
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json)
Hash identifier: k0Th3UhHU27veCp2S2J+SZNjWDKfh3aHdwUYek9BqGs=
Subject key identifier: 83:BF:74:18:58:3C:36:D0:8B:20:86:55:9D:10:91:78:09:1F:C7:F1
Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Certificate serial: 0C14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
Manifest number: 0BF2
Signing time: Fri 12 Jun 2026 18:55:16 +0000
Manifest this update: Fri 12 Jun 2026 18:55:15 +0000
Manifest next update: Fri 19 Jun 2026 18:55:15 +0000
Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: vDiAc3IdiUUKgavB1uFLPGbt5ttECBva26G6U9PwKIE=)
2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=)
3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3092 (0xc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Validity
Not Before: Jun 12 18:55:15 2026 GMT
Not After : Jun 19 18:55:15 2026 GMT
Subject: CN=6a2c5614-803c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:09:72:c6:15:4f:dc:16:b4:57:e1:35:29:
57:e1:fd:a9:0a:1a:75:8a:ef:ac:30:c4:b3:7c:a4:
14:7b:4e:80:9a:60:0f:cf:cd:7b:61:3e:8d:b2:eb:
2b:58:bc:e5:af:12:53:65:a1:39:cf:d6:1c:49:d5:
9e:45:d1:5d:40:9f:9e:4d:66:b5:0a:0c:00:b7:29:
93:8b:cb:5b:74:d0:b6:26:4a:8d:fd:eb:89:56:f6:
80:9a:f6:8f:81:2f:a5:78:76:10:e1:b1:e5:17:e9:
5f:a9:04:93:b2:b6:ab:ad:2a:fb:63:14:5c:12:ac:
c4:a0:0f:e9:6d:8f:cd:97:77:a7:f8:57:7b:e4:d2:
a1:c7:2d:f3:46:b3:86:ef:7d:25:b3:4b:44:07:a1:
a9:c6:c1:b5:98:64:7d:02:3c:ba:26:11:c8:95:c8:
ef:51:0c:e4:54:f2:a4:be:d8:06:12:c6:4b:6b:e3:
ab:77:fb:eb:4e:7e:7c:0b:ba:b7:8f:0b:40:48:98:
58:56:cc:8a:4f:10:31:b9:e8:1e:95:41:14:ba:fc:
bf:3a:e9:91:88:0b:44:9f:23:c6:87:fb:38:dd:79:
c0:1a:79:58:73:13:61:0a:2a:ec:10:f6:09:95:9b:
8b:a8:f2:40:a6:92:cd:0d:39:3d:2f:1e:06:ea:b8:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:74:18:58:3C:36:D0:8B:20:86:55:9D:10:91:78:09:1F:C7:F1
X509v3 Authority Key Identifier:
keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:21:5e:9e:f9:61:09:23:6b:a7:46:a7:74:1a:28:93:ba:e0:
db:2a:a4:72:78:2d:9b:e7:ea:68:bf:bd:67:8a:e9:d4:b2:77:
64:e6:63:b3:a4:a5:32:27:90:d1:cd:73:92:48:a9:4f:4d:48:
a8:74:6a:18:4e:29:17:d7:ff:5c:c9:4d:c7:b7:5f:18:6d:bf:
06:1a:12:51:bd:9d:69:a6:61:20:60:f9:ff:79:c1:fd:31:45:
22:92:64:73:f3:e8:8e:5c:80:10:fd:8a:fa:5c:b9:90:10:4d:
6a:11:de:d1:a7:c4:74:93:67:1d:6a:aa:72:e9:4b:11:fb:f7:
1c:dd:07:ca:ac:c4:07:f4:9f:b2:3a:d9:97:ea:aa:f6:87:a7:
c4:fb:f8:9f:3b:2a:ef:a6:02:fe:b2:f3:1b:ab:35:37:6c:ac:
d4:c9:83:6c:12:5e:e0:84:ce:f1:45:e7:c8:c5:8a:a9:c7:23:
24:61:b4:00:67:55:3d:37:15:4c:5b:e5:38:ee:95:97:db:83:
57:5b:a0:76:78:be:5a:a2:74:aa:17:b7:b2:cc:f8:43:10:2d:
8a:81:83:b9:ad:c0:27:08:8a:8d:1b:1f:59:4e:fa:52:e0:d8:
92:7e:e2:3d:f3:e2:77:51:7f:45:e6:29:23:bb:9c:0e:2c:6e:
84:37:89:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4
RUFBNUFBMTIwHhcNMjYwNjEyMTg1NTE1WhcNMjYwNjE5MTg1NTE1WjAYMRYwFAYD
VQQDEw02YTJjNTYxNC04MDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCQJcsYVT9wWtFfhNSlX4f2pChp1iu+sMMSzfKQUe06AmmAPz817YT6Nsusr
WLzlrxJTZaE5z9YcSdWeRdFdQJ+eTWa1CgwAtymTi8tbdNC2JkqN/euJVvaAmvaP
gS+leHYQ4bHlF+lfqQSTsrarrSr7YxRcEqzEoA/pbY/Nl3en+Fd75NKhxy3zRrOG
730ls0tEB6GpxsG1mGR9Ajy6JhHIlcjvUQzkVPKkvtgGEsZLa+Ord/vrTn58C7q3
jwtASJhYVsyKTxAxuegelUEUuvy/OumRiAtEnyPGh/s43XnAGnlYcxNhCirsEPYJ
lZuLqPJAppLNDTk9Lx4G6ritAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIO/dBhY
PDbQiyCGVZ0QkXgJH8fxMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE
QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04
aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABCFenvlhCSNrp0andBook7rg2yqkcngtm+fqaL+9Z4rp1LJ3ZOZjs6SlMieQ
0c1zkkipT01IqHRqGE4pF9f/XMlNx7dfGG2/BhoSUb2daaZhIGD5/3nB/TFFIpJk
c/PojlyAEP2K+ly5kBBNahHe0afEdJNnHWqqculLEfv3HN0HyqzEB/SfsjrZl+qq
9oenxPv4nzsq76YC/rLzG6s1N2ys1MmDbBJe4ITO8UXnyMWKqccjJGG0AGdVPTcV
TFvlOO6Vl9uDV1ugdni+WqJ0qhe3ssz4QxAtioGDua3AJwiKjRsfWU76UuDYkn7i
PfPid1F/ReYpI7ucDixuhDeJJA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:43 2026 by rpki-client