:5c:41:44:25:53:a9:27:0b:32:9e:c5:a4:55:06:71:80:
2d:7e:fb:80:75:d6:69:36:27:9e:78:18:dc:70:38:a3:d3:cc:
67:e2:ba:0d:74:6d:ca:bd:5d:dc:82:b3:9f:5f:42:b2:ec:d2:
6a:1c:1c:ea:69:4f:67:54:d1:1e:9b:59:cf:06:3d:57:4b:4f:
ef:66:9c:4b:da:bf:98:fc:bb:15:67:24:9f:71:9b:3a:1b:75:
12:af:84:33:39:7e:fc:d4:fa:cf:61:ec:55:a5:6e:4e:0a:39:
08:89:06:07:bf:7e:83:92:47:f9:32:b3:c7:1e:78:ac:ab:41:
f4:50:a2:84:23:a9:1d:63:71:31:b2:ce:7a:89:eb:d9:34:ee:
bd:0e:05:c1:97:ab:49:cc:fa:3d:bf:67:df:75:6f:c7:48:8f:
e9:0b:f1:73:c1:9d:95:0b:0b:3a:ff:1d:c3:45:7b:cf:7b:9e:
09:4b:06:34:64:e1:4b:17:25:1b:97:06:4b:d0:b2:ef:d0:fc:
72:26:0f:0f:6d:b2:14:c3:b0:05:ea:68:4f:98:12:c4:be:69:
2f:a3:42:5e:a3:70:bb:48:a3:b1:ba:b1:33:09:88:5b:a2:fb:
6f:0c:4f:04:3f:e3:8f:10:4a:40:50:8d:80:66:80:08:43:17:
28:60:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:08 2026 by rpki-client