
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
File: lSpNx8TWEJWYvu5awKIG0nuFxWo.mft (raw, json)
Hash identifier: /TBo2s6M4kA+KSgM2rfNV+tqNPwVop837KZJ8Rzlpso=
Subject key identifier: 1E:AE:6B:E5:1A:0D:E5:2C:B3:F1:FE:84:A9:23:12:8A:3E:66:AD:E6
Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
Certificate issuer: /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
Manifest number: C7
Signing time: Sat 13 Jun 2026 06:55:56 +0000
Manifest this update: Sat 13 Jun 2026 06:55:55 +0000
Manifest next update: Sat 20 Jun 2026 06:55:55 +0000
Files and hashes: 1: lSpNx8TWEJWYvu5awKIG0nuFxWo.crl (hash: pIdDEqT30nqSK15w8YvmAvNGivxGoNSAWXToOsqme3U=)
2: 4002AE6236CF11F0AA705D26C4F9AE02.roa (hash: PYLDscz39D9VfGo8zcZSUWDhN0EWb8SMMJ0oBjb9APU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Validity
Not Before: Jun 13 06:55:55 2026 GMT
Not After : Jun 20 06:55:55 2026 GMT
Subject: CN=6a2cfefc-341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:de:7f:96:04:ce:33:32:0a:15:1d:c6:1c:
ba:9c:e7:a7:d0:71:ba:90:2d:8d:3e:51:19:3f:68:
db:cb:d2:c5:ea:e3:e9:30:71:6e:29:1d:c4:36:42:
5b:3e:30:3c:78:35:1d:8a:3e:e8:cb:cf:aa:41:a6:
69:91:03:ac:02:97:c4:cd:bb:5e:45:7a:5f:7e:b4:
ab:cb:03:72:7c:a8:dc:5c:97:1a:60:e7:08:ec:9b:
62:b3:c5:b2:2e:a1:9a:fc:f7:78:aa:59:29:0f:b9:
00:88:e8:b6:f6:e3:8c:00:db:fa:a4:df:36:34:3a:
a8:c2:45:e5:d8:ea:62:0d:69:f8:4a:da:60:06:cd:
fc:d7:a6:2e:2f:fa:5c:39:9f:be:cf:e1:47:35:5e:
f2:a6:23:24:0e:1a:77:05:8c:1b:5b:8b:df:7d:98:
29:b9:5c:f6:2f:e2:b5:90:35:fc:0a:d8:dc:88:81:
ed:eb:74:18:6e:5b:9c:8b:32:71:56:2e:21:a2:31:
5e:9a:97:5b:6a:e0:53:aa:ad:35:d8:b6:1c:16:d2:
d7:1a:8e:86:e7:cf:12:17:fd:42:ae:d3:6c:b7:f2:
1d:cd:8b:b0:e6:b2:f7:1e:d9:fa:2c:4f:fe:2d:7f:
1b:ec:39:1d:72:3d:02:84:a1:76:3e:f5:3c:cf:97:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:6B:E5:1A:0D:E5:2C:B3:F1:FE:84:A9:23:12:8A:3E:66:AD:E6
X509v3 Authority Key Identifier:
keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6d:1d:35:02:79:c8:89:0d:16:48:e4:89:99:20:67:ae:31:
59:7b:18:eb:45:f4:de:71:16:ea:44:48:c5:93:03:64:2c:2a:
fb:a9:9c:74:d8:22:02:3b:51:ad:aa:5d:99:e0:d2:f9:f6:61:
ac:8b:e6:de:7c:4d:0f:41:3f:67:d8:d6:0c:fa:ce:cb:94:f9:
72:6b:a6:6c:9e:68:e1:eb:91:83:00:d5:17:c7:61:cd:b2:25:
b9:62:fa:09:e2:5a:1f:34:44:ea:f5:ff:51:b6:97:85:66:e3:
24:9a:df:c7:e5:00:31:6c:2e:85:f8:09:b9:9c:c9:a3:0a:e2:
e7:9c:0f:d2:16:f0:38:85:2e:b1:6a:d2:e5:f0:cc:c0:6a:8e:
c3:33:c0:e4:cb:62:a4:46:3f:03:df:95:3a:fc:90:45:e5:1f:
0c:d3:92:f3:9d:ff:12:56:80:98:29:aa:c1:bc:e0:ee:77:a7:
70:d1:ce:43:11:02:f1:6b:a9:ec:3d:7c:b5:24:06:c7:26:d7:
68:ba:e3:02:2e:fc:2e:df:09:f2:4a:fc:09:f9:8c:92:a5:34:
3e:10:f0:41:5c:cc:8e:c8:24:b4:1e:55:18:ea:6d:02:fe:0b:
5a:c2:7e:c9:fe:0e:14:1e:f1:c7:41:0a:a3:c2:2b:d5:8a:c9:
46:23:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:49 2026 by rpki-client