
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json)
Hash identifier: 0mHq/SGUDhFbcRW4kBHCjKP01yNXdXrROAPE0Ieg1zc=
Subject key identifier: 26:22:08:EA:04:8E:B7:FD:C7:7B:5A:F1:D7:1B:D0:A4:23:67:D4:5C
Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69
Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
Certificate serial: 08CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
Manifest number: 08BE
Signing time: Fri 12 Jun 2026 20:31:03 +0000
Manifest this update: Fri 12 Jun 2026 20:31:02 +0000
Manifest next update: Fri 19 Jun 2026 20:31:02 +0000
Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: iX/5naWu2k8GGCvCftJGoJH9ROlfHiDv5EX3y9DpoBo=)
2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: edMpAdsKCKk/U5YKtWRInEEpB1MnGnib+hFAYPoQeoE=)
3: FB53E88A2D9F11F19981FFD49F833773.roa (hash: ZAdRDtRumQ9iSxMpncdOyULKYgh8Rn2K/EDmIVrB3X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl
rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255 (0x8cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
Validity
Not Before: Jun 12 20:31:02 2026 GMT
Not After : Jun 19 20:31:02 2026 GMT
Subject: CN=6a2c6c87-9387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:94:0b:bd:cf:2f:b9:7f:0a:d1:60:d2:fe:
62:38:5e:29:cb:eb:1d:65:95:0f:86:7b:32:ac:f1:
96:6a:64:bf:9c:78:25:89:ee:28:05:eb:c1:2f:23:
95:67:d3:9e:a7:3c:64:a7:a2:29:ae:99:a5:6b:80:
d8:86:e0:30:2a:01:64:07:ff:55:e6:94:5c:18:48:
ef:6c:43:d1:5a:6c:4f:4a:e6:fd:ec:c1:59:0d:0f:
c2:e7:04:19:ef:f8:d2:34:a0:2a:66:7b:d9:08:dc:
2d:13:82:52:d3:ca:1b:f9:36:b3:08:fb:ed:aa:b6:
e4:14:ab:f3:f4:62:3f:29:1c:cd:ce:23:a8:e7:52:
ea:af:70:bb:5c:d5:cc:28:2d:df:13:35:35:7c:fc:
d5:32:d8:65:be:40:16:5b:f8:5d:be:f1:7d:b9:c3:
b3:a5:b1:9f:e0:fd:4f:f8:3c:45:a5:13:2d:d5:6d:
57:52:96:e5:22:e2:42:35:f3:cd:30:f0:e2:e5:97:
34:75:7c:76:a5:72:aa:e3:01:63:36:f7:32:90:18:
3e:2a:c2:d7:77:5e:c5:c6:d0:5e:c5:c0:a4:c3:09:
ac:5a:86:19:6c:43:e7:2f:84:ab:b8:eb:de:78:4e:
69:11:69:40:4d:ee:9e:49:c4:f9:38:7c:73:a2:05:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:08:EA:04:8E:B7:FD:C7:7B:5A:F1:D7:1B:D0:A4:23:67:D4:5C
X509v3 Authority Key Identifier:
keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:69:09:09:dc:20:a7:13:d6:3e:c6:bf:7f:67:b4:91:c4:a8:
72:cc:cc:df:62:b0:b4:1c:9a:47:73:3a:b5:84:8f:a9:21:39:
83:d0:bf:dc:95:49:53:19:30:76:c0:3e:2f:38:75:69:47:e5:
42:a8:8b:0d:ef:d5:e0:79:31:94:54:01:23:28:ad:9f:8e:65:
b4:8f:b4:d5:f5:78:a4:90:23:64:ba:96:7a:2a:37:e5:6c:97:
0a:c0:7e:0e:f8:e0:d4:7d:d4:ed:d6:f6:be:0d:ed:95:4f:3f:
45:0a:0f:dc:eb:5b:5f:d7:44:56:71:a7:57:97:ef:36:38:c2:
7d:6d:4b:a0:bd:da:4a:a4:ed:8c:b3:90:e1:8e:6d:0f:5c:5e:
29:63:74:4c:7a:0c:c5:4c:33:a7:52:8e:91:4e:ca:7b:04:ef:
d1:a1:cb:b8:f2:93:c6:97:22:3b:41:b9:35:fa:65:84:72:5e:
b3:74:68:ac:86:cd:fd:fc:f0:ac:82:53:c9:f7:7f:91:e8:84:
21:95:43:b5:6f:81:fc:d2:02:08:5c:a3:e7:28:f7:ad:af:e3:
be:be:1b:60:23:36:06:48:a9:80:1c:d0:88:4a:b0:36:e9:15:
7a:74:e1:f4:7a:c1:5c:fe:93:bc:df:68:c3:7b:74:3f:31:de:
6f:41:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:36 2026 by rpki-client