
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json)
Hash identifier: OsB0f34GNcIhQpI3OiZO9goxDHhhMa0st2ZosmMjLgc=
Subject key identifier: E3:CB:5C:18:09:31:58:41:9D:5D:AA:1C:C8:B8:A7:B6:48:F8:0B:0E
Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B
Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
Certificate serial: 0C39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
Manifest number: 0C2F
Signing time: Fri 12 Jun 2026 18:47:03 +0000
Manifest this update: Fri 12 Jun 2026 18:47:02 +0000
Manifest next update: Fri 19 Jun 2026 18:47:02 +0000
Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: H08StLfK2xKsoWYxLTnBbNJteImbEq0iwnU2XWzf040=)
2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: mJ7FNfAsY8ilIUPeznnb6nLSUZbSai5AntD3LtENWkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl
rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3129 (0xc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
Validity
Not Before: Jun 12 18:47:02 2026 GMT
Not After : Jun 19 18:47:02 2026 GMT
Subject: CN=6a2c5427-e6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:ff:aa:be:f3:32:20:c6:75:65:47:de:0f:
da:bd:ca:e1:2f:d4:9d:2c:f0:af:ef:47:c0:a3:78:
95:1c:fa:f7:a9:b5:26:ef:5e:36:d3:b5:81:8b:45:
b0:5e:94:e4:38:31:d3:94:82:eb:ac:01:a4:b9:46:
a4:3d:21:03:17:9f:a5:c9:80:f2:37:6a:23:e3:92:
c8:ec:15:69:8a:db:23:48:21:7e:dd:d4:46:6b:5d:
f8:a9:c3:eb:e9:fd:50:46:6c:da:ea:5e:aa:2b:e5:
18:c6:e8:fa:dc:b8:92:73:cc:51:80:58:02:79:68:
2f:45:97:d8:af:4b:27:97:90:50:97:69:6a:77:cf:
d0:2f:34:25:05:88:21:46:56:f1:aa:a7:17:f3:de:
b2:ec:b7:5e:50:ab:aa:93:97:2b:70:72:d0:e2:1c:
71:42:ab:2f:22:d6:f9:54:f0:a5:1c:c6:6f:9b:b8:
f3:14:85:3c:06:92:82:96:31:2a:6d:21:67:9e:6e:
f9:09:aa:ff:9f:18:63:6c:59:d2:9b:de:d2:1e:e6:
f1:c0:5c:3c:d7:9e:1d:31:13:af:97:f4:b1:8b:bb:
5b:d6:59:5c:8e:97:79:03:90:23:47:7d:d1:59:d3:
07:b7:b2:ad:a2:32:37:63:e6:fe:47:dd:12:9e:c2:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CB:5C:18:09:31:58:41:9D:5D:AA:1C:C8:B8:A7:B6:48:F8:0B:0E
X509v3 Authority Key Identifier:
keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:ea:36:88:43:f7:16:d1:55:03:b8:25:c2:ea:ce:ac:48:01:
ff:a8:0a:0f:2e:2e:fa:fa:aa:26:8b:a3:e4:df:c8:ab:58:4d:
17:c5:b9:99:d2:06:81:c3:f8:6d:d7:c1:3f:a0:0b:12:64:2c:
b4:4b:ed:5f:89:a1:90:b9:e3:08:e4:bd:40:f8:6d:c9:82:b3:
25:01:cf:b0:28:e4:83:5b:93:36:ed:23:73:ec:d2:93:9e:57:
35:9c:68:e5:7e:36:26:31:3b:78:5b:86:50:e5:a9:91:ee:0f:
64:42:22:52:aa:d8:d9:54:f4:fd:90:7b:09:78:0b:ea:4e:10:
fa:3d:4c:f5:2d:7c:81:fe:fe:48:46:28:dc:f5:00:90:0e:97:
30:b6:27:ea:20:98:b4:df:18:2e:5a:2b:a6:89:bd:5d:c3:92:
58:13:4f:c8:35:f3:de:f4:4f:3b:2e:00:ee:c0:23:00:c2:80:
4e:cc:e1:04:29:36:c3:6f:8e:ca:39:57:6f:5c:40:2d:cb:c0:
7a:5e:3e:7e:64:b9:ea:79:28:00:d7:d8:a6:94:40:55:64:94:
5b:50:e6:1c:6f:18:fe:d4:42:51:c2:05:56:67:77:0b:d2:aa:
a4:bf:f7:5a:44:52:53:8f:db:38:e8:57:c8:85:5b:ff:80:4e:
0c:f1:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:29 2026 by rpki-client