
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier: ZZsRlUf2wr84VmoZgme4ZHjlTl9tvVdihmXITUr1rvE=
Subject key identifier: CC:73:9C:AF:05:63:8D:71:AB:4A:86:26:50:52:F9:8A:CC:36:C9:1A
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number: 0117
Signing time: Fri 17 Apr 2026 05:35:28 +0000
Manifest this update: Fri 17 Apr 2026 05:35:28 +0000
Manifest next update: Fri 24 Apr 2026 05:35:28 +0000
Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: lRUQ/Gj3WYB8WLALBzHpx+yhjH2Fdq8Yryu0G1JKPAE=)
2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: 0xJgLLQMgNeeyXMGKZCWdqUjam0KGjviyUJK/ppp7i8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Validity
Not Before: Apr 17 05:35:28 2026 GMT
Not After : Apr 24 05:35:28 2026 GMT
Subject: CN=69e1c6a0-7e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:b7:e3:bc:14:8b:f6:b2:42:3e:c7:f9:53:
5e:f7:ed:c7:b4:76:85:d8:44:23:09:66:44:8d:a7:
b8:a8:b3:89:b3:ed:aa:20:dc:fe:d1:c3:2e:03:14:
f0:7c:6c:d1:7c:cf:72:22:4a:71:1d:88:f7:4c:c3:
49:56:7f:48:c4:44:98:b5:66:03:f8:58:cd:48:3e:
cd:c4:e0:4d:b5:ff:58:a4:ad:77:32:ec:78:d0:1d:
b9:63:0b:f0:b7:60:47:1c:cd:7c:68:f3:21:04:f7:
0b:9d:a2:26:1b:57:99:7c:ab:b5:51:e6:9a:58:71:
ba:fe:22:be:95:c8:37:9a:6f:c1:08:04:c2:a9:6a:
f7:d4:86:e1:a9:8a:08:1f:94:0a:9b:ab:b2:a8:a5:
d2:d3:8f:f9:e1:59:d8:b7:b7:95:30:89:02:ca:59:
1b:ab:09:15:45:33:49:ac:25:00:3d:82:d0:66:64:
f6:3c:89:65:65:ed:d3:eb:9a:e4:66:bb:8b:e8:d5:
98:9c:4c:b0:47:16:be:73:68:eb:99:5e:44:49:16:
45:3b:80:19:d4:32:07:fc:5f:3c:b2:95:19:3c:3a:
45:13:d4:7f:f3:53:84:bd:f5:37:20:0e:e0:6b:ef:
e7:56:b4:99:6b:59:26:49:3f:55:c7:24:21:27:d5:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:73:9C:AF:05:63:8D:71:AB:4A:86:26:50:52:F9:8A:CC:36:C9:1A
X509v3 Authority Key Identifier:
keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a6:69:3e:a8:92:c6:4c:5b:74:55:2c:89:4a:7c:37:27:d4:
0e:a1:2d:8a:77:37:77:a6:ba:7e:61:0a:6a:cb:35:5d:c6:8e:
63:e4:31:be:20:76:9e:30:23:e4:e9:62:27:2a:d9:cb:a5:59:
6b:28:b7:51:af:a7:86:d1:97:c4:1a:5d:a8:e7:ef:0d:c7:a2:
6d:b1:f4:5a:54:31:4a:50:c6:21:34:3b:d0:ac:25:fc:7f:1d:
7d:c9:4e:a4:f3:43:05:29:45:bf:56:b7:7e:fa:5a:cb:2e:81:
e5:dc:f5:5b:c0:3e:2e:2b:e8:4d:ae:45:53:48:7e:5c:85:8b:
1e:2a:bc:11:f6:03:27:4a:45:b4:d8:f5:ba:c5:f2:47:6c:74:
55:8d:85:d8:cf:e2:79:68:29:fb:9d:de:3a:a0:2c:74:91:f0:
87:cd:a2:b0:66:cd:e6:71:da:d1:eb:58:35:0b:40:7a:6d:50:
a6:4e:fc:63:31:e9:73:69:e4:e5:75:fd:7f:b3:70:c4:d2:ae:
21:83:90:58:59:bf:86:86:5b:ab:2f:2b:c6:1c:f3:3b:76:32:
7f:95:e9:c4:f9:15:b1:42:58:93:3d:3b:e7:71:e5:c6:8f:05:
79:28:a8:24:84:ac:ba:a7:40:de:fb:2c:f4:ba:47:c3:8b:71:
4c:cb:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:19 2026 by rpki-client