
$ rpki-client -vvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft
File: l_lzn2QJyHWu4cSbtpqnQ882YRs.mft (raw, json)
Hash identifier: x1eHKX4kBrOOAoIJFrxkP3XlrAtyn96cVsVc5czpxQk=
Subject key identifier: 70:DE:36:20:49:E6:04:5A:93:0F:70:8D:75:F0:53:C8:55:1E:6C:08
Authority key identifier: 97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B
Certificate issuer: /CN=A917047F/serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B
Certificate serial: 0F0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft
Manifest number: 0F31
Signing time: Fri 12 Jun 2026 17:36:02 +0000
Manifest this update: Fri 12 Jun 2026 17:36:01 +0000
Manifest next update: Fri 19 Jun 2026 17:36:01 +0000
Files and hashes: 1: l_lzn2QJyHWu4cSbtpqnQ882YRs.crl (hash: L51QL1ZYtyqdhIgNR1EiaqbC2w7AKugcBjTqWyLHeNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl
rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3855 (0xf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917047F, serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B
Validity
Not Before: Jun 12 17:36:01 2026 GMT
Not After : Jun 19 17:36:01 2026 GMT
Subject: CN=6a2c4381-7854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:54:c6:ce:34:05:c7:f3:61:98:59:e8:1e:
e4:35:9a:05:18:0e:0a:96:05:bb:f8:18:33:7b:08:
fc:ae:da:07:fb:f1:c5:8c:be:e4:90:bb:3b:93:f0:
0b:35:21:66:88:16:ea:ed:6c:f7:d1:b5:fc:d4:be:
69:89:5b:e0:b8:4a:68:18:ec:ea:d3:3f:a9:f7:4e:
b3:bb:dd:d5:61:e8:3f:6c:e8:83:70:df:1e:fd:54:
d6:7b:50:4b:91:5f:92:11:10:27:d6:e3:a6:3f:d4:
5f:b2:7a:cd:12:3c:a2:14:d6:a4:26:cb:b3:9f:c2:
0e:79:7a:05:03:e6:32:c6:58:ca:8c:6d:e0:50:c6:
90:18:44:ca:b5:ae:8b:6a:4f:58:72:58:14:01:0e:
18:0a:55:55:4b:22:d6:95:7e:f5:c8:f5:ad:61:7a:
7e:01:27:b2:82:6c:6e:67:d5:5a:18:49:31:bd:4e:
d1:9c:c2:8d:f8:08:88:fc:f8:4a:54:04:ff:21:65:
f8:9b:0d:a4:2b:33:75:de:e9:31:d9:d1:93:7e:30:
8e:75:3b:cd:7e:d9:ef:89:66:4e:36:d1:7c:80:b0:
ee:2a:07:02:db:06:91:0e:1b:bc:f0:32:f3:21:4f:
0b:26:3f:ab:72:95:ac:2c:27:b4:08:09:be:c8:02:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:36:20:49:E6:04:5A:93:0F:70:8D:75:F0:53:C8:55:1E:6C:08
X509v3 Authority Key Identifier:
keyid:97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:c6:d2:7a:04:5f:83:cd:19:74:c3:c7:32:b6:af:bf:3d:7e:
7f:1d:e5:2a:cf:27:4e:33:88:10:17:be:c9:3a:ab:72:55:51:
3a:7c:b9:af:3d:98:8b:14:55:59:d2:3d:62:3d:61:37:d5:cb:
2e:7c:55:a2:f1:a4:55:6f:c5:7e:45:a8:55:72:a1:f6:05:df:
16:07:97:42:15:d7:5f:f4:1a:10:d8:3b:e3:ff:c8:fa:32:6c:
68:28:b0:c0:40:2e:a2:4a:0d:e4:a9:2c:af:3b:66:60:1c:19:
05:f8:6c:1c:15:61:c7:36:cb:35:d9:51:92:12:b3:e2:22:76:
08:6e:6d:cd:1b:ca:cc:63:d5:83:01:af:fc:f5:15:17:2b:73:
92:44:7d:e4:ff:de:c2:e0:58:21:16:58:fe:d0:90:03:df:3a:
d9:d5:25:0e:e4:70:cd:ea:df:8b:2c:32:05:d9:1d:9d:cf:84:
e8:ad:cf:8f:01:f4:5d:9e:21:2b:27:9f:ad:73:15:44:58:fc:
9e:64:48:05:a5:7c:a5:9e:87:48:a6:dc:28:56:9e:b4:0e:ed:
67:82:b4:e5:68:b3:ed:1a:28:62:18:34:b3:8f:53:ed:ed:68:
89:a8:cb:d1:c3:75:a4:c7:b9:59:8d:78:c7:46:cd:bc:51:11:
2f:7b:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:32 2026 by rpki-client