
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json)
Hash identifier: 2d3Obw3u+cheoYgc67li+cNmWr+0eF7iC+0wvZzTuEw=
Subject key identifier: 82:BE:97:39:1B:BD:8B:9F:8E:6B:4A:D5:D5:F0:41:2F:CF:A2:37:53
Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
Certificate issuer: /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
Certificate serial: 3576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
Manifest number: 356E
Signing time: Tue 28 Jul 2026 14:38:04 +0000
Manifest this update: Tue 28 Jul 2026 14:38:04 +0000
Manifest next update: Tue 04 Aug 2026 14:38:04 +0000
Files and hashes: 1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: NnnDiq8malnyye7+epTCfN76XZNtspXadX2cr638Mxg=)
2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: 5gb2IR3RmAQfetfMD3Cf2kp33anqtncaV+qXbOqkB4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl
rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13686 (0x3576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
Validity
Not Before: Jul 28 14:38:04 2026 GMT
Not After : Aug 4 14:38:04 2026 GMT
Subject: CN=6a68becc-3454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:22:16:32:38:6d:17:0c:1c:44:60:48:98:
5d:7a:b1:0f:48:ec:62:57:48:99:8d:4a:38:b1:c8:
93:5e:9e:a1:b0:02:9a:a2:d1:45:79:30:eb:04:dd:
4e:ea:45:48:e6:f8:93:da:a6:89:67:b8:52:4c:f0:
6c:c4:bb:33:55:e9:79:07:5c:a0:cf:04:ec:5a:c1:
b9:3c:71:e6:78:d0:c1:05:4b:79:6f:af:3a:b3:e9:
14:a0:7e:6b:87:0f:e7:ce:04:c6:59:06:82:75:f4:
62:75:69:a6:6d:e7:a7:fe:e1:7f:c2:0b:94:62:74:
21:10:3c:d3:72:a7:c0:e3:bb:6d:60:08:74:5f:37:
80:bc:ed:ed:ba:90:78:24:80:91:de:49:03:94:0f:
0b:9e:23:bc:8b:b4:77:08:ac:95:dd:d9:03:0e:5b:
e9:de:3b:ff:d0:94:70:c9:48:47:bd:28:5b:d3:8b:
a2:cd:fc:5e:8b:09:3b:da:6e:00:0c:0f:5d:7b:90:
19:cc:57:a6:c0:09:13:f6:b4:2c:2d:66:aa:a1:b2:
8a:be:78:6e:89:10:b8:25:57:a2:59:62:50:74:56:
62:33:12:a4:f0:c5:84:3d:e1:1b:25:17:b0:8f:fb:
88:5c:3a:da:57:7b:a5:47:93:ec:c1:fb:ad:a8:50:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BE:97:39:1B:BD:8B:9F:8E:6B:4A:D5:D5:F0:41:2F:CF:A2:37:53
X509v3 Authority Key Identifier:
keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:de:6d:2c:8d:05:2c:c7:c3:e1:8d:2a:0f:46:f9:59:1a:5d:
46:6d:7d:fd:90:80:24:e2:4d:fb:d3:f8:f1:a0:69:72:c2:9d:
44:44:c0:29:ca:b9:c3:b1:42:a7:0f:18:0e:f4:fa:6d:55:2d:
ac:c5:38:e0:80:c6:7a:78:f0:84:4b:ef:0d:f3:71:c2:68:5c:
7c:f2:2a:08:27:1b:03:17:77:73:50:aa:4e:ca:67:76:ae:77:
f7:51:65:c4:3b:8b:4b:0e:41:af:7c:30:2f:c8:49:e1:21:61:
c2:01:d5:e5:0b:f8:21:57:28:00:21:87:91:62:cf:d8:7a:12:
c4:c8:ba:d8:a3:6e:a0:94:22:73:87:a0:4c:86:d6:d8:fc:39:
17:61:ae:08:80:ef:e2:4c:c4:e4:2d:69:db:33:19:c8:18:b6:
6a:1e:ca:f1:b1:28:5f:ef:28:e0:87:56:ba:1f:3b:f2:3c:1c:
2b:5f:ab:57:de:f5:b0:09:04:ec:60:d4:fb:53:fa:a8:34:5e:
e5:dd:f6:fa:77:94:4d:b1:1c:b4:40:71:57:0c:bf:9b:53:c2:
c6:40:9e:ee:ff:0a:1c:fc:b9:a7:9a:6f:c6:4d:61:b5:78:5a:
b6:58:df:8f:c5:3c:0f:51:14:5c:eb:30:6e:1d:68:98:bd:e8:
36:61:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:50 2026 by rpki-client