
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
File: llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json)
Hash identifier: xoLHk0NQXuwe4U/hZ9FZMHDoAIyJKuvOMefoyq5GTDM=
Subject key identifier: 69:50:A2:25:65:03:91:AB:23:0D:C5:D7:47:72:1B:4B:24:15:3B:C4
Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
Certificate issuer: /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
Manifest number: 0168
Signing time: Sat 13 Jun 2026 04:49:03 +0000
Manifest this update: Sat 13 Jun 2026 04:49:02 +0000
Manifest next update: Sat 20 Jun 2026 04:49:02 +0000
Files and hashes: 1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: VarlT9h5dhgXXg1fNMImdapWbvoj6IgFxoHbgmtWiyw=)
2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: 21CMC+4jrqt9R3YVeyqV8PFYMlUBz4//FXWyuGoWN2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Validity
Not Before: Jun 13 04:49:02 2026 GMT
Not After : Jun 20 04:49:02 2026 GMT
Subject: CN=6a2ce13f-496e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:f8:b8:36:87:71:aa:dd:d0:12:8c:5e:57:
ec:d4:91:d1:62:42:cb:d0:7a:99:8a:28:66:50:a8:
0e:c2:d3:af:f4:50:7e:16:93:dd:f0:39:88:7b:9c:
ad:ca:cc:5e:fa:1e:f1:1b:65:cd:56:72:42:dd:f3:
ac:39:ad:c4:54:ae:01:08:0c:b0:23:d3:c7:df:07:
c9:0a:05:4b:3d:78:9a:bc:1f:91:b7:96:7d:61:d4:
07:1a:7f:78:67:ea:0f:50:ec:8c:0a:c2:2e:98:99:
c7:66:93:10:f1:76:66:9d:4f:c1:0c:c1:09:ce:cb:
6a:6c:8d:7b:29:e4:ad:80:5e:e1:7d:89:bd:ed:92:
c0:27:8d:bd:d9:d3:d8:61:8c:0e:8d:0f:8d:0b:3e:
50:70:8c:4c:0c:09:d8:31:13:45:44:df:aa:39:db:
91:77:05:f4:ae:a0:7e:f0:69:ea:fa:90:1d:8c:f3:
c0:1d:e6:e6:40:c7:99:54:35:cc:bf:ac:05:3b:a0:
82:da:48:a6:7b:5d:cb:0f:53:05:0e:30:17:d4:00:
d1:29:f8:4d:fb:6c:64:1f:4c:17:f3:01:45:db:50:
22:b5:87:c1:d7:ba:ca:3f:dd:70:ea:8c:cf:16:6f:
26:88:17:f1:c5:55:ae:ee:de:f0:dc:7d:a5:c4:5a:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:50:A2:25:65:03:91:AB:23:0D:C5:D7:47:72:1B:4B:24:15:3B:C4
X509v3 Authority Key Identifier:
keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:26:15:cf:51:17:b6:50:f6:5a:5f:bf:f5:6f:7b:19:1b:bb:
58:33:df:c3:2e:4a:53:88:a9:41:43:d1:83:42:ee:bc:ed:19:
dc:86:d7:18:d9:a0:28:a7:cf:fb:75:00:f3:cf:5d:61:f6:33:
56:08:09:20:9a:30:cd:e5:2b:41:62:06:ac:0e:a9:c3:57:95:
2d:74:97:a1:fa:40:22:1a:e6:46:a2:c1:82:25:c6:e5:35:4d:
19:5e:d4:e3:dc:68:84:a5:a0:4e:0c:6b:5b:d0:92:63:86:c6:
99:fa:aa:f7:af:a9:29:21:80:e2:54:05:0a:61:cb:bb:d4:9a:
77:f6:2c:6d:3d:06:71:78:63:cb:21:47:9e:65:f3:71:31:e5:
8d:6a:07:5f:b3:aa:09:1f:42:6b:f6:ac:b9:6a:2c:f9:61:47:
54:95:81:41:a3:9e:e2:79:d0:7e:7b:ed:63:5b:2e:e7:68:11:
fb:58:e5:c8:c1:4f:50:4f:e0:df:e6:ef:c7:6f:9f:cf:d8:d8:
38:66:37:41:76:e7:3c:d2:8c:75:0f:2c:4d:0b:8f:78:3d:8e:
db:8d:14:33:40:a8:b0:57:70:eb:f1:b9:63:a3:e3:7b:fb:bc:
9c:aa:08:00:58:d4:de:4f:19:46:42:cc:64:42:2c:d8:93:20:
9c:bf:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:48:10 2026 by rpki-client