
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json)
Hash identifier: KIhBGjyE6pkX00rhJPIgX6cys2j0K9QOkCpU4oCq0Fc=
Subject key identifier: E6:FB:68:2C:DA:43:9E:5D:2D:0B:56:0A:74:89:54:59:B9:26:4D:7F
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial: 0C2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
Manifest number: 0C0B
Signing time: Fri 12 Jun 2026 18:52:32 +0000
Manifest this update: Fri 12 Jun 2026 18:52:31 +0000
Manifest next update: Fri 19 Jun 2026 18:52:31 +0000
Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: +sQPRPXNobUE6GKQV+oWLepf0C/QZLOa2yDl2veflpI=)
2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: ZdWgxsTDmp2SCgpKV/pUzjdMnUTtasFIwHsMjvPLzoQ=)
3: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kq7sx+cXw+m9S0qiyAa+VcKr/WKvuChbXwIbeJRy3rg=)
4: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: qP73CAez9BA/Kxf0LXcrxOa4cBuTk6ek4TGHHpeWEII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3115 (0xc2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Validity
Not Before: Jun 12 18:52:31 2026 GMT
Not After : Jun 19 18:52:31 2026 GMT
Subject: CN=6a2c5570-1c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:36:ce:87:4b:9e:6f:6d:75:88:65:c3:4b:
6d:f4:7c:ac:c2:aa:3f:43:1e:8f:35:0d:20:19:ea:
74:cb:a5:44:e7:43:c5:4c:bb:fd:4e:45:fd:94:a3:
1e:60:cf:d2:5c:29:aa:c2:59:4c:d5:13:9d:0b:db:
98:9e:9d:b6:ec:93:45:ce:54:ba:75:da:0b:f1:7b:
f5:ed:16:5e:34:56:b5:76:f9:b0:d3:cc:50:99:db:
c2:be:37:87:f3:f1:aa:79:a8:20:76:5f:b6:27:45:
af:11:c9:e9:aa:10:90:03:8f:8a:24:38:1d:2f:4d:
3c:66:0c:46:1a:ee:c9:12:e2:52:eb:e8:13:a4:a6:
ff:50:78:e3:6e:4a:ad:bf:9a:13:e8:26:f9:7c:36:
40:7f:e2:52:f8:0c:3e:0d:cb:21:19:01:79:8f:26:
cc:36:bb:9f:46:bc:99:be:af:4c:69:54:56:1c:9d:
7b:4c:41:f3:4e:25:80:54:7a:f4:d5:09:c2:1f:63:
d1:40:93:29:52:34:e2:a1:9d:7e:22:93:68:41:84:
74:e5:48:0a:6a:75:cc:b5:41:84:f6:8f:fe:af:af:
15:8e:9a:15:5a:6d:cd:de:d9:e4:44:2b:f0:d6:24:
f5:43:45:ed:80:8a:b0:9d:c4:9f:7c:c4:d1:0b:15:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FB:68:2C:DA:43:9E:5D:2D:0B:56:0A:74:89:54:59:B9:26:4D:7F
X509v3 Authority Key Identifier:
keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:91:9e:71:27:90:5d:bc:f9:2d:f2:8e:32:47:e2:9b:aa:96:
56:bc:2b:53:d0:b0:01:bc:14:b4:9f:4a:3d:df:1b:24:44:c6:
16:35:72:dc:f4:b3:4a:ea:eb:44:86:e2:0f:93:18:45:3c:59:
4c:2c:2b:bd:57:7c:80:93:f5:55:e4:42:e8:c8:30:06:dd:c5:
42:57:28:ad:de:ff:ff:f6:81:4e:cc:10:18:9b:d7:94:02:1a:
85:83:4f:5a:94:24:50:09:48:94:21:bc:02:fd:ef:86:ef:3c:
f9:83:8c:1f:c9:4c:e5:ca:2c:70:e2:36:c5:ca:78:f4:f9:1e:
63:6c:ac:94:6d:23:0f:b7:1e:be:0a:15:1d:36:e3:e7:37:ef:
73:f7:76:a6:3d:5c:3a:e1:11:db:2d:ee:05:52:29:8c:de:bb:
29:d5:e9:af:8c:c5:c1:14:20:50:7b:68:bd:47:84:0b:d1:c0:
14:15:b9:fd:03:5f:da:5d:f7:c9:86:f3:db:94:85:12:bf:c8:
79:65:2f:8b:48:3c:92:de:76:b1:00:e4:f1:3f:11:27:c6:7d:
04:e4:01:04:1e:bb:17:67:bb:4e:22:20:b5:31:0a:ff:7b:2c:
70:b6:00:40:57:84:31:1d:6c:f1:6f:00:e3:27:4a:61:b8:69:
a7:60:ba:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB
RkI1RTJCQjIwHhcNMjYwNjEyMTg1MjMxWhcNMjYwNjE5MTg1MjMxWjAYMRYwFAYD
VQQDEw02YTJjNTU3MC0xYzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuU02zodLnm9tdYhlw0tt9Hyswqo/Qx6PNQ0gGep0y6VE50PFTLv9TkX9lKMe
YM/SXCmqwllM1ROdC9uYnp227JNFzlS6ddoL8Xv17RZeNFa1dvmw08xQmdvCvjeH
8/Gqeaggdl+2J0WvEcnpqhCQA4+KJDgdL008ZgxGGu7JEuJS6+gTpKb/UHjjbkqt
v5oT6Cb5fDZAf+JS+Aw+DcshGQF5jybMNrufRryZvq9MaVRWHJ17TEHzTiWAVHr0
1QnCH2PRQJMpUjTioZ1+IpNoQYR05UgKanXMtUGE9o/+r68VjpoVWm3N3tnkRCvw
1iT1Q0XtgIqwncSffMTRCxUMJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOb7aCza
Q55dLQtWCnSJVFm5Jk1/MB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4
NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94
UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOpGecSeQXbz5LfKOMkfim6qWVrwrU9CwAbwUtJ9KPd8bJETGFjVy3PSzSurr
RIbiD5MYRTxZTCwrvVd8gJP1VeRC6MgwBt3FQlcord7///aBTswQGJvXlAIahYNP
WpQkUAlIlCG8Av3vhu88+YOMH8lM5coscOI2xcp49PkeY2yslG0jD7cevgoVHTbj
5zfvc/d2pj1cOuER2y3uBVIpjN67KdXpr4zFwRQgUHtovUeEC9HAFBW5/QNf2l33
yYbz25SFEr/IeWUvi0g8kt52sQDk8T8RJ8Z9BOQBBB67F2e7TiIgtTEK/3sscLYA
QFeEMR1s8W8A4ydKYbhpp2C62Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:51 2026 by rpki-client