
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json)
Hash identifier: WU1P5lsNc/IajbfDkpzvWvgkwieFRbtWYND8Y3l57IM=
Subject key identifier: C3:52:11:49:C1:23:DF:BA:66:99:36:2A:63:76:6D:24:F8:1F:AE:91
Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
Manifest number: 01F2
Signing time: Mon 27 Jul 2026 04:57:26 +0000
Manifest this update: Mon 27 Jul 2026 04:57:25 +0000
Manifest next update: Mon 03 Aug 2026 04:57:25 +0000
Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: WY8aQR1TfBz0KcouigBWRgHR+9KVprxPy9FDnkFBSfg=)
2: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4=)
3: A2C289B63B0E11F1ABA6C37BA3833773.roa (hash: jmWcCNtWVugfcNe6D5Skhd/Vluv6OV5nBx2KESd91tA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Validity
Not Before: Jul 27 04:57:25 2026 GMT
Not After : Aug 3 04:57:25 2026 GMT
Subject: CN=6a66e536-77d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:7e:53:24:7f:5a:fe:ea:97:4f:c5:a0:8a:
98:cb:a4:10:f9:b0:f6:f1:14:7b:89:ea:f1:c3:69:
d4:8d:f6:42:ba:64:67:52:ea:5e:34:2f:b2:a6:76:
f4:47:34:f1:e7:28:11:c2:12:ba:cf:b9:e1:0a:73:
72:ab:19:58:1f:7f:f6:29:17:e8:7c:5e:f8:ea:d2:
11:ea:6f:65:7d:bf:f0:0e:2d:52:4a:ab:55:98:db:
0a:b2:ca:eb:da:41:4a:8c:07:2e:98:10:eb:46:e5:
fc:34:4a:40:74:75:86:0e:31:5e:87:75:4c:64:c2:
61:ea:27:f5:96:9d:51:6f:54:1e:2e:c8:3c:c2:47:
a6:37:5d:5c:8c:32:0c:01:19:92:cf:43:fe:50:54:
df:34:99:21:46:01:32:57:64:a9:0e:b5:98:f7:d8:
50:da:2d:7d:fb:9e:84:f3:22:e4:80:ff:83:43:c7:
d2:a0:5e:f4:8b:f7:08:57:05:26:29:b7:ee:7e:b8:
a0:49:f7:ea:67:01:08:a3:4a:1e:0e:17:02:a7:2e:
fd:60:97:bc:33:d9:e2:10:68:12:d6:53:37:f4:80:
e8:28:0f:99:e6:4d:09:6c:6d:44:38:bb:f1:4a:08:
9c:c0:94:ce:b4:62:c1:7a:86:00:1e:d4:8c:18:51:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:52:11:49:C1:23:DF:BA:66:99:36:2A:63:76:6D:24:F8:1F:AE:91
X509v3 Authority Key Identifier:
keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:21:be:21:c4:e8:8c:b4:81:c1:c1:e0:61:c1:25:6e:0a:ee:
dd:44:29:c3:4d:1e:9a:97:a0:96:f3:95:b2:85:cd:30:72:b2:
75:4e:42:5b:eb:ea:70:b9:cc:78:92:78:f5:11:4d:0d:97:2f:
8d:ee:5a:7c:ef:19:88:8f:79:aa:91:bb:91:d0:e4:86:67:d2:
a3:5f:c4:7d:f7:57:57:ec:91:2b:2b:b5:60:bd:69:b5:4b:d3:
c0:cd:4d:70:ac:42:76:65:d1:57:26:1f:6e:ae:c1:d5:95:16:
10:b3:c3:59:10:c1:28:43:f8:39:c9:31:41:08:8d:09:55:3e:
44:0a:b6:9b:80:7e:1f:17:c0:94:d3:22:4a:42:ef:74:a9:6b:
8c:4e:6b:fe:97:48:f7:22:59:ae:69:96:2e:51:57:33:c7:ce:
70:88:f9:83:ae:28:59:60:24:fe:4c:d0:f2:3f:38:3b:a5:4f:
88:70:33:1e:f3:ce:17:86:92:53:52:08:8d:9b:64:00:8a:dd:
c0:09:d9:fc:96:29:53:b0:94:e1:11:bb:48:3f:52:0f:75:e8:
ce:40:b6:8a:75:d0:d4:c1:63:62:c8:a1:09:cf:44:e7:a9:b2:
36:88:cd:8c:1c:77:3a:0c:24:39:7b:30:c5:7a:be:c2:b2:6b:
80:9b:07:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG
NEMzREEyNzAwHhcNMjYwNzI3MDQ1NzI1WhcNMjYwODAzMDQ1NzI1WjAYMRYwFAYD
VQQDEw02YTY2ZTUzNi03N2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlyt+UyR/Wv7ql0/FoIqYy6QQ+bD28RR7ierxw2nUjfZCumRnUupeNC+ypnb0
RzTx5ygRwhK6z7nhCnNyqxlYH3/2KRfofF746tIR6m9lfb/wDi1SSqtVmNsKssrr
2kFKjAcumBDrRuX8NEpAdHWGDjFeh3VMZMJh6if1lp1Rb1QeLsg8wkemN11cjDIM
ARmSz0P+UFTfNJkhRgEyV2SpDrWY99hQ2i19+56E8yLkgP+DQ8fSoF70i/cIVwUm
KbfufrigSffqZwEIo0oeDhcCpy79YJe8M9niEGgS1lM39IDoKA+Z5k0JbG1EOLvx
SgicwJTOtGLBeoYAHtSMGFGwRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNSEUnB
I9+6Zpk2KmN2bST4H66RMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz
M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ
ai1oWURuRFIzbEQwdzlvbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAACG+IcTojLSBwcHgYcElbgru3UQpw00empeglvOVsoXNMHKydU5CW+vqcLnM
eJJ49RFNDZcvje5afO8ZiI95qpG7kdDkhmfSo1/EffdXV+yRKyu1YL1ptUvTwM1N
cKxCdmXRVyYfbq7B1ZUWELPDWRDBKEP4OckxQQiNCVU+RAq2m4B+HxfAlNMiSkLv
dKlrjE5r/pdI9yJZrmmWLlFXM8fOcIj5g64oWWAk/kzQ8j84O6VPiHAzHvPOF4aS
U1IIjZtkAIrdwAnZ/JYpU7CU4RG7SD9SD3XozkC2inXQ1MFjYsihCc9E56myNojN
jBx3OgwkOXswxXq+wrJrgJsHKg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:50 2026 by rpki-client