
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft
File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json)
Hash identifier: +WMhJ9s/KdmGfrjfl+Gbya5FWVjPpqPoxwYItvjrhK8=
Subject key identifier: D4:BE:B4:49:57:8E:67:D8:DA:3B:A7:A7:80:3B:22:4B:26:62:31:F8
Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68
Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768
Certificate serial: 0C37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft
Manifest number: 0C26
Signing time: Tue 28 Jul 2026 19:00:26 +0000
Manifest this update: Tue 28 Jul 2026 19:00:26 +0000
Manifest next update: Tue 04 Aug 2026 19:00:26 +0000
Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: XLf8YeQrdqJIGmWorEAPtcPOtAdDNsn/ZdDLx86HE6E=)
2: A7982B82B88011F081A7B245C4F9AE02.roa (hash: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g=)
3: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: lF0Ud6Tl/4ldhJMDYPaNURdkT4vTTPUYzgxNpz7UXSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl
rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3127 (0xc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768
Validity
Not Before: Jul 28 19:00:26 2026 GMT
Not After : Aug 4 19:00:26 2026 GMT
Subject: CN=6a68fc4a-6756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:c3:36:a1:28:a4:9f:7c:45:ca:db:24:36:
8b:b0:98:b3:52:3e:00:56:aa:bb:63:15:fb:d9:91:
54:f1:b1:b2:5c:7a:a0:94:2a:c6:9e:1c:65:da:02:
f5:98:91:d8:cd:aa:21:29:fd:f2:37:c7:18:4d:18:
d3:ef:56:ab:47:74:ab:7a:10:17:af:9c:da:8f:d4:
03:21:b3:4f:24:51:c6:e9:86:e5:67:47:2f:66:c1:
ea:43:a2:45:3a:45:26:45:41:75:a9:bf:e1:d4:70:
8b:22:3e:f2:f1:0f:22:ba:db:69:6d:ca:5a:f9:da:
4c:56:a3:1f:b6:a7:e4:77:67:4d:e5:87:fd:4f:de:
5d:e3:1a:07:6f:d8:64:70:48:d5:ff:7a:15:72:53:
ce:cd:d2:9f:36:ed:d1:a9:e7:85:d0:fb:f6:7f:27:
e1:5a:53:c6:d2:be:fd:70:45:5a:f3:00:d2:b8:3a:
70:7e:2c:f9:67:c1:1f:45:d8:c8:6a:7b:17:48:ee:
8a:fd:88:a4:14:8c:ff:5d:a1:8a:43:25:c6:e8:da:
aa:09:ca:49:ac:b6:2e:b1:a5:24:77:32:32:c4:1c:
96:dd:bc:33:f8:71:0d:f5:a2:da:fa:87:d6:bb:c5:
8f:bb:81:94:64:29:c7:33:38:b0:11:7d:eb:ef:bb:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:B4:49:57:8E:67:D8:DA:3B:A7:A7:80:3B:22:4B:26:62:31:F8
X509v3 Authority Key Identifier:
keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:91:2a:d7:ef:c2:c3:4c:38:85:66:72:3e:6e:c5:12:93:bc:
5f:59:98:3e:ee:b1:2f:7d:66:03:67:3e:22:25:64:0b:89:e1:
5b:6c:8f:05:85:c8:d3:fd:8f:08:75:1a:16:bd:94:35:d9:2c:
8e:09:c9:24:b4:25:75:79:1b:7f:6b:2a:08:4c:d1:48:b4:79:
40:86:00:05:ef:49:73:4f:5a:af:c8:55:1d:f0:7f:84:9e:5c:
05:f7:12:fa:fe:78:f9:eb:58:54:bc:4e:98:94:a5:3a:67:14:
2f:af:94:f2:c8:51:d3:b0:e8:f7:e2:eb:cb:1e:1f:73:aa:ca:
59:be:94:17:b9:71:31:ea:80:c1:fb:a6:db:93:a6:ec:df:36:
af:1d:95:d7:1e:6b:aa:87:e8:0a:e8:04:4a:82:f8:1c:98:fc:
2e:e1:b5:db:60:bf:d7:9e:ad:22:0f:4d:5b:1a:a9:f6:c6:8b:
24:c9:0d:0d:f0:ca:7a:69:fa:54:d8:b3:51:75:b3:1c:c6:b0:
36:6d:a9:7f:98:99:2f:ad:78:4b:7d:03:2e:54:f6:05:47:5e:
ca:12:ff:e5:d2:c0:c7:9c:31:7a:c3:3f:ea:de:2b:22:9d:61:
ea:75:ee:d1:ed:2c:f3:f5:7d:31:87:26:90:9d:a8:7e:56:63:
3c:c9:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:12 2026 by rpki-client