
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json)
Hash identifier: HLBtMK9iLspqFN8nWz+YgGerBf4NJ7bXX0Un2bWCCEM=
Subject key identifier: 06:D8:26:9D:90:41:86:01:84:C8:AB:0C:AB:39:73:DD:AA:87:E6:1B
Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
Manifest number: 01C7
Signing time: Fri 17 Apr 2026 03:32:01 +0000
Manifest this update: Fri 17 Apr 2026 03:32:00 +0000
Manifest next update: Fri 24 Apr 2026 03:32:00 +0000
Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: iiNnuLqHcO1VqVyl/Fx9qndDoNUtomwcl32IWwyQusM=)
2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: 5/jz+C40zLVMH2SNYsrHp/ff3x36CKwapZ0lQnBenzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Validity
Not Before: Apr 17 03:32:00 2026 GMT
Not After : Apr 24 03:32:00 2026 GMT
Subject: CN=69e1a9b1-b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:b6:67:4e:8e:d5:a1:cb:3f:f8:56:a4:c1:
15:73:8c:9a:b6:57:79:b4:4b:5e:9b:cb:dc:44:1d:
0d:86:95:70:f6:13:3a:aa:4d:fb:1f:b9:1a:16:0c:
c1:71:2a:bb:0c:8c:f4:1a:17:34:31:dc:83:06:2a:
1e:c1:2c:22:55:31:b7:49:7c:57:00:ff:c2:f8:1b:
ef:c4:89:d9:14:a8:46:1d:62:2a:c2:f6:2a:70:38:
bc:2e:e9:75:23:bc:26:a5:d1:d5:2c:5a:8c:cc:a3:
1b:52:95:a0:01:85:ae:0c:f7:91:5b:77:78:b5:c5:
0d:e1:9c:bb:b1:bd:b8:49:f8:38:f2:ab:97:c5:17:
f8:a3:a4:b4:4e:be:e3:3e:66:05:45:f3:54:77:79:
de:3c:c3:af:74:5f:84:5d:de:54:0d:a8:f4:e9:18:
45:68:57:e2:f3:c4:22:dd:49:1c:2f:f7:37:05:d6:
0a:d9:06:25:a8:93:b1:3a:ea:f3:19:81:20:f4:5e:
08:9a:f1:39:9d:70:90:18:b7:33:cd:c2:29:64:f3:
80:19:4b:37:28:7f:79:89:21:2b:d7:86:77:25:e0:
96:3f:b3:4e:c9:69:8f:25:46:f8:a1:18:71:bd:ae:
41:1d:26:59:92:85:d4:7c:0b:5a:57:a0:21:8b:4b:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D8:26:9D:90:41:86:01:84:C8:AB:0C:AB:39:73:DD:AA:87:E6:1B
X509v3 Authority Key Identifier:
keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:4e:cb:32:2c:fc:a2:66:1b:ad:74:a2:da:0e:99:82:be:2c:
b0:5c:77:98:6a:3e:9a:7b:06:ca:09:20:08:7a:92:c5:e6:18:
32:74:f5:fb:4b:8a:c6:09:ad:e4:a5:45:3d:45:75:cd:ed:83:
07:ef:8f:db:33:5b:a8:fe:e1:2d:a7:e2:8a:6b:57:c4:64:6e:
6f:6c:d3:0a:ba:c2:43:45:9a:5e:f7:f9:84:03:18:f4:47:f1:
c2:b6:14:b5:ce:1e:af:9a:81:68:66:c1:a1:89:46:69:50:10:
92:13:22:f5:3a:e9:08:86:39:4b:8d:9a:37:c0:93:39:68:0e:
22:2c:5b:9a:5c:e4:1d:c5:7c:41:3b:5e:8f:4c:4c:46:91:90:
34:85:8d:67:4b:66:f2:54:fa:ab:14:d4:1e:00:2b:9e:4d:78:
56:59:96:1e:bf:30:08:3f:0e:42:a4:94:05:0d:df:18:75:77:
65:8b:bb:b0:71:a5:1f:0e:99:e3:69:16:5b:2b:ad:b0:00:a2:
d6:07:89:3e:ca:34:fb:65:be:ea:29:ac:4b:c5:bd:a1:9a:8c:
fa:88:94:5d:e3:bd:be:56:59:ef:bc:c4:aa:4b:a5:48:61:b6:
8f:47:b8:d8:0a:ff:f6:bd:bd:1a:98:0d:1b:05:e7:be:3c:7d:
0e:31:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:02 2026 by rpki-client