
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File: lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier: 2dtHFbJo53jZruYbdd+tvhiFpneokQ0j5NldIz4RMSc=
Subject key identifier: 04:F5:F2:7A:58:70:F1:D8:31:0F:8D:7C:33:CD:DA:84:B3:DD:92:67
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer: /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number: 03FB
Signing time: Fri 17 Apr 2026 01:48:01 +0000
Manifest this update: Fri 17 Apr 2026 01:48:00 +0000
Manifest next update: Fri 24 Apr 2026 01:48:00 +0000
Files and hashes: 1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: W/NK4kBJ2IuNTpWGSzyMRn+LDEU2SffrqlMUmMmIZBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Validity
Not Before: Apr 17 01:48:00 2026 GMT
Not After : Apr 24 01:48:00 2026 GMT
Subject: CN=69e19150-0896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:c5:26:8a:75:c0:38:5c:4b:07:98:e8:55:
9f:b5:ba:c4:a1:b5:bd:b0:01:e2:8a:d5:b4:f8:eb:
f1:d6:49:a4:17:61:16:14:d4:e4:87:1e:71:8e:82:
4c:78:1b:e3:e2:9d:81:8c:a6:40:e2:15:d3:a7:8c:
5a:08:41:df:04:14:e9:d5:96:0a:45:be:fa:fe:f2:
50:99:8a:4e:23:35:68:ec:af:8e:48:cf:42:00:57:
7d:5b:f7:55:04:21:72:fb:4c:f5:3a:ae:57:35:ac:
85:18:6b:88:0a:f1:c2:0f:97:36:f3:e8:28:8d:57:
97:76:4c:a5:8c:b2:ff:ed:0c:cb:cb:be:1d:91:54:
d1:47:4e:c7:2d:1f:94:db:37:f0:e5:e8:6d:d7:0f:
3b:75:23:cd:1b:46:15:25:bf:35:c5:84:21:14:b0:
52:f5:62:bd:f2:2a:04:a5:81:64:5c:22:f5:f9:28:
ab:39:d0:9b:7c:5b:59:57:da:9f:3d:74:30:47:f7:
e6:66:4d:b1:e7:be:84:89:4f:07:50:00:03:f5:cc:
a0:f6:df:9e:44:98:91:c3:82:cc:29:d0:5e:ab:cc:
ea:6c:99:09:92:16:68:f0:f4:3a:0b:ed:8f:4d:7e:
1e:b0:42:5b:8f:18:45:a0:e8:17:53:1f:6c:69:e7:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F5:F2:7A:58:70:F1:D8:31:0F:8D:7C:33:CD:DA:84:B3:DD:92:67
X509v3 Authority Key Identifier:
keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1c:ea:d0:29:6f:87:5e:f0:6a:e8:d1:7a:58:70:16:72:eb:
d4:59:3b:02:21:6a:2c:c4:48:d1:91:71:19:d5:75:7e:e9:de:
0e:59:b0:82:5a:2a:e8:39:df:d0:80:e2:f2:29:93:d9:c8:6b:
25:81:21:e3:ff:e5:63:9d:db:45:03:38:15:de:42:d7:9d:89:
6e:8d:cd:de:42:43:57:dc:7f:0f:2b:b9:fb:db:99:f4:5b:f2:
01:ae:32:0e:d2:8f:78:f2:26:c1:fb:e0:d5:d6:32:c9:72:e4:
8d:a8:71:10:12:d1:ca:5e:77:62:a2:ed:5e:23:f2:8f:11:71:
cd:d0:9a:9e:3e:6d:46:f2:75:fc:be:ba:26:21:99:4f:74:8a:
33:a9:cd:05:0c:92:86:63:31:40:86:01:48:c7:ca:15:ed:c9:
7c:10:10:1e:9c:0c:80:2c:29:ce:95:d0:b2:b4:83:3c:dd:b1:
a4:5f:d3:ca:2c:58:3b:38:2f:20:1f:e4:e1:cc:19:75:43:a6:
5f:5d:ab:87:a6:43:5e:6b:00:d6:d9:f7:d4:5d:77:3d:e7:e9:
c0:01:f4:40:9d:f9:87:eb:13:ea:e0:b4:55:36:55:a8:30:73:
f4:86:e9:7d:dd:f7:b0:a4:ae:81:b7:c2:58:71:49:77:cb:95:
3a:a7:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:59 2026 by rpki-client