
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json)
Hash identifier: TbGcvdftaowTLR3L4zfHp0NE3wp8eu1gljrh+s+Fhw0=
Subject key identifier: 94:AA:98:F5:92:F3:4E:BA:CD:45:C8:B7:5A:51:D3:77:C5:CE:8E:FB
Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87
Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87
Certificate serial: 3579
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
Manifest number: 355D
Signing time: Fri 12 Jun 2026 15:17:10 +0000
Manifest this update: Fri 12 Jun 2026 15:17:09 +0000
Manifest next update: Fri 19 Jun 2026 15:17:09 +0000
Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: hI4lxv5OpkUq9Ismp9GneOueKE9VmGDcIIkdj0NTsPw=)
2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: naU1L3sA/vwcpXLmBU/QE/974IoqN32UsdXdqlCcaP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl
rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13689 (0x3579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87
Validity
Not Before: Jun 12 15:17:09 2026 GMT
Not After : Jun 19 15:17:09 2026 GMT
Subject: CN=6a2c22f5-5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:b7:85:10:b0:c7:50:f0:21:a5:9c:fb:dc:
76:33:73:36:8e:a4:d5:fd:b4:95:6c:ec:3f:7e:01:
d0:e1:9c:1b:a0:13:1f:fe:1a:f5:00:1b:30:f1:47:
ab:28:a0:f2:11:6b:b5:78:03:84:fd:ef:49:f5:a0:
18:ec:58:05:0f:ad:81:ae:ef:16:5c:20:d3:ad:71:
a2:2e:44:23:76:40:8f:66:94:f8:8b:b6:fc:a7:29:
01:bc:10:e9:47:da:aa:b6:8f:9e:41:11:77:d0:ed:
a5:08:a6:de:52:56:99:57:a7:63:e1:d1:6d:8c:01:
c3:10:87:f6:77:e5:1b:4f:76:dd:ac:e0:eb:36:3a:
be:5f:c3:75:b9:5f:1f:48:b7:a9:91:0c:18:24:d9:
12:69:27:aa:f7:37:ad:4d:52:22:a2:ce:c1:f3:66:
95:a2:35:eb:e2:06:b2:59:d5:e6:ff:bb:af:34:58:
01:40:2c:07:9a:21:ec:be:73:c6:3b:de:34:cb:2a:
f7:20:7f:ac:03:7f:25:e6:c4:56:24:9e:43:73:e2:
ff:54:c6:8e:90:ed:2c:c9:39:2b:96:8f:f9:73:f1:
6d:ba:20:38:d4:b2:57:1a:51:40:2a:c5:cf:76:92:
71:ea:17:4e:cc:b8:00:75:85:59:37:b6:77:14:4a:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AA:98:F5:92:F3:4E:BA:CD:45:C8:B7:5A:51:D3:77:C5:CE:8E:FB
X509v3 Authority Key Identifier:
keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f4:0b:74:37:f7:69:f8:06:ab:94:48:86:4f:7a:d8:4c:77:
22:2e:1a:25:9c:5f:ac:53:81:68:56:f9:fc:ce:b4:1d:da:f8:
50:f0:8e:9e:ea:d0:f1:0a:b0:af:1c:e9:1f:a1:1d:c6:48:1a:
b1:24:34:9d:2b:1e:f1:37:23:e6:6d:70:1e:18:15:f8:cf:50:
b8:51:6f:e2:7c:e0:d8:a8:59:2d:6d:40:a5:5b:ee:1c:3c:d4:
a1:98:30:7e:bc:1e:39:8d:3b:d7:35:b7:7b:6f:3e:b3:9b:b6:
46:3c:c6:72:72:4c:9e:00:6a:c6:fa:d2:b0:b2:57:69:84:3f:
1a:58:76:21:9f:79:74:80:24:82:ab:c1:3f:f2:ba:5a:d8:20:
09:ab:0e:1b:40:61:4b:e0:02:68:4e:40:5d:97:4e:a9:ea:cf:
fc:bb:85:83:d2:eb:41:05:8b:76:1d:d6:20:cd:e4:26:98:31:
85:cc:18:8b:e9:b7:e5:d9:01:76:82:13:16:5b:2f:e3:d2:5e:
5b:c5:83:d5:de:88:13:3d:8d:28:47:5e:7d:07:9a:85:65:f3:
7e:61:07:34:d8:fe:d2:4b:50:2f:c5:8c:7d:4f:af:2f:97:8d:
f0:cf:56:d5:93:89:de:27:75:0b:fd:e5:d3:49:ee:59:33:ea:
b8:52:fd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:52 2026 by rpki-client