
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json)
Hash identifier: vEaM2Ok5RajQ7+WAHDY/MUHrgomOUHMLNAI/70r8F4g=
Subject key identifier: 76:7E:F4:F4:25:FC:4C:6B:2C:D7:AA:F7:CE:9E:7A:17:6D:EA:06:31
Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Certificate serial: 0CF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
Manifest number: 0CE7
Signing time: Tue 28 Jul 2026 18:34:19 +0000
Manifest this update: Tue 28 Jul 2026 18:34:19 +0000
Manifest next update: Tue 04 Aug 2026 18:34:19 +0000
Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: hbwE8pGvo4zKKmJBG+bH0RAuE0XEXjmMH5I240q4KRo=)
2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: xD5ELxyj4bWF9z+q/0VL9OifUcgzca/SexnDM+WQXMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3313 (0xcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Validity
Not Before: Jul 28 18:34:19 2026 GMT
Not After : Aug 4 18:34:19 2026 GMT
Subject: CN=6a68f62b-04c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:a2:03:1c:b4:97:7e:5c:0a:c6:66:47:e3:
fa:50:8d:65:d0:fc:9b:a0:c5:de:6e:e0:fc:ea:58:
ff:9e:04:43:7e:5d:63:64:a1:fa:5e:eb:24:0d:b7:
25:a2:27:ae:26:76:a5:48:0c:89:d6:16:54:8d:a7:
68:b3:de:78:f5:2a:bb:90:70:0d:26:46:b3:f4:b5:
31:ef:70:e3:16:f8:fe:a7:20:89:bd:b1:04:04:d0:
04:1b:c0:cd:cc:f3:c4:9d:49:e9:7b:1f:43:a7:0b:
e1:40:56:98:09:70:75:15:b4:db:ba:02:b6:69:d7:
02:e6:29:0c:6c:0e:83:87:da:0c:d3:eb:26:6b:fa:
6c:0c:4e:7d:95:12:25:1f:48:fa:3d:b4:92:53:f3:
18:d0:59:8f:93:50:e0:c2:46:44:fc:ec:ee:b5:72:
42:cc:35:19:bc:29:c6:14:9d:ee:06:2a:8f:d3:72:
e6:63:2c:dd:51:6a:c6:04:6c:d7:17:0c:b2:1d:d8:
b9:3a:43:ce:34:c4:26:10:59:43:d3:93:df:9e:28:
67:fe:49:80:27:8c:4b:8b:ed:71:53:b9:8e:36:81:
ec:73:ea:37:5a:47:84:71:e1:2d:46:ac:0d:90:f2:
e1:f8:89:f5:d3:e7:b6:88:e2:88:2c:ec:44:b7:71:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7E:F4:F4:25:FC:4C:6B:2C:D7:AA:F7:CE:9E:7A:17:6D:EA:06:31
X509v3 Authority Key Identifier:
keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a4:5b:f9:c8:de:1a:1c:f4:b7:f8:a9:de:2e:e7:d6:b6:e5:
13:48:e4:6c:9d:1e:04:d5:11:f0:e1:21:2a:f0:84:49:77:aa:
d5:a3:b8:ff:f5:f4:36:e3:48:a8:c8:9e:de:12:9f:91:11:f1:
66:05:19:98:f0:15:7b:8d:ff:a7:df:fc:92:42:36:82:fd:24:
dd:2a:13:55:08:d4:72:00:3a:d4:d2:a9:37:3f:09:a8:51:11:
e4:ea:94:f2:0d:0c:d4:17:c6:d6:eb:3e:2a:0c:53:c5:47:c8:
c6:26:77:6c:16:d9:8d:e2:ab:77:ad:52:74:c3:35:d1:74:07:
2e:de:07:80:73:a8:91:44:6c:47:db:f1:40:93:d2:71:5a:3a:
79:1e:56:16:0d:9d:2e:70:08:71:e9:fd:ba:44:de:ad:d1:6c:
5e:86:63:92:70:02:3f:18:ac:76:ac:77:6a:9c:03:fa:d6:a4:
c2:9a:3f:4c:95:4f:68:93:b5:06:fb:5b:73:ed:9a:e0:a8:79:
a1:41:c5:48:5f:0e:ba:d9:fa:f5:2b:e1:63:a0:5a:78:73:74:
a5:5e:28:9d:ee:29:0a:9d:98:dd:a5:eb:a2:60:72:16:1a:50:
12:d0:95:a5:cc:0a:b6:c3:9b:61:45:d6:be:44:59:aa:ee:93:
55:29:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:52 2026 by rpki-client