
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
File: Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json)
Hash identifier: mMrRoe6Ub2ujn0OccBQSY4PTv+BEI/BMB3ETKLZul0g=
Subject key identifier: 3E:23:C1:1B:5C:80:F6:1C:1F:B3:3B:08:E2:01:92:0C:61:CB:C7:52
Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
Certificate issuer: /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
Manifest number: 01BA
Signing time: Sat 13 Jun 2026 04:12:07 +0000
Manifest this update: Sat 13 Jun 2026 04:12:07 +0000
Manifest next update: Sat 20 Jun 2026 04:12:07 +0000
Files and hashes: 1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: 4G3h3vxp6Xv/eIVbpDLuuOpB6LyKQsMAiSD0wv3YKlY=)
2: BA6555344DEE11F0B209371DC4F9AE02.roa (hash: 3ACPZlFXJEBS0DfhOh+fI+mz2WtH3cLyLDO6b8JhniE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Validity
Not Before: Jun 13 04:12:07 2026 GMT
Not After : Jun 20 04:12:07 2026 GMT
Subject: CN=6a2cd897-35dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:b2:59:65:ee:cc:51:11:6b:72:3b:66:6b:
06:af:49:c4:ca:57:99:66:db:ee:d5:ee:ba:d0:9a:
5b:1d:32:ba:59:47:2e:77:7e:c9:66:b7:be:67:13:
57:09:39:ea:07:de:06:04:02:de:8d:65:76:f8:82:
2a:d7:03:d8:23:c0:7d:99:4e:fc:73:e2:ac:e4:31:
4f:fa:e7:93:9d:0f:a4:61:7e:5e:e4:8d:a0:67:8c:
ab:48:77:59:63:f4:40:34:81:f3:7d:8a:d7:d7:bb:
22:2a:d4:82:7d:0a:15:0a:82:14:86:15:f5:aa:98:
fb:f5:93:61:45:f6:44:47:89:eb:e7:6b:90:81:79:
5c:a9:bd:34:f0:e9:fa:51:d4:48:16:b8:7e:99:e3:
2f:c5:ad:22:a0:ba:f2:e1:3e:21:99:3e:a7:ec:3c:
83:a3:28:b1:32:c4:0c:b3:9b:23:f1:2f:0f:6b:28:
fe:fd:47:71:8c:77:bb:4f:14:85:1e:a5:49:5d:f2:
e8:1d:69:02:de:87:84:fa:9f:23:68:0f:74:14:33:
72:db:a2:f1:bc:54:b4:c1:55:e9:73:48:84:68:6c:
3a:78:1f:7e:20:4e:33:05:7c:7e:33:0a:be:3e:81:
17:6c:9c:26:ea:f9:0e:47:88:4d:6f:32:1d:95:86:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:23:C1:1B:5C:80:F6:1C:1F:B3:3B:08:E2:01:92:0C:61:CB:C7:52
X509v3 Authority Key Identifier:
keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1d:d0:77:53:25:23:13:f4:a0:51:32:d9:fe:a2:10:4e:13:
d2:0e:94:7d:a5:a5:4c:cb:5e:74:08:59:9b:c6:47:af:2a:51:
e6:cb:de:06:52:8c:bb:c5:aa:63:ac:ff:ab:21:99:94:1b:3f:
70:63:33:7e:0e:1b:7f:f2:3c:b3:1e:c1:c6:13:7c:0a:27:dc:
db:05:1d:61:c8:48:44:f9:3a:4e:f6:fc:e2:28:a0:1b:85:5b:
e0:6c:ed:78:a2:88:af:eb:ed:bb:54:0c:26:fd:ec:9c:47:ca:
53:25:b4:48:41:54:67:14:c6:69:87:dc:35:5a:4e:e6:7a:31:
d4:e4:79:cf:fc:e7:a3:66:2a:66:c5:83:b8:17:0d:d7:74:02:
fb:0b:28:d3:7d:2e:6c:20:9c:60:26:3f:bc:15:ec:fd:6e:81:
50:93:36:3a:45:3b:d8:79:c5:b3:0d:7a:c9:c1:15:d4:79:19:
6c:58:0c:26:b5:aa:6b:d9:d1:ef:26:a3:a3:a9:4a:f5:c5:b9:
a5:6a:15:c5:4f:07:85:fb:b8:aa:b5:4a:ac:22:20:4c:2a:0d:
64:7c:4a:4d:79:fd:3c:51:43:3e:e0:6b:dc:0c:be:16:84:03:
b9:1e:ab:6e:9b:a6:31:b5:56:78:4d:05:44:ba:aa:7f:f2:9a:
c7:ac:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:57 2026 by rpki-client