
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json)
Hash identifier: yVVaC2EW/y9yUjerbAYvNC/XV9ZqZ+CxfzWxeBy3NV4=
Subject key identifier: 8C:4D:0B:5D:1E:EE:B6:0E:50:45:F6:08:20:2E:7A:FE:70:FA:1B:3E
Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Certificate serial: 03A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
Manifest number: 0392
Signing time: Wed 29 Jul 2026 01:33:16 +0000
Manifest this update: Wed 29 Jul 2026 01:33:15 +0000
Manifest next update: Wed 05 Aug 2026 01:33:15 +0000
Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: 47fK8UGYz6WHCEb88rYzCMTPrPoBa5N/i5vo/uaMw0Y=)
2: ULsBzvtfgl1K2igC59L2mzvRxB4.asa (hash: bMTyR+adZecSbErM2lmgCv3g2pNnvAsEv7EFqtHkOqE=)
3: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: DhWrSSSIb3yMa22B1M5gCqAEgOoCIxcBBwKz1msoORA=)
4: MV52KExuh2QQ1cDV77_rjB-fxi8.asa (hash: hj7dzH3p5PUyIc/5PrX8QABZUwY7fGc0N+IJoH4lBa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Validity
Not Before: Jul 29 01:33:15 2026 GMT
Not After : Aug 5 01:33:15 2026 GMT
Subject: CN=6a69585c-533a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:0e:c6:52:aa:0c:8f:e3:bf:28:26:e9:c4:
6f:6d:35:b4:44:d0:10:5a:80:59:c2:1d:73:de:7a:
1a:58:bd:09:c8:87:d3:e6:b6:03:43:9f:65:ee:39:
37:78:56:38:dc:41:28:8d:65:9c:1e:ca:03:ff:95:
87:4c:ee:96:66:6c:d5:34:d7:fc:a6:cb:f3:ca:c9:
e9:d3:61:f7:80:2c:7c:05:fc:f8:96:d1:6f:82:30:
ec:28:e3:ba:ff:fc:87:57:d9:f0:e5:41:43:d1:bb:
08:55:dc:8c:02:f6:23:99:b1:8a:3c:a4:6d:cb:52:
55:47:e2:9c:bf:18:ad:4b:f4:6e:ed:52:46:45:c8:
5e:9f:1e:51:83:e5:3d:aa:bc:0d:27:a4:2b:11:22:
76:8f:12:a5:ea:f4:53:22:58:a2:f2:17:8b:53:d0:
8e:7a:83:22:ff:ea:49:bc:f9:d7:82:64:08:bd:83:
e3:a2:36:65:02:22:c5:64:d8:01:c5:88:8c:40:37:
3b:28:ef:a8:ed:1e:84:be:a0:7d:3f:3b:d5:9e:d0:
fe:dc:fd:9a:c3:d9:34:d1:b1:1f:04:d1:21:4b:54:
d9:0f:9a:28:62:d6:e8:d5:69:35:c1:65:d8:ad:40:
99:d6:8a:9a:49:ca:3b:7f:85:9c:af:49:2e:da:86:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4D:0B:5D:1E:EE:B6:0E:50:45:F6:08:20:2E:7A:FE:70:FA:1B:3E
X509v3 Authority Key Identifier:
keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:88:cc:fe:40:0b:2a:b7:13:25:65:89:3a:f6:c5:50:91:c1:
c4:50:98:b8:71:70:f1:35:c2:79:de:1e:7d:0b:92:eb:7f:05:
38:f6:39:19:c8:dd:b5:57:4b:12:9e:1e:ad:81:d9:3b:a7:bd:
3a:d9:9f:fb:65:e2:a2:02:9d:73:5e:2d:e0:d2:40:57:20:f5:
03:f7:50:32:24:9c:82:41:a9:b0:2f:b9:72:6b:91:ad:14:12:
1c:3c:74:03:43:d0:72:d5:40:2b:0e:63:15:d0:f3:4c:07:6f:
1c:e4:4c:e9:a4:7c:35:6e:21:cb:01:a2:24:09:cf:02:74:67:
ad:b4:63:f4:a6:73:bb:46:d0:4b:df:de:3f:4c:32:ad:4a:f2:
1d:75:ff:82:5e:12:a2:45:f2:aa:99:88:e3:17:ad:d5:c2:d2:
b5:18:41:43:9a:a7:1a:ba:b0:57:fb:77:97:df:4b:8a:4e:20:
a3:56:be:c4:aa:51:61:03:42:54:5d:3a:a5:b5:b0:fd:89:a3:
a1:5a:34:28:70:2d:4f:68:f2:6d:a9:b2:80:82:10:c3:80:24:
97:1d:8a:13:c2:9f:17:f4:8b:03:d6:7c:01:a9:b2:5e:37:9c:
8a:5d:cf:66:02:8a:f4:31:45:dd:46:15:9c:22:bc:74:45:e6:
c8:31:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:36:37 2026 by rpki-client