
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json)
Hash identifier: F/KCzymUNQGTv9Tl3p4LBQ0vEFpbGdr5USP4bEaPpxc=
Subject key identifier: 0E:2E:A8:FE:6B:CA:FF:AB:A6:0F:33:71:52:85:3A:67:9E:D4:E0:8B
Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
Manifest number: B2
Signing time: Mon 27 Jul 2026 09:15:13 +0000
Manifest this update: Mon 27 Jul 2026 09:15:12 +0000
Manifest next update: Mon 03 Aug 2026 09:15:12 +0000
Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: F6MULGozTPzPBfwvsy1EGVud+zl3urduva5S4B7J25A=)
2: 442749147D6311F0BC413466C4F9AE02.roa (hash: pZzQ3wcf5NhKLhQ5y0SYHfcdZzM5PRL9cbkeNwOsguc=)
3: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: 0u1ZLLqCampcdXnPq/pBAes2DhVX2vLtj9KlG8BoPAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Validity
Not Before: Jul 27 09:15:12 2026 GMT
Not After : Aug 3 09:15:12 2026 GMT
Subject: CN=6a6721a1-842c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:6f:10:a2:17:f0:f1:db:98:06:9c:40:20:
40:83:15:3c:6e:86:ea:68:0f:3b:c5:82:73:b7:ac:
2a:ad:c5:e9:26:c0:c1:ac:52:10:cc:15:61:7e:23:
40:16:dc:63:2c:a4:d5:ea:fa:ab:60:63:7d:e0:03:
8d:24:f8:6f:10:ba:1e:e7:a1:2a:d7:72:8f:0e:14:
a9:58:9a:24:2e:33:46:e6:5b:8e:1d:4d:93:8a:cd:
03:2a:24:3a:1b:3a:c4:3e:af:6f:6f:6d:42:f1:12:
d4:7a:26:18:25:94:66:b3:58:73:b5:37:81:1f:b7:
ca:9b:69:03:17:81:ac:3c:14:fb:94:e1:88:46:c6:
80:ba:50:b5:d2:73:94:dd:93:85:6c:d6:ea:20:8e:
08:d7:12:6b:8c:97:bc:6a:75:2f:52:8a:df:ca:c3:
e6:8d:3a:8d:ea:9d:72:34:3a:e7:9c:2b:69:02:4a:
ff:00:f3:31:66:a7:04:28:02:e0:85:cc:f8:67:ac:
e3:0e:1c:94:59:6c:be:f2:cb:90:e5:54:5c:e2:91:
a7:8a:ed:40:dc:95:43:5c:70:93:1a:60:b4:59:36:
8b:5b:42:20:13:c9:ff:ec:44:9f:cf:cf:c2:82:3c:
e0:1c:31:28:77:63:71:b6:80:6f:09:23:44:89:ec:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2E:A8:FE:6B:CA:FF:AB:A6:0F:33:71:52:85:3A:67:9E:D4:E0:8B
X509v3 Authority Key Identifier:
keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:16:7d:fa:ea:9c:43:bb:c6:69:76:96:77:99:1a:77:4b:a4:
16:08:3c:bc:40:e2:9c:1c:f4:83:9a:63:de:30:ab:b2:6f:ee:
51:aa:9e:de:b2:12:43:59:75:70:5d:cd:10:70:4d:82:4f:c9:
5d:27:48:85:d9:7a:1d:06:4d:7a:08:ec:cd:73:33:4b:78:fa:
27:40:12:8f:17:0c:11:62:31:09:a3:12:49:db:98:c1:6c:91:
6a:90:14:69:84:60:b5:fc:47:61:e3:8b:b5:19:db:ec:9e:23:
25:b1:4c:91:69:07:6c:1e:87:a1:cb:00:7c:d4:15:1b:ba:c8:
a6:18:10:ca:37:49:d0:00:57:7b:30:97:29:26:79:c5:24:8e:
57:7f:d9:9d:e2:64:d0:8a:b3:dd:29:f4:63:04:56:ac:30:bc:
77:f4:09:2e:8b:c3:49:74:6f:58:3a:a7:48:7b:4f:e4:e0:4a:
3b:eb:65:6d:27:35:5b:53:00:d1:0c:67:be:65:e6:db:49:6c:
65:9a:3f:33:64:d5:b1:02:5a:fd:76:5a:d3:6f:9a:30:b7:30:
e1:48:cb:32:32:1f:d4:b2:53:70:5e:1a:b3:b3:21:26:c9:1c:
05:77:f2:f9:48:98:57:2d:c8:af:75:fa:26:70:75:ff:47:8f:
0f:d4:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:41 2026 by rpki-client