
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json)
Hash identifier: fzPJrAYrLIoi9ZIE2lwI5M4BrjmkpWmithOHhjshw5A=
Subject key identifier: 5A:FC:B8:68:3B:03:1D:40:F4:0B:23:24:D5:74:7D:80:D2:51:65:63
Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Certificate serial: 0CBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
Manifest number: 0CB3
Signing time: Thu 16 Apr 2026 18:23:32 +0000
Manifest this update: Thu 16 Apr 2026 18:23:31 +0000
Manifest next update: Thu 23 Apr 2026 18:23:31 +0000
Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: Qf1ZQDKNIvugNaOE7I+ilpAdb460LYkG8TZ7L59r6/8=)
2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: xD5ELxyj4bWF9z+q/0VL9OifUcgzca/SexnDM+WQXMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Validity
Not Before: Apr 16 18:23:31 2026 GMT
Not After : Apr 23 18:23:31 2026 GMT
Subject: CN=69e12923-a62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:81:56:84:f9:3d:f2:45:2b:c8:70:fc:5f:
be:a0:0a:97:46:d2:fe:20:c3:3a:e4:0d:27:26:66:
37:41:ff:96:53:63:ee:15:63:f3:12:df:88:fc:de:
67:6b:21:df:fd:20:b3:44:c6:4b:43:66:31:43:96:
c1:81:c5:be:b2:db:89:90:34:60:62:8c:c7:03:62:
22:13:4f:c5:7e:70:33:73:e7:b0:cc:84:bb:c1:25:
24:e4:28:a0:9c:e5:09:f8:e7:dd:83:2d:5d:1a:36:
1e:57:bd:f8:fc:05:60:4e:08:98:b5:e6:a5:49:1d:
fa:9c:3f:94:26:70:cd:cb:a7:62:75:7d:cc:db:cc:
9c:45:a5:7a:b7:fc:07:a5:fe:e3:f8:eb:32:91:40:
6f:61:b7:af:8a:43:31:b6:ef:9e:50:a7:5b:2c:cd:
c6:ec:3c:64:93:65:60:5f:ec:5d:7d:97:21:ac:8d:
bc:8c:0e:8f:7f:cf:db:25:99:d7:12:20:cc:85:43:
6d:04:dd:62:2a:38:dd:83:df:db:05:7e:d4:d2:78:
00:23:6b:8c:10:4a:ae:f2:ae:47:d1:7d:78:4a:5c:
53:3e:c1:7a:ac:fe:4c:90:f8:6e:51:26:cc:ba:40:
17:35:78:41:fe:70:bf:a2:87:8a:c8:3f:5d:2a:d3:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FC:B8:68:3B:03:1D:40:F4:0B:23:24:D5:74:7D:80:D2:51:65:63
X509v3 Authority Key Identifier:
keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:83:b5:27:80:00:cb:44:52:0e:93:93:1c:bb:45:d4:b1:42:
69:ea:ca:d8:60:b3:a1:b2:b1:6d:d0:6b:5a:a0:c3:7d:c9:c4:
e5:87:55:8d:52:43:2b:53:09:04:ba:02:ad:96:06:60:99:af:
89:1f:e7:3d:68:f2:89:97:c3:cc:85:41:70:01:c0:2c:44:c2:
ce:90:dd:c7:3e:b1:bd:5a:bd:92:ff:6f:eb:d0:73:91:04:96:
d4:e6:d6:03:fa:58:a6:85:fb:93:24:40:95:aa:ba:5f:61:d9:
a1:da:4a:12:fb:ad:5c:82:fd:e7:77:90:6d:7a:60:a6:08:1c:
39:d8:9e:cf:c3:b1:7b:91:e1:8c:25:34:0b:be:aa:91:7d:b5:
e4:9a:8c:dc:c7:1b:a3:09:a4:fd:d2:53:4e:27:9b:9b:af:15:
de:ed:74:ca:ac:cf:a2:19:44:cb:ce:c6:eb:65:53:82:73:46:
66:47:10:0d:ce:94:41:a6:2d:e0:5f:30:29:1b:ce:ed:5e:53:
1e:ff:a5:c8:f5:99:e6:33:17:1b:85:e1:28:78:4a:d8:77:92:
b3:77:e5:b5:75:e3:2a:86:87:e7:2e:6c:1c:00:d1:e3:d3:df:
44:9f:f2:8f:7d:cc:d7:9a:a1:d6:e7:0f:2f:35:02:48:5e:40:
0f:4c:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:15 2026 by rpki-client