
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json)
Hash identifier: Kx8zl+0qTy7VuSWcNaV+idtbe0KbqMwkdGIdTDb8b3Q=
Subject key identifier: 28:E3:53:5F:AE:BB:30:28:67:C7:61:90:2F:35:A4:58:DF:E9:10:A7
Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
Manifest number: 0135
Signing time: Sat 13 Jun 2026 06:11:56 +0000
Manifest this update: Sat 13 Jun 2026 06:11:56 +0000
Manifest next update: Sat 20 Jun 2026 06:11:56 +0000
Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: SMnY2c6lcaOnzrY3pslOH0bsp/F2T26Y5jYYWIqHuTo=)
2: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (hash: rv9K2z3jLDHYayjuD/ofwi0jQtAT/5qT98rJ5cSCRIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Validity
Not Before: Jun 13 06:11:56 2026 GMT
Not After : Jun 20 06:11:56 2026 GMT
Subject: CN=6a2cf4ac-2988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:5e:00:b2:28:b3:4d:15:3a:57:28:91:62:
71:69:ce:6c:86:4c:eb:46:8d:fa:40:8f:74:2b:8f:
51:cd:28:0d:74:8a:43:6b:98:c8:fb:58:1f:79:33:
41:31:cb:04:a6:26:43:a8:fc:58:50:33:23:4d:df:
d7:24:e9:6a:89:d2:6e:ce:63:9b:c9:b2:98:75:b5:
3e:3b:e2:a9:e9:70:0f:73:1c:17:ea:41:94:04:6a:
65:67:b7:10:fd:96:b4:58:61:e2:da:e7:ad:4e:84:
34:89:42:94:cb:81:04:86:3a:94:ef:28:89:95:7b:
4d:b7:0c:13:4c:7d:44:95:37:61:11:1c:49:83:00:
a0:47:3a:78:d3:e6:8b:12:c1:e6:ab:74:15:21:0d:
65:10:f4:0c:42:99:df:06:bb:e7:7f:f3:a8:42:19:
f8:a9:c5:f2:08:7d:35:c9:c1:f7:15:19:41:9b:91:
e0:de:54:87:74:69:45:8f:cc:45:76:7e:91:0a:a2:
e9:ea:5d:d6:e5:66:05:07:07:bc:6a:7b:a9:79:5b:
87:cf:69:57:7e:15:83:cc:78:14:62:46:1a:f9:0d:
78:c5:7e:ea:a3:6a:56:a9:e4:f6:70:0b:36:6d:58:
c8:ce:d6:85:3a:69:37:c5:ad:e3:d4:a1:86:ff:e1:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:53:5F:AE:BB:30:28:67:C7:61:90:2F:35:A4:58:DF:E9:10:A7
X509v3 Authority Key Identifier:
keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:67:be:58:c1:41:a9:4d:80:b7:9d:22:ad:18:48:53:c9:0f:
37:19:73:36:e4:a7:df:34:74:77:06:aa:ab:77:5e:4d:ee:66:
a6:6b:7d:1f:24:89:53:26:20:6e:1f:19:ec:37:8b:64:a9:7a:
32:5c:ed:7a:99:96:d7:a4:ed:95:09:30:67:68:68:0d:b8:5a:
2f:9d:1e:04:ea:9d:62:fd:fc:00:7a:14:30:ec:ca:85:f6:e6:
fa:4e:19:ee:03:4d:9f:0e:42:20:d1:3e:a0:c0:91:9f:b4:60:
c8:fd:f2:b5:8e:7d:68:53:20:17:64:2d:fc:c0:9d:01:5a:ae:
e4:47:c5:d9:27:0b:61:b3:52:98:86:fc:ad:93:cb:0f:62:0c:
1a:81:9b:77:b4:ca:b2:5f:eb:51:63:c5:be:cc:87:1b:aa:d5:
b6:3e:9b:8f:d6:ab:d0:83:d8:8c:07:3e:75:0e:bf:38:11:ba:
80:6c:b9:7e:19:2a:ae:91:ac:f6:c3:89:d0:99:10:52:5f:19:
a4:ac:a2:46:d6:88:0e:27:3a:ea:d1:31:ad:60:85:44:2a:08:
40:5a:2b:51:95:31:cb:61:9e:9f:9f:34:30:b7:61:43:50:df:
66:8f:f3:d0:10:8d:0e:e0:3b:43:c6:e5:77:9f:17:3c:47:8e:
7a:0f:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:36 2026 by rpki-client