
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json)
Hash identifier: 5tE/m+3fcEKDjhmMx4m9mmsX3KKGVDMgepYmrkiRG/c=
Subject key identifier: 37:04:30:FD:8C:01:28:3E:4C:25:45:D0:B5:75:0C:A2:6D:95:D8:51
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial: 0C8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
Manifest number: 0C65
Signing time: Fri 12 Jun 2026 18:42:12 +0000
Manifest this update: Fri 12 Jun 2026 18:42:11 +0000
Manifest next update: Fri 19 Jun 2026 18:42:11 +0000
Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: 2gsrCOkCLlbJsceKDLELwRDcxKEVzNTQX5hOfAiKR0A=)
2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: yzY+pKYkZw0uNGaXwIqrPcHyCwkxCWHWqVxFG+uHRA0=)
3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 2kn/q1hOME//Yhn7qkH4G8jggbyrCgjoL4hoHZXGsZM=)
4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: ouH4abzFqla8RyorGFEh8tsKVYnL5dBI2TdSDocSzXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Validity
Not Before: Jun 12 18:42:11 2026 GMT
Not After : Jun 19 18:42:11 2026 GMT
Subject: CN=6a2c5304-2d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:dd:4f:5a:c9:7f:28:72:11:e5:94:08:f5:
24:c8:9d:64:f3:fc:5b:ca:41:df:08:51:72:1f:0d:
a9:c4:87:67:0a:27:c3:47:3f:cd:2a:f0:84:44:48:
97:ae:43:f3:b9:1c:41:f6:23:0b:54:9b:80:f4:4a:
1f:65:df:82:1a:4f:c9:52:d0:a3:63:fe:ed:b7:11:
ee:9e:d7:bc:45:9c:af:59:8e:4a:f3:b1:01:d9:e3:
de:19:6f:a9:32:91:8e:a7:74:9b:ec:b3:69:4b:bd:
cb:bc:80:b6:4f:32:89:63:80:22:2a:0f:88:c6:b2:
d1:fd:c3:9d:44:84:4c:e9:b9:46:01:9b:96:de:d5:
89:a2:a7:62:5c:06:c0:e0:62:ee:2d:ff:2a:4c:ab:
71:67:96:d9:e7:1d:89:c3:d1:27:93:74:0e:90:b4:
4a:d1:cf:9c:5d:48:68:46:c6:81:21:58:d5:fa:df:
2d:c7:73:bd:fd:0d:a6:df:66:25:b0:c7:2e:c7:cf:
2a:54:79:48:33:6c:0d:ed:4e:21:3c:41:37:57:99:
a9:c7:fa:4c:50:50:1b:70:21:31:3b:69:56:c6:85:
82:f2:90:27:b0:a6:a6:51:4c:eb:a7:3a:b7:01:f2:
44:9f:6c:f0:e3:7e:80:2e:b1:29:13:ab:d4:13:2f:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:04:30:FD:8C:01:28:3E:4C:25:45:D0:B5:75:0C:A2:6D:95:D8:51
X509v3 Authority Key Identifier:
keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b5:54:99:bd:bd:af:6f:d7:6a:0a:c2:18:d3:af:4a:93:a6:
f1:bc:4a:b2:39:40:d8:25:e8:e9:87:09:66:37:27:ef:c4:53:
3b:15:06:63:60:e4:5a:f5:d7:f7:06:b5:df:0e:d8:e6:d7:6e:
1d:fe:a5:77:73:17:cf:90:45:e0:1e:73:ef:15:19:c4:e4:ac:
58:a1:51:6c:86:72:c3:ab:4e:14:9b:4a:40:fc:4c:aa:2e:2f:
25:93:5f:e8:02:4a:11:9d:a7:99:91:1b:75:8f:3b:3f:b0:b1:
f0:87:91:37:0d:a5:af:b1:14:49:0a:29:9e:4d:c8:d0:bd:ed:
2d:f7:eb:fa:46:ac:f4:7f:25:39:cc:a8:b5:da:3f:9d:26:e6:
5f:dd:11:e8:d0:73:35:a0:e7:11:31:10:07:a6:2d:09:62:48:
0e:73:d8:f4:29:0d:97:ce:88:24:7e:b7:1a:d8:d0:0a:87:cb:
a6:e0:2f:03:90:40:e0:30:a9:08:02:a9:97:26:82:cc:ed:3b:
e6:cb:78:c4:b0:87:5e:12:df:b3:14:c3:a3:1d:85:b9:3b:9b:
5d:5b:14:96:67:82:96:ed:c2:5b:16:4e:5c:46:96:8b:d6:92:
44:ea:33:a5:dd:5d:56:33:f9:a7:c9:ec:6b:d0:8b:44:0b:75:
04:c9:81:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:47 2026 by rpki-client