
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json)
Hash identifier: eTev/8TE8v5acsUvyGCUqJg8AY4yXLzzg27y7wtGf1M=
Subject key identifier: E4:50:58:7A:91:A6:EA:5B:16:BC:B5:8F:BA:E7:47:95:30:EF:3A:11
Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Certificate serial: 2217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
Manifest number: 2210
Signing time: Sat 10 Oct 2026 15:53:00 +0000
Manifest this update: Sat 10 Oct 2026 15:52:59 +0000
Manifest next update: Sat 17 Oct 2026 15:52:59 +0000
Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: 9QuTtpTY11ZuA78djvkjNlYq9vXlbvlXMPMe9Cmv0Cs=)
2: 3607DBA8687E11F1B56F8D616747A888.roa (hash: WO/scCKxLdc7YDN982DAvWLVxjSTIhP/jPPfp19RJno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8727 (0x2217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Validity
Not Before: Oct 10 15:52:59 2026 GMT
Not After : Oct 17 15:52:59 2026 GMT
Subject: CN=6aca5f5b-d61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:2a:93:66:cc:e7:20:32:38:ef:66:dc:64:
7d:f8:2f:ab:b3:48:f4:75:02:d1:e8:2b:92:f4:ff:
63:3a:1b:0a:90:ce:3c:44:16:91:a2:da:28:97:b1:
b0:b6:e2:9a:5e:c6:60:1b:0c:be:1f:9f:00:e5:00:
4e:8e:1d:6c:89:35:ce:e7:ed:00:66:1c:a7:ed:90:
6b:8d:42:2d:fc:9d:cd:76:34:1c:08:dc:b0:15:8e:
a1:6c:b7:25:ab:b6:51:c7:52:a9:b2:45:8a:84:62:
a5:1e:87:dd:e5:42:0b:fc:48:8e:37:a6:76:75:e9:
38:76:85:34:07:0b:95:ce:2a:19:c5:83:5a:7a:dd:
65:74:b6:35:88:fd:b6:38:ef:16:3c:57:19:b0:87:
4e:d5:69:59:e1:ae:f2:1d:c1:17:61:58:89:56:18:
3d:fb:c0:79:29:c1:8c:43:98:b2:0d:a7:52:95:44:
75:5e:96:06:94:03:89:0e:e3:d9:dc:10:e1:24:52:
b7:12:d2:91:e2:f9:c4:fc:60:b7:bf:44:47:98:32:
ae:26:30:83:f7:d8:31:10:e0:70:26:aa:7f:6d:99:
8d:a5:c0:d9:e3:d4:9d:1f:3c:56:4a:6e:46:65:70:
1a:67:78:fe:13:39:56:1a:47:d7:e7:e0:02:a2:c0:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:50:58:7A:91:A6:EA:5B:16:BC:B5:8F:BA:E7:47:95:30:EF:3A:11
X509v3 Authority Key Identifier:
keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:be:6c:0c:0b:36:dc:6f:11:5f:66:5c:f3:aa:c5:d7:c3:bc:
ab:c2:69:2f:23:b4:f4:ff:a5:90:2b:d7:29:ea:01:16:0c:84:
76:96:bd:dd:00:a4:7d:8f:7c:1c:8d:5b:c2:d6:81:a5:e6:db:
a4:44:0a:86:95:96:c3:22:06:0d:b0:ec:8c:93:39:3a:5b:a6:
ba:b4:52:7c:a1:2f:a1:7e:8e:1c:eb:3b:f1:a5:53:6f:54:3c:
5e:04:bd:a9:63:7f:61:9f:63:e9:b2:26:9a:ba:ab:1d:7d:4a:
da:07:4d:f4:9e:27:97:22:d1:26:57:0e:a6:0b:31:d2:fb:fd:
2d:8e:91:56:17:5f:37:9d:97:32:6b:a3:ad:22:ff:5c:93:19:
fc:9d:87:59:d2:bf:78:b9:5e:dc:e9:91:65:59:b5:62:48:d7:
ab:14:cc:99:f7:30:34:d6:8c:63:9a:ea:56:b1:f8:cd:4a:93:
e9:af:6a:f7:3c:c2:80:89:31:48:26:df:6d:7f:69:ba:a7:ba:
cd:6b:a9:7e:bc:5a:67:a7:87:a7:b0:03:c6:89:61:40:1d:6b:
c4:fc:1d:6f:a3:be:ff:fe:cb:65:e4:9b:15:41:03:33:23:67:
af:a8:f4:74:29:19:b9:96:bc:fb:94:23:a8:82:49:b8:93:23:
58:c1:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:58:53 2026 by rpki-client