
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File: s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier: GZFMczusKeq/u0fAP698QXeqxRKDh2v1+7PgebUD8PM=
Subject key identifier: 93:65:BC:90:A6:91:CC:6C:7D:AE:C3:D3:56:30:72:85:94:4E:3B:96
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer: /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number: 01D1
Signing time: Mon 27 Jul 2026 05:22:42 +0000
Manifest this update: Mon 27 Jul 2026 05:22:42 +0000
Manifest next update: Mon 03 Aug 2026 05:22:42 +0000
Files and hashes: 1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: 5/aR6hh1WPgYuqEI0W0DNar4n4HHk5Io69PTLiLRuUc=)
2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: O+F2f0VhvNnWnKbzy9esY0C22BqTbjq93BfHVqmsqRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Validity
Not Before: Jul 27 05:22:42 2026 GMT
Not After : Aug 3 05:22:42 2026 GMT
Subject: CN=6a66eb22-c1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:00:a5:b0:58:1c:42:c3:20:23:16:57:ee:
8f:0b:7c:5f:7b:4b:de:e2:ab:98:4f:64:b4:1e:1c:
b6:bf:fb:18:a0:60:ad:75:67:01:e6:48:bc:3b:3f:
7c:82:f6:93:9e:10:f9:6d:1c:05:54:14:7e:89:5d:
59:2b:1d:18:87:a4:48:85:72:6f:af:ec:00:33:d5:
9f:87:83:6e:02:bc:30:79:da:fb:93:b3:87:0a:2e:
e1:62:8e:a0:41:04:88:6e:89:34:56:55:44:f7:ea:
97:eb:17:7e:e3:93:b8:da:61:8f:ab:4c:71:1d:1f:
db:f7:85:cd:a8:b3:b7:fa:c0:cc:3d:23:ab:55:f0:
35:b6:72:16:41:f1:cd:01:a1:b0:5d:da:d7:3c:81:
42:c4:7d:c5:c3:44:47:34:33:1b:1f:5b:54:bf:83:
11:26:57:db:27:ce:a2:44:b1:55:1e:9d:00:74:df:
f2:8e:39:11:c1:c7:5d:b9:63:14:0a:97:c4:5e:c6:
4d:91:6b:dc:ac:07:a9:7f:15:ff:91:6e:4a:ae:b3:
49:fe:0b:31:00:72:70:ef:b1:92:a0:b6:20:d9:3a:
bf:b4:1e:88:2a:1e:31:03:c3:3a:0a:e9:5e:ba:f6:
42:8f:fe:e3:69:5a:7e:6b:f6:70:ce:3e:4a:fd:9a:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:BC:90:A6:91:CC:6C:7D:AE:C3:D3:56:30:72:85:94:4E:3B:96
X509v3 Authority Key Identifier:
keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e5:98:e2:46:a0:e2:44:3a:1e:c9:ac:08:72:78:b0:32:47:fc:
ff:e3:82:7b:29:8b:3c:5a:77:ac:95:47:e1:25:c4:24:e3:a2:
a0:22:de:8c:4b:d2:ca:11:50:46:55:95:8b:86:af:9a:49:63:
19:e8:c5:44:15:95:72:fa:73:4c:6f:01:94:cb:7c:2f:64:f4:
c8:2c:db:e4:f1:6c:1c:a1:ad:34:bb:98:75:5d:1c:25:3b:87:
ad:fd:73:c5:7c:90:67:45:37:c0:03:5e:c5:a1:d5:f5:f0:f3:
02:4f:69:ff:d7:be:67:98:47:97:8f:08:a7:43:d1:4e:5b:df:
21:1e:2e:68:09:ce:f7:c0:14:2a:72:97:cb:58:10:03:0c:9a:
f8:76:de:70:81:c0:46:57:81:f7:1c:b8:e6:17:c5:86:ca:06:
cb:4b:d5:1d:95:a1:c5:63:79:33:ff:89:99:d4:21:3f:25:1b:
eb:14:bc:7c:21:56:da:52:7c:3d:7e:2f:0a:5e:88:6e:81:65:
52:b2:60:d2:d7:0a:3d:33:ff:cb:df:e8:d3:23:b0:d7:aa:45:
d5:65:9d:fb:3a:8c:03:7d:34:3c:66:25:29:46:20:b6:b2:3d:
60:36:d2:4a:43:21:6b:7e:02:53:88:b1:78:fc:8a:0d:1d:b8:
b5:f7:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:21:46 2026 by rpki-client