
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier: lG6th6LqAI8EFMVhsKcHzlQ87KKI55v+XXQR513YWF0=
Subject key identifier: 4B:97:0A:FB:FF:95:04:59:B6:00:2D:F3:AF:F1:67:5B:2B:1D:78:4F
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number: FD
Signing time: Sun 01 Mar 2026 07:16:31 +0000
Manifest this update: Sun 01 Mar 2026 07:16:30 +0000
Manifest next update: Sun 08 Mar 2026 07:16:30 +0000
Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: SVkBjBgDUSrDI3F3ELBkTcX9/IMfKB1RS3d8lzYlZPk=)
2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: 4EHAAGwRECO08kyPITqyPsWytQKZcdvXUWGl8OmUq5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Validity
Not Before: Mar 1 07:16:30 2026 GMT
Not After : Mar 8 07:16:30 2026 GMT
Subject: CN=69a3e7ce-0399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:4a:0b:37:4c:43:74:bf:3e:91:e8:e5:c8:
76:88:04:e0:65:bc:6d:71:38:df:fc:bc:9f:50:a1:
5a:28:aa:4c:d3:c1:af:55:f2:d4:23:fa:7b:58:5c:
83:41:7a:06:18:6d:4f:e2:00:bf:2c:2c:70:51:74:
1b:9f:e3:60:7b:00:e2:23:21:ae:af:f5:e7:38:e3:
b1:9c:4a:fa:94:f6:85:7c:2c:4a:a5:88:a3:fd:ad:
8e:18:d8:52:68:5f:d1:ce:b1:6b:96:5e:a7:45:da:
c4:8f:f4:55:6f:d6:f0:82:be:24:da:47:f5:85:3d:
2f:0d:c2:40:b9:7f:23:9d:67:4f:0d:68:70:6e:b8:
5e:86:9d:3a:21:9d:25:e1:b2:8d:01:28:05:6f:28:
ee:a6:9e:96:c7:c9:87:98:e3:16:34:50:2b:4a:6c:
77:c5:a1:64:ff:e0:ff:17:3a:00:3f:60:79:72:bf:
c0:f4:2a:99:c9:06:4a:32:49:13:c7:9a:44:80:18:
b1:13:c5:02:b1:d5:92:28:f8:00:bb:96:aa:af:31:
5e:e1:80:5d:09:63:45:67:28:62:8f:94:8f:4f:4d:
06:75:ac:96:da:a8:87:7b:41:68:e0:94:2e:9c:0d:
5f:3b:77:36:2b:cb:0b:74:6c:4c:9b:49:4b:f7:5e:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:97:0A:FB:FF:95:04:59:B6:00:2D:F3:AF:F1:67:5B:2B:1D:78:4F
X509v3 Authority Key Identifier:
keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:49:d4:0f:76:7b:0b:a6:a6:f0:b4:e7:58:fc:3e:d1:6c:
06:fb:9a:32:97:01:55:0f:e0:84:d8:49:c8:60:87:ed:2a:09:
d3:6f:44:43:2a:b7:31:f8:45:94:5c:e5:5d:93:57:ac:ca:21:
5c:26:d0:26:f6:61:7a:57:eb:42:ce:6d:f9:9a:eb:d7:68:01:
a3:1b:16:12:24:49:f1:0c:8c:25:de:11:66:cf:a1:b1:9a:b3:
87:71:e2:fe:8d:f6:60:06:c2:ea:96:21:29:d5:39:52:ae:a5:
14:3e:db:c7:51:9b:6e:9f:cf:6d:e2:51:d7:35:91:e5:99:74:
e6:0a:88:6b:84:b0:56:d8:4c:f1:f1:f3:dd:83:71:27:2c:10:
f0:86:7b:39:82:ba:32:ee:fa:ea:f7:d9:22:ed:66:d9:17:35:
77:c6:1e:8d:b0:48:c6:4c:91:fd:20:57:a6:c9:c5:b4:90:4f:
2f:18:a5:e5:99:a8:b1:79:77:2b:cf:ea:ed:a1:7a:a9:52:c1:
7f:65:39:cd:d9:85:ec:2e:5c:cd:50:ae:42:3b:2a:e2:cb:e3:
c0:93:69:62:e5:f0:87:fe:03:c3:71:94:42:0e:ba:28:f3:b7:
5e:30:00:f9:3b:f2:3b:85:2f:41:8b:4e:28:f8:fc:19:d2:c7:
34:a0:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:14 2026 by rpki-client