
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json)
Hash identifier: D37nMvqNmT8+zMQdgGbxVKTTaJUrQFxiGHdY+RtmwSU=
Subject key identifier: 81:C2:68:2A:BA:BC:78:0D:6A:7F:79:42:71:E6:41:76:A8:A8:F1:B7
Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
Manifest number: 01F9
Signing time: Mon 27 Jul 2026 04:52:07 +0000
Manifest this update: Mon 27 Jul 2026 04:52:07 +0000
Manifest next update: Mon 03 Aug 2026 04:52:07 +0000
Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: neKizO+xjC0OUBBYg4h2qYT2hjqbOKFXSbw0xZjLyJM=)
2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: 5/jz+C40zLVMH2SNYsrHp/ff3x36CKwapZ0lQnBenzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Validity
Not Before: Jul 27 04:52:07 2026 GMT
Not After : Aug 3 04:52:07 2026 GMT
Subject: CN=6a66e3f7-12c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:aa:64:31:9e:fd:bd:96:5b:4a:8e:15:a4:
b9:53:2e:cf:3c:6e:d6:cc:7b:0c:6e:9d:59:47:16:
dc:c3:a1:d5:94:90:de:df:3c:ca:a1:21:e6:2e:6f:
72:21:4a:93:33:a7:d8:6d:4d:b4:cc:66:85:a5:af:
3c:4b:45:01:64:32:70:27:c9:c5:de:61:fe:99:db:
9a:0b:4c:35:aa:dd:a2:a0:26:89:65:50:f3:f5:25:
6f:ed:f9:20:92:8c:d2:2f:ed:a6:30:de:c9:f6:5f:
e3:67:d1:ba:ac:a7:03:86:14:45:26:c4:bc:67:3b:
d9:6f:02:e7:cc:03:05:8b:99:ba:6d:80:97:22:9a:
ea:c2:8c:d1:cc:c5:7a:eb:38:7b:9f:b7:31:29:54:
aa:69:70:01:78:af:85:5d:00:5e:eb:fb:cf:aa:f0:
62:85:71:76:29:9f:b4:dd:ff:9d:4c:91:64:36:fc:
31:d1:48:25:5f:11:3e:58:2b:38:3b:ff:30:d9:f9:
4f:ba:b1:02:c1:ea:24:b4:56:5b:bb:ea:5d:2a:28:
d2:4c:7c:55:04:09:9f:ae:f7:7b:e1:eb:39:5d:7c:
f6:1e:75:88:f7:c5:28:81:21:cc:34:85:92:46:d1:
59:ef:9a:02:7a:d7:8e:92:56:13:d6:8c:2b:e6:7d:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:68:2A:BA:BC:78:0D:6A:7F:79:42:71:E6:41:76:A8:A8:F1:B7
X509v3 Authority Key Identifier:
keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:5a:cf:de:c1:87:bf:af:e0:f8:0b:54:f2:3a:30:ff:ff:
87:9b:79:68:f6:8d:9c:52:0e:f6:c5:b1:57:7f:5d:b1:c2:62:
e2:52:dc:7a:bb:03:24:d0:fa:e4:fa:71:a0:7a:3c:80:ea:26:
27:c7:c7:2d:f8:9b:ed:31:93:d0:23:cd:e7:15:82:c5:44:7c:
e1:a7:26:7c:dd:84:df:7c:53:45:21:85:86:57:87:af:0c:c8:
9b:f1:a9:0a:a5:2a:b5:ad:ee:5d:d4:30:a3:2b:32:a7:08:d7:
85:04:7c:d9:14:f4:9e:5d:15:1d:1d:b1:51:e0:c0:4e:21:53:
f1:a8:1d:d3:18:8d:bd:33:6d:d8:71:e5:a0:a7:c4:c6:5c:13:
1c:b1:3b:1b:0c:37:6e:97:c9:ff:04:7c:97:89:90:2c:58:a3:
08:77:00:05:1a:4d:a5:95:5d:70:3f:19:28:2d:3a:19:bf:2c:
f6:0e:7e:47:6c:87:9d:95:66:a4:78:e7:7d:e7:af:b0:b6:71:
c4:63:53:73:1a:a0:da:bc:e9:f3:7c:b8:75:ba:20:0a:8a:a6:
d6:d3:be:d2:bf:02:8f:52:2a:ec:37:ee:85:12:04:6f:00:33:
b1:17:a8:db:ed:67:51:e1:57:fb:8a:ce:ba:a8:d8:18:ae:84:
ec:5d:0f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:17 2026 by rpki-client