
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier: yFB7R3R0FhUrWHXTAsBGK1zSyx0Wj/zTvGMoBc23K2E=
Subject key identifier: AA:DC:8C:0F:66:D7:3F:C9:BD:22:69:5F:84:C3:A3:BA:4A:24:D2:A3
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number: CC
Signing time: Wed 17 Jun 2026 06:58:02 +0000
Manifest this update: Wed 17 Jun 2026 06:58:02 +0000
Manifest next update: Wed 24 Jun 2026 06:58:02 +0000
Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: 8rpXsBFQojSOhSe0bnaib6jCYoS2doWXXmAWmbkAgxg=)
2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: u3inMiIK4DpIEunyB1TcEeJ9La/HJuiKvKXJQu7jAtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Validity
Not Before: Jun 17 06:58:02 2026 GMT
Not After : Jun 24 06:58:02 2026 GMT
Subject: CN=6a32457a-8fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:14:01:de:4f:ee:38:3b:f5:7a:79:39:1b:
84:98:d6:27:41:0c:e0:4a:06:31:18:1d:ed:5b:07:
49:12:0c:3a:a7:d5:6b:b0:c5:15:e0:c9:14:83:f1:
a5:46:57:b1:27:45:78:6b:8c:c1:3e:d0:be:68:52:
d7:bc:2c:25:07:a4:a6:83:6d:5a:d5:e0:5c:53:fd:
82:2a:ff:5a:52:20:49:23:d1:1b:01:62:94:c7:ba:
f5:fe:60:7e:64:af:ae:b7:63:57:86:e5:45:df:c0:
de:4b:af:5b:f8:a3:16:4f:0f:99:9f:60:51:b2:54:
36:df:bf:8c:5f:36:79:6a:21:77:3f:9f:f3:99:f9:
ca:52:85:57:36:8a:ca:3e:38:ed:52:0f:66:07:ee:
90:bf:dd:4f:af:fc:f5:1b:9e:6c:82:94:21:2d:ae:
e2:fa:cd:d3:97:98:90:ad:35:0a:9a:64:96:5f:e4:
79:5d:18:6f:3b:bf:a8:0e:d8:32:7c:d0:76:bc:40:
ea:c4:ce:cb:21:de:52:9d:80:eb:39:37:da:f0:70:
30:be:f6:4a:83:1d:76:fc:58:cf:74:b0:ae:6d:c6:
8b:c0:30:2d:0e:eb:59:b2:1f:76:cd:23:fa:1d:9e:
55:35:52:d1:11:ae:0f:3e:00:91:e0:46:cd:d3:d4:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DC:8C:0F:66:D7:3F:C9:BD:22:69:5F:84:C3:A3:BA:4A:24:D2:A3
X509v3 Authority Key Identifier:
keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:13:5a:83:ff:9a:34:8b:30:e6:ac:8f:a6:b0:92:2e:cf:dc:
5b:91:63:ff:23:af:03:c4:23:be:ce:d1:c8:d9:fa:c8:cd:45:
f3:5b:09:73:af:ce:da:cf:4e:f4:bc:eb:fa:00:f2:e4:76:b7:
5f:12:1e:94:6e:46:de:db:1e:d4:bc:48:bd:30:ed:96:42:cd:
9b:fc:83:4f:d3:fb:1f:f3:a9:0d:29:5c:3f:46:7f:3f:65:a9:
6a:0b:31:3f:83:f5:7d:4f:82:23:b5:91:fe:29:01:c2:9a:9c:
ac:30:13:2b:03:cc:96:1c:9c:50:ad:6b:e9:ff:dd:25:6a:e9:
e7:ba:ec:a5:48:b1:21:71:c2:2c:c5:2c:37:e5:2a:d7:d7:e4:
23:66:f8:5a:d5:3b:37:df:b9:6b:26:85:ca:a2:a7:f5:4b:17:
74:70:6c:e8:32:19:dd:c4:f6:0f:04:20:19:a3:80:cb:eb:fa:
4d:15:fc:d3:62:42:71:15:22:6b:0b:be:3f:ab:73:97:dc:e4:
4c:26:5b:e0:f2:4d:a1:e4:c1:99:a4:94:f1:05:55:0a:a3:e6:
71:ed:f4:c3:b7:f6:d0:13:e0:0c:4d:74:c1:38:70:d9:e8:2f:
5b:c8:41:ab:65:86:b3:17:e4:e8:b4:e0:28:6f:41:02:52:94:
07:53:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:22:39 2026 by rpki-client