
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json)
Hash identifier: b0bvTK/KcrM/Rg7kRuV70WBISsQkczwpZBJ5qtMYc7s=
Subject key identifier: 79:9C:11:49:EF:4F:C4:A1:FC:BC:97:FD:3C:58:1A:7F:A7:D1:0B:11
Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96
Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
Certificate serial: 07CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
Manifest number: 07CA
Signing time: Sat 28 Feb 2026 21:45:14 +0000
Manifest this update: Sat 28 Feb 2026 21:45:14 +0000
Manifest next update: Sat 07 Mar 2026 21:45:14 +0000
Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: nZbMTkW6ZQ8u8zBay8rwfxNiord9maIgoIddQqGS+60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl
rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1994 (0x7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
Validity
Not Before: Feb 28 21:45:14 2026 GMT
Not After : Mar 7 21:45:14 2026 GMT
Subject: CN=69a361ea-c471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:45:3a:eb:ef:dc:72:c9:22:e7:b7:ee:e1:
aa:8a:39:9d:1b:17:3e:b0:f7:20:ac:5a:e7:c1:50:
c8:3a:26:90:3c:71:03:d8:ea:06:23:ed:3d:b8:96:
32:00:79:65:73:97:0f:b3:b7:af:fa:df:e8:aa:a3:
55:76:15:14:fa:a0:00:37:53:da:be:4e:b5:fc:ef:
a2:5c:2c:f4:2c:87:be:14:24:30:66:47:b6:83:3a:
3e:db:bd:81:42:52:2b:a7:f9:b2:37:78:6a:db:85:
4c:97:c9:38:30:46:76:ce:d9:6c:3c:38:e4:99:43:
96:09:24:d8:3e:9a:da:1d:48:6c:9a:6f:b6:d4:8c:
ed:4f:36:83:ff:58:d7:d6:0b:e3:e3:25:b2:85:5b:
f0:2c:15:ad:62:cc:59:22:7b:91:6d:7c:19:13:bb:
6d:86:23:ff:0b:8e:01:b0:2e:45:19:98:1e:c4:a3:
16:49:2b:68:a2:42:e6:df:a1:f8:3d:5a:7f:47:a8:
31:e4:02:b0:23:00:f9:0a:36:bf:13:c5:ad:da:08:
31:c7:1a:b7:da:1f:7f:f5:6b:9c:9f:e0:13:60:21:
1e:22:d6:38:ef:21:b6:0b:4e:50:f1:c1:4a:28:37:
36:e9:33:ee:54:5f:1b:20:a0:42:ff:e0:7f:6e:cb:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9C:11:49:EF:4F:C4:A1:FC:BC:97:FD:3C:58:1A:7F:A7:D1:0B:11
X509v3 Authority Key Identifier:
keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:8d:12:35:12:4b:32:f0:11:ba:5d:4c:8b:05:8b:11:ec:30:
9e:e6:ec:89:52:7f:8c:7e:8c:63:95:6d:d1:ee:1e:fe:b3:9d:
00:c5:ef:a5:e5:e5:0e:04:f9:21:1a:67:8e:84:48:d8:2b:dc:
bd:8c:ce:8d:d2:3b:51:d3:6f:b5:52:49:fd:b9:03:27:50:a2:
f4:4a:d5:38:9b:74:b0:7a:77:a4:e9:86:80:bf:b6:85:3d:62:
98:2c:8f:5b:c9:63:a6:08:26:73:0d:bf:82:b0:ba:b5:4e:5e:
47:b4:b9:a3:b1:6f:9f:da:bc:ef:a9:b9:b5:d4:f1:94:e7:ff:
bf:b1:47:ab:f6:d5:c1:9d:ad:9f:a1:07:d2:50:3c:32:0f:10:
40:ec:1b:91:6c:4b:c8:05:08:fd:10:65:29:a5:85:ad:80:74:
16:ac:c3:55:a5:f5:bf:d0:13:b2:b1:a6:5e:d9:09:72:be:83:
bd:27:cc:d7:bb:30:0a:58:64:9c:c0:1e:58:18:d6:40:c5:39:
74:f9:7b:25:c7:79:95:5d:b1:27:cf:a6:81:8e:92:87:f9:02:
0d:48:5c:c2:20:25:4e:e7:3f:e4:4d:bf:a0:3e:b2:af:35:0b:
61:50:64:72:62:53:50:e1:67:ac:fb:08:2c:56:d5:d6:6a:17:
ff:e5:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:28 2026 by rpki-client