
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json)
Hash identifier: i41ppOuIWD1o07WycacmMcD1mitp1F+YQnLLaWM78Xw=
Subject key identifier: 6A:B9:06:07:F9:A0:F0:B8:C5:46:3C:54:DB:FC:0D:92:E3:9D:40:EF
Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Certificate serial: 0A4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
Manifest number: 0A42
Signing time: Thu 16 Apr 2026 19:37:07 +0000
Manifest this update: Thu 16 Apr 2026 19:37:07 +0000
Manifest next update: Thu 23 Apr 2026 19:37:07 +0000
Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: 8yWBThswVa+HDnSyozIrubQgGCgfaVtmsNxSPDPwoiI=)
2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: GNVMRmxpK7mVQconnlOE34cE3Vp+VynLXCF2Ha4Paq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2635 (0xa4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59
Validity
Not Before: Apr 16 19:37:07 2026 GMT
Not After : Apr 23 19:37:07 2026 GMT
Subject: CN=69e13a63-0093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a9:fb:a8:5a:f6:f8:c3:57:96:0e:6c:f3:84:
af:e4:36:32:3d:c2:c6:7a:57:fd:c8:66:12:02:2b:
f1:7f:e6:08:af:83:e9:63:4e:cb:2a:2a:83:aa:17:
15:72:42:24:86:2b:b7:0a:a9:1f:d4:9c:31:70:b2:
80:61:00:a4:b3:74:51:39:77:99:19:f2:e2:41:c4:
86:15:fd:78:8f:7d:c5:50:bf:78:c0:d8:d5:ba:d2:
b8:47:8c:71:58:0e:39:24:98:75:a2:eb:e1:4e:38:
11:88:21:17:af:66:1b:c3:25:71:28:2d:f4:5e:cf:
c9:b4:08:1f:44:ec:7a:55:95:08:dc:a8:b0:8a:e0:
49:f0:33:02:e0:58:fa:42:82:9e:a0:c2:02:b9:7f:
a1:91:ef:e2:8e:c3:06:bd:56:fa:02:65:86:27:52:
01:5d:a9:2f:51:ad:60:d4:33:8b:01:00:ac:0b:50:
6c:18:1f:57:99:bc:fb:f8:47:6b:d0:b2:5a:b8:9a:
a0:b3:35:b9:0e:f5:94:7b:89:2f:1d:95:86:91:38:
75:2d:95:a5:1f:2a:5e:b9:48:76:b4:55:e0:e8:39:
e8:b7:42:c5:fc:22:fb:a4:79:d2:98:9e:ab:11:f5:
66:42:f0:eb:72:77:be:b6:58:c0:f8:cb:c4:66:eb:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B9:06:07:F9:A0:F0:B8:C5:46:3C:54:DB:FC:0D:92:E3:9D:40:EF
X509v3 Authority Key Identifier:
keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:71:45:f6:c8:33:31:cc:7a:61:72:9c:61:56:02:71:55:f0:
d3:0e:39:00:9c:78:18:88:a3:7c:e8:db:5e:a3:a4:d1:a3:6f:
02:24:2a:f6:13:cb:89:4e:06:d6:22:0e:65:e9:51:2e:e6:96:
6b:bf:56:8a:22:61:47:41:bf:2f:3e:b0:2b:2a:88:92:80:a4:
83:c3:90:d0:11:91:75:6b:05:3c:b9:c2:b8:02:42:df:74:04:
7e:59:a3:a4:0c:33:c8:71:69:80:f4:9e:38:7e:2f:27:57:32:
da:ef:99:01:47:64:29:44:28:27:68:29:64:83:0f:ad:7e:f9:
dd:70:f7:9c:66:00:92:c9:73:3a:8d:60:eb:98:b2:ef:21:5b:
dd:e0:94:70:c1:d9:9c:76:ad:88:81:d0:23:97:b1:8c:4b:4b:
f7:3b:e4:d1:d3:9e:3d:c4:d4:22:43:fb:8a:67:16:57:80:cf:
7d:20:93:08:17:75:b3:d1:bc:ee:9f:90:32:6c:ac:25:b2:5d:
80:e4:9d:bb:7c:53:a6:14:ac:c9:23:b3:15:85:03:3a:f7:49:
38:84:c1:03:e8:d2:33:5d:cb:8b:7d:fb:e7:4f:e8:3f:56:55:
38:eb:90:64:f3:58:69:c0:43:78:87:fe:27:2e:ba:c9:e9:f0:
c0:b4:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:37 2026 by rpki-client