
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft
File: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft (raw, json)
Hash identifier: Ft6XGcBRaBry2ToF6+lZe67/6GTOzGcml67ZR2e5iE0=
Subject key identifier: BA:15:A1:EC:E8:53:DA:B3:95:D0:63:43:B9:D4:15:52:7E:69:7D:AD
Authority key identifier: 95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C
Certificate issuer: /CN=A91E427F/serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft
Manifest number: 30
Signing time: Fri 17 Apr 2026 08:25:04 +0000
Manifest this update: Fri 17 Apr 2026 08:25:03 +0000
Manifest next update: Fri 24 Apr 2026 08:25:03 +0000
Files and hashes: 1: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl (hash: wnRKkBxm5G4C8X9QutX0Nlqwb+SJy+Kc8DOKZkU8+9w=)
2: 8A145232FCFC11F0A8CB3974376F56BC.roa (hash: Xjz1s0MQRu7MQA5suGipgKZp8P0BW1VYHZCCTuVLDsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl
rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E427F, serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C
Validity
Not Before: Apr 17 08:25:03 2026 GMT
Not After : Apr 24 08:25:03 2026 GMT
Subject: CN=69e1ee60-e3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:4e:dc:b4:ce:6c:2b:b1:74:9b:d2:24:fc:
44:96:98:5f:c9:1b:a2:81:d4:47:ef:77:0c:6e:a5:
0f:eb:a8:6a:f4:68:cc:d8:08:14:e9:2b:26:ef:9e:
b6:3d:43:3e:ea:0d:89:46:e6:02:db:41:f9:a0:6f:
92:a2:8a:86:7d:38:15:9c:ac:c3:78:65:d3:e4:68:
8c:3a:15:4a:65:e8:d5:d2:07:d0:f5:4e:ed:d3:73:
eb:d3:46:f6:35:33:d4:e7:9b:93:9d:97:8c:5f:57:
be:b6:83:34:c1:c1:6d:d5:fb:52:bb:b8:61:cc:84:
02:fe:4f:ad:43:19:b8:9e:4e:1c:ec:1e:af:29:a4:
46:04:3f:a9:a7:42:b1:3a:ce:58:02:56:e6:38:a6:
4f:bf:2a:d1:7b:da:85:82:0b:d4:63:68:75:ea:3f:
ba:0d:80:16:1b:27:db:46:53:bb:1b:35:a5:db:47:
3f:5a:6a:a5:59:f0:40:48:b7:45:ef:37:04:a3:98:
88:b2:05:a2:97:3a:89:62:71:b9:5e:38:9b:ec:d0:
77:1b:d3:22:ad:a5:c0:ad:9f:8b:55:bd:c9:ec:59:
ad:e4:31:d4:b5:cd:ca:64:f3:07:42:ea:af:4e:cb:
d8:e8:74:87:1b:f6:60:45:38:76:89:b5:26:68:b5:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:A1:EC:E8:53:DA:B3:95:D0:63:43:B9:D4:15:52:7E:69:7D:AD
X509v3 Authority Key Identifier:
keyid:95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:e0:e5:75:9a:80:d9:26:e8:5b:b6:f3:31:25:77:44:99:ed:
c7:90:4b:9d:64:23:e5:d6:dd:da:74:05:a1:cb:f5:0c:94:61:
62:8f:8e:bc:4e:be:41:81:e7:5d:81:d1:3e:72:fc:e1:0c:dc:
63:e6:2f:27:91:bc:fc:b0:4e:18:ef:91:08:b3:e8:25:33:53:
7b:8f:e7:13:83:1f:e9:93:5f:35:fa:4b:2f:f2:1b:57:88:df:
51:60:98:5e:66:9a:15:55:85:a8:20:51:b3:e2:c0:65:0c:ec:
53:5e:20:42:05:dc:62:f4:70:47:57:7a:d8:30:f7:e6:a3:c4:
4b:e4:9b:d0:cc:d2:8a:7d:e2:b5:a5:ee:73:c4:0a:fc:42:88:
a0:5e:cb:15:a7:3d:89:17:59:8b:39:0c:6f:04:64:bf:7a:80:
0d:fd:ab:67:5f:62:9a:6b:28:95:04:eb:51:a7:5d:88:1c:c3:
8e:8f:75:ae:f0:68:a8:06:4d:50:91:54:82:9e:fc:d7:34:b0:
89:6c:22:d6:4a:9d:97:25:85:bc:87:65:56:8a:c6:2d:31:d9:
d0:e5:18:60:f9:c0:50:c1:d1:f1:90:a6:ef:e6:dd:24:db:86:
73:16:62:de:a6:a5:90:33:22:11:5f:2f:bf:35:20:44:7f:96:
c0:a5:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:15 2026 by rpki-client