
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json)
Hash identifier: UxpXhXpcnvCTttegz+zeG42FZzDk97+DILEvKyPrCyY=
Subject key identifier: 7F:E8:A7:47:71:01:D6:E2:5B:21:0C:DA:D2:45:17:B8:C7:D2:68:64
Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Certificate serial: 1F4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
Manifest number: 1F38
Signing time: Fri 12 Jun 2026 15:59:09 +0000
Manifest this update: Fri 12 Jun 2026 15:59:09 +0000
Manifest next update: Fri 19 Jun 2026 15:59:09 +0000
Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: WXO+jNfMGTz6dZdzT8AK4ts8qJmW9A1ATgAQ9QG+nlk=)
2: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: rr7iOLl9TUyzkrsjzgFR/+q8JCXOgUaSGUX032fYyyE=)
3: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: xI4eUzx+xF9lkRKKMTUZaqkPy0rPqkMnNWhaAR/1Rn0=)
4: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: 3MKooCBU61wIsuGXSmqPXw064htJ8PtkFCtnxTlqkOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8014 (0x1f4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Validity
Not Before: Jun 12 15:59:09 2026 GMT
Not After : Jun 19 15:59:09 2026 GMT
Subject: CN=6a2c2ccd-4717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:4a:79:ce:77:f8:4e:e5:58:5c:80:7f:a4:
eb:79:34:02:d6:f1:ea:03:53:4f:86:f6:d6:6c:48:
61:0d:28:e8:43:bf:34:b1:4a:d3:93:6e:7b:03:7d:
3c:5a:3a:27:89:85:0a:cd:ee:f9:37:32:65:7c:f4:
b5:f5:f0:10:57:d4:2e:60:39:f3:69:d9:78:ba:54:
a2:9e:de:bb:ec:e5:cd:bc:77:c9:66:b9:28:21:a3:
aa:a2:3d:07:5d:27:7c:b6:5c:c8:69:41:e4:43:bc:
5e:5c:ee:56:51:87:90:36:89:1f:c4:82:85:09:58:
3b:66:84:83:56:19:1f:f8:35:c6:26:e6:93:7a:d7:
62:f1:20:62:17:59:a1:49:66:c3:a6:e4:00:bd:e1:
5f:82:8d:44:ec:25:b5:1e:12:20:4e:34:9a:89:e5:
77:4b:7c:f9:1c:4c:a8:39:6b:be:72:61:25:2b:d4:
cf:1d:59:0f:89:18:88:29:80:d3:e0:3e:94:09:5a:
e6:3c:dc:d3:86:13:ce:2c:1e:04:41:29:2a:83:71:
0d:8b:40:85:d2:a8:59:35:ed:19:50:57:28:28:88:
b7:31:84:e7:21:d9:a9:ec:66:ed:0c:8f:d2:d7:02:
f5:0d:ee:9f:d7:24:0a:22:51:eb:52:db:4e:21:a9:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:A7:47:71:01:D6:E2:5B:21:0C:DA:D2:45:17:B8:C7:D2:68:64
X509v3 Authority Key Identifier:
keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:c3:b1:1e:08:fc:d4:dc:c9:d2:d4:42:c2:2a:ce:0c:f3:e4:
a0:9d:f6:88:96:de:d6:34:c3:d5:8c:27:1c:55:a4:1e:dd:88:
8f:be:3b:c1:80:bd:d2:d8:bb:0b:bc:e3:70:23:94:40:ab:de:
75:1c:c4:f1:7b:51:f6:77:49:e4:98:7b:a5:91:7e:70:fe:79:
4a:87:14:c6:b6:8c:b1:07:da:1c:95:6d:fb:06:bc:19:9f:27:
b8:bd:11:7f:9c:63:94:a6:87:ed:ba:f2:1c:f2:af:d4:b4:1f:
4c:9f:3e:46:80:04:91:1f:50:bb:dc:a2:24:cd:fe:64:6d:a9:
60:f0:b3:00:25:59:e0:6e:ea:04:9a:45:2f:67:93:8b:f0:d9:
a3:9c:7a:2d:68:4c:2d:0b:92:45:ba:cc:b1:70:bc:d3:7c:80:
31:11:6b:89:e7:9f:44:b9:ea:46:f5:4b:a7:f0:f0:b9:5f:9f:
f3:a7:d2:a3:61:a2:08:3a:9b:70:12:ee:cd:ad:90:99:f2:a9:
b8:6d:91:2b:bd:72:d5:9d:ff:43:69:5a:d1:39:9a:f8:aa:3b:
e7:23:ae:60:eb:25:30:c8:cb:61:7b:ff:9f:c9:5e:9a:11:cb:
a3:7e:06:8c:5b:4a:92:d4:a6:94:dd:b8:8e:a0:8d:fd:e9:fb:
9f:22:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:45 2026 by rpki-client