
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json)
Hash identifier: E9g6G4Ge9vfnoEqt0nRWbX9CcyB4P0SUwNa43SrVtPU=
Subject key identifier: 51:C7:5F:23:A8:BD:84:86:10:E0:2C:57:EA:46:0F:DD:CC:43:7F:D0
Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
Manifest number: 0218
Signing time: Wed 23 Sep 2026 02:49:49 +0000
Manifest this update: Wed 23 Sep 2026 02:49:48 +0000
Manifest next update: Wed 30 Sep 2026 02:49:48 +0000
Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: MPjkjUHnfRCqhjE2Xz+3jh3koDMRWTxCDROum4WEk2E=)
2: 2giYZ4FJY1AfV1i-ox9a5yMxwJc.asa (hash: IwYHYQgU1YboVtedT/IywN6meXIP64gHd/NsfENFs4k=)
3: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: 5/jz+C40zLVMH2SNYsrHp/ff3x36CKwapZ0lQnBenzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Validity
Not Before: Sep 23 02:49:48 2026 GMT
Not After : Sep 30 02:49:48 2026 GMT
Subject: CN=6ab33e4d-6895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:ee:2f:43:c3:aa:c1:dc:b3:7b:34:3f:99:
26:e7:40:4b:93:50:18:a5:af:87:18:d0:18:7e:f8:
ef:bf:b8:5a:4b:c1:ec:c3:ca:62:2e:78:e4:e7:3e:
c9:cb:f7:73:eb:d7:f9:21:2b:5b:4d:c7:2d:22:16:
d1:fb:fa:63:3c:35:99:a7:d0:20:de:39:4d:ca:00:
ae:5b:b5:7a:c3:b9:b9:fa:a4:bf:58:01:e6:a0:9c:
35:d8:c4:ed:09:95:05:2c:02:87:66:2d:cd:3f:23:
95:a9:1e:28:e6:51:5f:e0:d8:25:f5:16:4a:c1:4d:
62:7d:a0:33:d3:a3:0b:cd:97:8c:2a:1f:b7:5f:5e:
e2:1c:d3:92:a6:44:42:80:f7:af:60:4b:e0:44:92:
ed:12:0a:d2:ae:34:39:9d:34:44:3e:bb:92:2a:98:
1d:46:6a:c8:13:7f:e3:a1:85:24:9b:2f:c7:e9:5e:
0a:97:04:0b:10:e6:da:09:27:60:30:1a:18:72:15:
76:f3:79:90:bc:c4:af:28:21:4a:9e:b7:70:b9:b4:
c4:1b:a7:bd:36:47:4f:18:d7:e0:e3:87:ed:48:d3:
74:a8:77:18:ba:15:fb:1c:86:78:f3:98:66:4b:71:
a7:c7:e4:1d:33:e7:b0:4c:44:eb:db:7e:49:c1:02:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:5F:23:A8:BD:84:86:10:E0:2C:57:EA:46:0F:DD:CC:43:7F:D0
X509v3 Authority Key Identifier:
keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:6f:b0:21:b8:60:79:dd:81:7e:c4:9e:18:00:0f:d3:87:ca:
6e:bc:2a:34:28:7b:09:5f:d7:b5:06:61:38:2a:32:72:73:67:
d5:0f:20:1d:08:c1:21:d8:f8:d3:21:e8:25:f6:02:32:3c:0a:
8f:ba:08:72:5b:e7:6c:15:12:2c:7d:1e:ca:dc:df:79:c2:10:
82:60:9e:03:c9:7d:0f:c6:69:ca:4b:71:56:79:75:bb:99:21:
a4:3f:58:74:1c:6b:d7:3d:fb:dd:16:b9:e6:bf:4b:55:ee:e7:
e1:76:88:df:4a:72:18:73:df:5c:3c:e2:06:d3:c7:d1:7c:26:
62:d4:a2:61:58:a8:71:e3:97:4e:f7:d1:58:de:94:61:88:90:
8b:ae:ad:16:d2:d6:c1:94:52:8c:be:9d:bf:f6:1a:8d:80:07:
61:fc:6b:7f:8a:33:03:3e:a2:03:f6:59:4b:14:01:db:97:61:
e6:10:26:9e:b4:57:c0:84:18:45:3b:fa:64:9b:b2:eb:3c:3d:
07:25:99:32:17:aa:17:11:36:1a:36:e8:ca:c7:19:ad:7e:f3:
fc:b8:a9:e4:97:f0:a3:b0:25:d7:9c:92:4e:22:9e:d4:61:57:
b2:67:37:7f:37:0c:3c:43:1e:ec:c7:35:fe:e4:02:49:5e:af:
4c:fc:4c:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB
QzlCRUQ4ODgwHhcNMjYwOTIzMDI0OTQ4WhcNMjYwOTMwMDI0OTQ4WjAYMRYwFAYD
VQQDEw02YWIzM2U0ZC02ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmtzuL0PDqsHcs3s0P5km50BLk1AYpa+HGNAYfvjvv7haS8Hsw8piLnjk5z7J
y/dz69f5IStbTcctIhbR+/pjPDWZp9Ag3jlNygCuW7V6w7m5+qS/WAHmoJw12MTt
CZUFLAKHZi3NPyOVqR4o5lFf4Ngl9RZKwU1ifaAz06MLzZeMKh+3X17iHNOSpkRC
gPevYEvgRJLtEgrSrjQ5nTREPruSKpgdRmrIE3/joYUkmy/H6V4KlwQLEObaCSdg
MBoYchV283mQvMSvKCFKnrdwubTEG6e9NkdPGNfg44ftSNN0qHcYuhX7HIZ485hm
S3Gnx+QdM+ewTETr235JwQKeUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHHXyOo
vYSGEOAsV+pGD93MQ3/QMB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB
MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RUU0RC81MjNGREE4MDhBMDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIz
bVNSZjdDTlcwOHVzbS0ySWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARW+wIbhged2BfsSeGAAP04fKbrwqNCh7CV/XtQZhOCoycnNn1Q8gHQjBIdj4
0yHoJfYCMjwKj7oIclvnbBUSLH0eytzfecIQgmCeA8l9D8ZpyktxVnl1u5khpD9Y
dBxr1z373Ra55r9LVe7n4XaI30pyGHPfXDziBtPH0XwmYtSiYVioceOXTvfRWN6U
YYiQi66tFtLWwZRSjL6dv/YajYAHYfxrf4ozAz6iA/ZZSxQB25dh5hAmnrRXwIQY
RTv6ZJuy6zw9ByWZMheqFxE2GjboyscZrX7z/Lip5Jfwo7Al15ySTiKe1GFXsmc3
fzcMPEMe7Mc1/uQCSV6vTPxM+g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:33:40 2026 by rpki-client