
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json)
Hash identifier: F3HbU6xofIfjv71QQJ/Ig0AyoCj/+C0tWfyML8xbzIc=
Subject key identifier: 75:30:0D:6D:C4:FA:FC:0D:75:F9:7B:2F:FC:09:4A:40:0C:86:02:B9
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
Manifest number: 012B
Signing time: Sat 13 Jun 2026 05:44:29 +0000
Manifest this update: Sat 13 Jun 2026 05:44:29 +0000
Manifest next update: Sat 20 Jun 2026 05:44:29 +0000
Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: wvTOI2UhAruCYfg3owLM3RdzlIVs3J0VB315ZGQIZOQ=)
2: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=)
3: 3853657658CA11F188C8E1F19D833773.roa (hash: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=)
4: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Validity
Not Before: Jun 13 05:44:29 2026 GMT
Not After : Jun 20 05:44:29 2026 GMT
Subject: CN=6a2cee3d-642b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:9e:af:f7:4d:46:a8:30:03:9c:54:c3:2d:
cf:03:23:cf:8e:d4:52:cd:0f:f6:7d:b5:20:f7:d7:
14:bd:5d:24:d9:e9:16:ee:dd:b0:1c:ee:82:7a:33:
3d:8d:70:44:68:a6:5d:48:b0:91:24:bc:80:97:e6:
13:f3:e8:6f:80:7d:da:3d:35:87:d7:b9:ac:43:93:
b0:dd:8d:61:6d:09:ed:d1:6d:61:bf:80:7d:55:a2:
24:b3:e2:df:da:82:c0:e0:1b:cf:2b:a7:d7:3f:d8:
a0:02:6c:81:b4:4d:8d:9f:65:43:db:6f:45:24:cf:
3b:52:27:25:2f:0b:13:a6:ed:30:fc:b2:f7:ea:fa:
c5:97:e3:2b:fd:e0:69:ce:0e:5c:03:f7:81:b7:45:
7a:86:05:93:91:95:87:24:1b:7b:cf:12:25:fa:9d:
48:02:a3:32:ca:02:a0:8c:f4:86:2c:cc:c5:c9:dd:
11:a1:51:2f:b4:c4:7a:91:02:40:e9:53:10:a3:17:
6c:1e:a1:48:7d:07:6d:91:35:5a:a4:41:8d:49:85:
aa:81:0f:b0:62:6e:06:9e:a7:42:e6:2c:a0:31:15:
dc:2f:08:e8:8b:07:f0:86:85:00:e8:de:cb:61:86:
19:7a:99:03:99:5a:3f:69:a6:8c:96:db:12:7c:8d:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:30:0D:6D:C4:FA:FC:0D:75:F9:7B:2F:FC:09:4A:40:0C:86:02:B9
X509v3 Authority Key Identifier:
keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b1:22:7e:02:bf:92:f6:4b:c3:e0:59:25:9a:b8:79:ba:7a:
48:cb:45:e7:c5:6e:7d:03:4d:ce:1f:96:6c:47:1f:8f:e6:9a:
a7:ab:e9:7c:54:e5:5e:15:5d:17:34:00:52:9d:38:9e:dc:db:
6c:16:23:f0:01:8f:18:28:0e:07:65:33:a0:a4:a3:e9:34:ca:
11:14:0c:b6:4d:39:26:ab:1a:94:7f:bf:4a:7a:fc:50:b6:21:
de:29:17:37:87:3f:8d:e4:fb:4c:60:7f:08:60:d0:39:38:62:
8b:08:a6:27:ab:9f:0f:d7:16:be:a7:5d:23:fa:be:c8:39:82:
22:14:59:bd:c3:59:47:fa:42:71:53:6f:68:7a:04:38:be:f3:
26:11:20:36:bf:99:5e:5c:07:f2:58:d2:0d:54:7e:5a:3a:45:
5e:75:b2:f5:06:99:66:aa:36:e8:b2:11:e1:fd:e2:a1:2f:09:
97:a0:f2:8f:a6:f5:83:0d:74:71:4a:00:53:2f:e9:85:f8:db:
55:ac:34:dd:28:ee:cc:4d:51:10:8a:fc:c6:16:ff:a3:fd:4c:
2b:c1:5b:70:a3:92:b8:86:eb:1e:ad:31:99:b9:18:72:d4:d9:
4d:cf:81:93:8c:69:7f:f4:b8:b5:00:a2:af:6c:65:08:39:60:
45:c3:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:12 2026 by rpki-client