
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
File: lufMd6OOPhgL91JrodlTIYBONeY.mft (raw, json)
Hash identifier: 2jkqCLEpiEQ/2is3LkYLylDinVPU2eUhNpHGRACGkAs=
Subject key identifier: 8A:6A:F9:CD:B5:A9:5A:5C:B9:F7:96:77:32:5E:6C:6D:8F:22:6F:83
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Certificate issuer: /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
Manifest number: 061D
Signing time: Sun 01 Mar 2026 01:23:57 +0000
Manifest this update: Sun 01 Mar 2026 01:23:56 +0000
Manifest next update: Sun 08 Mar 2026 01:23:56 +0000
Files and hashes: 1: lufMd6OOPhgL91JrodlTIYBONeY.crl (hash: NyhDFx6weWJLH7zhK/u4eb1hd86wDH3GF6fpLmDwlnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4FA, serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Validity
Not Before: Mar 1 01:23:56 2026 GMT
Not After : Mar 8 01:23:56 2026 GMT
Subject: CN=69a3952d-203c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:26:c3:41:e9:2f:a9:7f:5e:59:72:4b:27:
fa:2d:93:32:8a:aa:a5:86:b6:e2:58:d4:79:d6:9f:
8a:66:76:76:c6:e8:f0:31:4f:2c:ff:12:b6:81:14:
73:8c:8a:92:4f:31:9b:b3:91:e9:f8:4c:fe:5c:0f:
db:4b:69:22:99:03:d6:d7:e0:93:17:c6:30:ff:9a:
8c:53:ff:df:86:92:d2:67:1f:2b:de:ea:06:96:5e:
3a:8b:3c:e6:52:14:2e:12:29:60:a0:8e:66:9f:f6:
5f:a4:5c:69:af:09:3c:83:8b:b4:11:99:1c:e7:a0:
0f:bb:3e:67:60:36:6f:2e:a4:f1:4a:1b:d7:30:4d:
86:89:69:34:7e:f9:a5:c1:a5:57:db:78:f6:e6:05:
4f:e1:bc:5c:7d:48:f2:82:a8:5f:0c:23:af:15:74:
62:a0:d1:af:71:fa:2f:ff:d2:ec:89:90:f7:c6:1c:
64:b1:71:2f:aa:13:10:61:57:ba:58:c0:9d:d1:58:
b1:18:96:2c:ba:36:5e:d0:1f:ea:0b:3c:94:b3:01:
4a:6c:b5:59:d5:79:3e:28:83:ad:b9:30:a2:ca:cf:
29:e7:a8:51:68:b3:4d:ed:03:d9:e1:9c:6d:3c:3f:
ad:93:6e:d0:d6:01:2c:74:50:5a:de:4c:5b:3b:2b:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6A:F9:CD:B5:A9:5A:5C:B9:F7:96:77:32:5E:6C:6D:8F:22:6F:83
X509v3 Authority Key Identifier:
keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:65:3f:28:94:bc:17:df:ad:28:32:66:39:af:86:78:33:6b:
72:2f:9c:8a:07:75:84:93:0f:99:78:31:44:88:7a:40:cf:69:
3c:ed:1e:9a:b9:80:6e:24:36:cc:be:7f:97:c2:9a:d7:98:0f:
ce:58:89:e1:82:43:3f:58:52:c0:6d:a9:ce:e8:cd:eb:39:e2:
1a:4f:57:dc:f9:31:74:02:38:f0:c4:22:96:10:73:88:b3:50:
35:ed:18:6d:98:a8:3d:85:46:8c:ed:e7:3a:8d:ec:95:f9:dd:
50:dc:8e:5e:5c:96:f7:fb:8f:a0:9d:48:b7:7c:0f:48:0e:a1:
95:eb:4e:90:3b:bb:ed:05:c5:f3:bf:d6:65:a1:c7:36:eb:cd:
de:87:9c:e0:58:9e:16:b0:11:ad:16:60:78:c8:65:47:43:c0:
c8:8e:ed:e5:10:f0:16:8d:4f:36:2e:13:58:77:59:61:19:30:
28:f9:eb:fd:35:a9:7e:07:6a:b9:26:7b:e8:17:9f:4a:09:a5:
9f:db:f8:9c:72:fb:f9:78:3b:3c:ce:b2:9c:8e:70:e6:08:16:
b7:b8:9b:20:9d:10:0a:f9:da:b2:51:a0:e8:56:9f:ea:65:71:
5c:41:b8:71:cf:94:61:e3:08:6d:f8:c7:0d:11:0d:7c:79:9c:
bd:09:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:14 2026 by rpki-client