
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json)
Hash identifier: QQAswOx8/m04ZYFocHPpk25TgDPhA5kh33BUbX+sTgQ=
Subject key identifier: B9:23:34:AC:BC:D5:44:3E:17:84:8E:C3:B7:9B:2B:23:79:91:1D:3F
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
Manifest number: 0221
Signing time: Mon 27 Jul 2026 04:18:18 +0000
Manifest this update: Mon 27 Jul 2026 04:18:17 +0000
Manifest next update: Mon 03 Aug 2026 04:18:17 +0000
Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: FO0ACHJGnDrzkMn0Ki+zQEhc0CtygGPojge08Y98bEM=)
2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: GghlvZSMgFSIPZl/c13nz5F4JJXOhoiY0qEmjni18nQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Validity
Not Before: Jul 27 04:18:17 2026 GMT
Not After : Aug 3 04:18:17 2026 GMT
Subject: CN=6a66dc09-abbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:57:8f:a1:4b:e3:00:bf:22:f9:10:24:5b:
24:67:a9:61:a4:9a:0b:c2:8a:65:73:eb:eb:5b:e8:
2e:0f:a4:cd:96:b7:9a:9d:ab:56:3c:8f:dc:52:af:
22:95:82:aa:74:23:0d:db:bb:26:76:be:46:14:f6:
70:e4:ef:46:09:d0:88:ea:8d:a1:ce:b9:e2:15:9c:
75:89:14:78:7d:ec:68:67:57:eb:77:6b:cb:a0:17:
b3:ed:43:98:fb:c8:3c:0b:94:3f:fb:a2:3c:f6:00:
d4:d3:55:5f:bf:55:40:e9:fe:8b:ec:01:13:8e:4d:
83:49:87:b9:4b:03:b3:9e:ae:5a:38:51:d5:bd:5c:
f4:0a:91:a4:64:5a:94:31:8d:48:28:40:d2:46:21:
51:5c:b6:37:de:c8:0d:2b:65:b4:26:ba:ef:77:0b:
43:d0:db:37:76:78:b7:52:a7:91:91:a1:19:fd:6a:
88:5c:2b:3f:af:70:c7:f8:7d:73:72:80:d7:86:ac:
32:b4:f4:7e:66:5f:49:be:95:18:d1:7b:90:21:82:
b4:5d:f7:fc:3f:32:74:b6:4e:29:9e:14:49:3f:3c:
3c:5f:1d:d9:f9:df:01:59:c4:10:4a:7c:48:cb:d7:
8f:82:75:70:7f:86:72:0f:a6:0b:69:dc:1d:e2:77:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:23:34:AC:BC:D5:44:3E:17:84:8E:C3:B7:9B:2B:23:79:91:1D:3F
X509v3 Authority Key Identifier:
keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:8e:1b:00:ab:73:8d:a3:bc:4d:fc:67:7f:00:83:b1:75:
ae:47:7e:69:35:23:d4:a7:46:d0:82:67:a0:e2:12:7f:ed:72:
bf:81:79:77:9a:fd:74:6d:64:a2:15:ea:97:7f:e0:ab:d2:d4:
11:5a:a8:8e:d2:56:1b:e3:3e:b3:27:34:47:ff:48:1f:f9:62:
35:60:f7:f4:9c:a0:82:1b:eb:d1:48:1b:e4:43:cc:d6:04:1b:
61:d0:58:eb:19:9f:cf:69:1c:3f:89:f1:8a:eb:6e:0a:58:71:
ee:25:2e:b1:2b:7e:d1:fa:9e:ed:43:4f:2c:a9:b0:b1:8d:f4:
e6:6e:3c:a9:e4:97:c3:16:eb:c7:07:78:32:60:11:28:91:0a:
92:10:36:09:38:e0:50:87:1a:9a:c1:05:c3:0e:c8:6e:92:04:
0e:c9:96:78:2f:08:6f:d6:3b:95:81:cb:4c:46:ee:75:6e:2f:
8e:e9:2d:1d:f0:9a:3c:67:74:c2:93:01:1b:81:f1:a8:ce:39:
46:fa:02:ae:04:ba:f8:45:d2:3e:bb:5b:9b:a1:1f:23:cb:1b:
22:9f:95:57:35:5e:56:df:17:b1:6e:1a:e5:c6:9e:51:f7:90:
2c:00:9f:58:bd:a5:5e:fb:9e:d3:a9:d0:9d:e3:23:0d:e3:e6:
f2:31:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:30 2026 by rpki-client