
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
File: LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json)
Hash identifier: lJFuVEKPYwWXRwm93ABe4qumkWzlo6hw4OgLT+vK29A=
Subject key identifier: AC:2A:FD:43:99:DD:47:85:FE:02:C5:37:11:0C:3B:6C:B4:88:DA:16
Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
Certificate issuer: /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Certificate serial: 06DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
Manifest number: 06D4
Signing time: Tue 24 Mar 2026 21:55:32 +0000
Manifest this update: Tue 24 Mar 2026 21:55:31 +0000
Manifest next update: Tue 31 Mar 2026 21:55:31 +0000
Files and hashes: 1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: rER0fF77wXowSCrLu5oR6caKZTlr8k/dau0LAEtW+O8=)
2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: tz6664R/comnZU1y14OEFWCXuldROHEDSvkbzU90rPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Validity
Not Before: Mar 24 21:55:31 2026 GMT
Not After : Mar 31 21:55:31 2026 GMT
Subject: CN=69c30854-0b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:78:6c:f1:47:a0:38:9f:0a:67:81:bd:bd:fc:
da:b6:2b:09:fe:d7:c4:ae:27:a8:05:10:8f:19:75:
c4:00:fc:dd:d9:fe:a2:d8:84:c9:38:d6:c1:e7:7b:
ec:7f:11:07:22:d3:1a:b9:83:79:b8:21:d9:85:08:
c4:64:6f:56:9b:05:48:8d:af:54:13:82:f5:a0:cf:
b7:7d:c2:10:67:72:59:e0:1c:e5:18:3f:a5:0a:f1:
59:28:b8:6d:92:75:b9:6c:c6:2a:85:05:fa:f7:16:
8f:d8:df:c0:11:2f:90:0e:57:15:6a:db:47:48:58:
2b:ba:09:d3:f9:a4:c0:c8:5c:19:7a:8a:c6:ae:4e:
1b:c9:30:ea:fb:b8:63:0a:64:f8:2e:eb:5f:ce:67:
2b:c0:87:32:93:79:b5:b6:60:24:87:3c:b6:e0:2c:
29:c4:42:c4:ec:a1:6f:93:52:29:66:20:6e:ca:0b:
13:d7:59:89:a5:11:a9:72:0f:06:4b:4b:63:6c:d5:
09:86:3a:0a:df:15:4c:35:d9:78:26:a1:2d:f4:82:
a5:ae:45:2c:9d:69:02:d3:8d:00:5b:ca:f5:0e:da:
74:95:fc:b6:dd:ff:fb:88:58:03:b3:21:1c:f3:23:
66:dd:b6:af:d0:76:cc:1f:8a:27:24:d7:af:f2:56:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:FD:43:99:DD:47:85:FE:02:C5:37:11:0C:3B:6C:B4:88:DA:16
X509v3 Authority Key Identifier:
keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:74:cc:58:da:58:dd:5b:65:89:56:97:88:89:6d:b1:39:88:
52:91:dc:36:8c:49:bb:c3:84:5f:de:ca:54:4b:8e:b5:bc:45:
31:3e:92:e9:8e:95:e6:a0:64:f3:33:a4:23:f3:63:d0:71:59:
80:c1:5f:a7:6d:bb:74:f7:51:bf:f5:ab:fd:31:b1:da:77:00:
25:e6:d9:09:a7:a8:90:9d:44:e4:f2:02:0b:a3:49:ce:eb:9c:
d4:6f:77:2b:cc:e4:b7:93:43:0d:a2:ff:96:6a:56:7b:98:4a:
8c:5a:9c:46:c0:08:2c:92:fc:9e:54:3b:6e:21:e0:6c:72:d2:
5c:60:fe:e8:e4:f1:53:b8:d2:d2:6e:fb:31:cb:48:3d:c6:ef:
f8:d0:5a:f2:dc:45:a7:bf:8b:c5:d1:f0:75:c4:69:17:27:1b:
d1:08:71:30:b1:0c:d6:8f:9b:d7:0a:44:88:cd:10:5d:60:b3:
ef:ba:c5:f7:43:3f:44:14:26:d2:b7:f2:81:51:21:f2:43:5c:
b3:ac:cf:fa:34:2a:27:bc:03:f3:11:94:1c:3c:63:fe:bc:ba:
f5:d7:04:c0:6b:e6:23:0c:5b:8b:50:0f:cb:31:24:10:66:2d:
e5:8d:b7:40:a7:5c:40:e3:c1:c3:bb:0d:61:a5:96:53:86:f6:
16:63:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:52 2026 by rpki-client