
$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json)
Hash identifier: y6O1VHFw5L2z1tsciCbvP5UNBa7DcQ2OfW6AMEpBIqU=
Subject key identifier: 6C:FF:F6:45:EE:A4:34:48:F0:E5:63:39:F9:C3:DA:90:7D:D8:CF:D8
Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
Manifest number: 017B
Signing time: Fri 17 Apr 2026 04:20:58 +0000
Manifest this update: Fri 17 Apr 2026 04:20:57 +0000
Manifest next update: Fri 24 Apr 2026 04:20:57 +0000
Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: wHPqSG5iTL9z6YC65IO1RZOQA75/7Qq6DuM4lkPCzaA=)
2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: 1TXYVC9d69ShUmLrTVkHQDpZD/NqvSa+MWs9ze+mF20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F
Validity
Not Before: Apr 17 04:20:57 2026 GMT
Not After : Apr 24 04:20:57 2026 GMT
Subject: CN=69e1b529-b1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:78:21:60:8a:54:b4:fa:5d:5e:37:0b:3b:
c2:e9:a0:fc:4a:37:91:24:95:89:5c:5a:37:4f:e7:
8f:d9:87:9a:18:04:e7:6b:a3:66:3f:44:ed:53:ce:
fb:b7:20:9f:42:64:61:4a:f2:bb:bd:34:86:d0:37:
fe:ca:be:8d:16:e6:de:f6:d3:61:b3:97:43:57:cc:
12:8b:12:46:14:c1:b5:a0:bf:43:48:9c:9c:32:38:
6d:bc:24:25:c2:b6:76:b3:14:f7:35:76:1f:05:71:
0b:8d:71:16:3c:fe:84:eb:79:56:9f:dd:01:a0:ef:
fc:ce:0c:4c:05:7e:bb:e5:ed:5e:5a:bd:dc:9b:71:
cf:72:bf:81:d8:d9:19:26:ba:99:ff:d6:2c:fb:ae:
d1:5f:67:6c:c1:58:6f:d0:44:bb:0a:19:ef:22:0a:
ae:a2:68:b3:89:f2:82:4c:49:61:e7:39:05:10:3a:
4a:55:9b:f0:dc:2e:31:67:90:4a:b9:0c:e7:d1:f1:
51:f5:4e:82:e7:af:fb:d8:1c:88:ac:db:56:30:35:
c6:2a:e9:2a:15:ab:b3:2e:a9:d5:7d:c7:ab:ed:f2:
77:32:6c:fa:6b:89:a9:3a:72:37:f5:9b:e1:b5:cf:
69:fb:aa:42:6d:61:47:3d:c4:30:9b:13:45:19:22:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FF:F6:45:EE:A4:34:48:F0:E5:63:39:F9:C3:DA:90:7D:D8:CF:D8
X509v3 Authority Key Identifier:
keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e5:8b:a8:21:04:85:4f:28:dd:f6:e1:4f:10:27:98:e8:43:
10:94:e7:0e:1e:a0:34:41:61:1c:5c:dd:3d:b7:f4:78:b8:2e:
06:ee:3d:13:9e:61:c7:46:c5:c0:f4:b7:9f:c4:6a:c3:5f:6c:
ab:8f:fb:8a:54:06:44:e4:50:c7:f1:f9:25:a3:f7:d0:39:56:
76:10:71:74:2f:d7:00:0e:64:7e:e8:5a:70:89:e8:29:8f:ad:
b5:41:c6:6c:69:b6:05:69:e3:f5:08:6b:e6:a5:71:db:6c:62:
8d:bd:0b:86:68:6f:e4:fd:ee:67:81:32:5d:67:b0:4b:a3:4d:
97:0f:cf:74:3b:b0:83:39:55:e8:ab:3b:f3:7d:f9:82:f9:55:
71:4a:85:95:b1:63:1b:05:8f:62:b4:50:aa:1f:4d:0e:22:00:
1d:1a:e8:54:c2:d5:73:a2:a9:1f:5d:f9:f0:31:91:6a:02:b3:
11:0a:3a:74:de:56:67:43:f5:a9:0d:a1:2b:c4:1d:ce:14:14:
8e:f0:44:96:fc:81:f6:d3:b4:e7:68:d3:63:86:f2:85:55:f0:
ae:71:20:ed:1b:2d:60:44:b7:0f:bc:da:44:1f:17:53:e1:2c:
11:30:d3:9c:dc:52:e9:38:08:69:2f:24:f2:7f:a7:d0:7e:ae:
58:0b:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:50 2026 by rpki-client