
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
File: lSpNx8TWEJWYvu5awKIG0nuFxWo.mft (raw, json)
Hash identifier: rLybHlDKQtEzWdOchAFiz8N3c1xcPqAfwBtTcirsGuc=
Subject key identifier: 01:EA:B8:75:86:62:D2:86:C7:8F:6C:9E:D4:5C:6A:5E:C5:AB:38:AE
Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
Certificate issuer: /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
Manifest number: B7
Signing time: Mon 11 May 2026 07:11:20 +0000
Manifest this update: Mon 11 May 2026 07:11:19 +0000
Manifest next update: Mon 18 May 2026 07:11:19 +0000
Files and hashes: 1: lSpNx8TWEJWYvu5awKIG0nuFxWo.crl (hash: bpdEo52KZTiq6BstyuveaUZ/GeNb4ca5hloBmqiDybo=)
2: 4002AE6236CF11F0AA705D26C4F9AE02.roa (hash: PYLDscz39D9VfGo8zcZSUWDhN0EWb8SMMJ0oBjb9APU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Validity
Not Before: May 11 07:11:19 2026 GMT
Not After : May 18 07:11:19 2026 GMT
Subject: CN=6a018117-effc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:fb:f8:b1:d8:18:0e:3f:55:36:4c:20:87:
a8:17:b0:be:58:1d:c4:52:eb:5b:1a:eb:98:a8:f7:
51:d9:5b:c7:6d:d6:98:e1:8c:8f:43:1d:6b:9b:33:
3e:8d:de:f7:0f:fc:12:6f:b8:5f:93:84:fd:d2:9c:
fd:34:51:a8:54:4a:fb:24:77:f7:f8:a6:b1:a5:ea:
57:85:2a:89:a9:e7:15:2a:fc:ed:2a:38:69:d9:58:
8d:ee:67:ad:db:38:23:70:f6:24:36:ca:5b:2d:82:
cc:bf:93:cb:89:dc:cc:63:d1:6b:d8:09:dd:3c:98:
d1:2b:4a:13:37:51:6e:d9:fc:dd:99:f8:6f:0b:36:
b8:67:25:73:20:aa:81:d3:3d:dc:10:92:50:e9:a5:
ef:af:dc:b3:ba:8b:80:ce:ae:e8:fa:f3:5b:cd:a2:
38:52:3a:c2:08:dd:c6:07:15:f0:a2:c0:c8:cd:c1:
51:9e:37:e3:e0:39:ea:10:fe:9d:82:31:9a:26:44:
32:10:51:91:db:ae:eb:b2:6a:66:8f:4e:50:c6:3b:
db:20:ed:60:b4:19:e1:40:65:5a:4f:78:47:e1:84:
ce:0c:f0:82:99:d4:53:5a:26:0f:ae:bb:0f:be:74:
55:84:87:b1:48:22:3c:2d:e8:57:a9:c0:3d:ac:8e:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EA:B8:75:86:62:D2:86:C7:8F:6C:9E:D4:5C:6A:5E:C5:AB:38:AE
X509v3 Authority Key Identifier:
keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cb:6b:85:d9:d7:99:f4:c7:6b:fc:d2:1c:18:16:52:1a:ad:
81:d5:27:ce:62:4d:07:ed:a5:c7:0d:c6:b8:0d:cc:22:e9:d9:
8c:f8:44:3f:a9:e9:8e:fb:75:05:34:d4:69:d0:2b:31:1b:5e:
27:7a:07:b8:28:e5:f9:e2:94:51:1a:2a:24:63:47:8d:fb:da:
6c:16:75:71:65:34:33:54:b7:b2:2e:ac:1a:25:ff:d0:e2:50:
c8:28:19:29:e2:ad:ae:53:56:5c:43:e1:7b:44:f0:e8:c0:b7:
bd:dd:c6:b8:0e:bf:7f:b8:d5:f1:0f:ea:c8:6b:5c:ad:48:3f:
cf:46:19:db:5d:1f:5e:77:56:9a:87:32:3a:b1:1b:be:aa:0f:
0d:8a:4a:63:9c:20:84:a8:52:75:e4:d2:db:21:64:19:09:f2:
1c:ad:f4:3e:75:74:42:88:71:21:74:11:4a:6e:85:0f:d6:24:
1e:52:59:85:c2:99:91:c7:d7:fd:ac:fe:93:7e:d8:10:e8:c2:
9b:6a:68:5f:03:80:e1:1e:83:fe:94:5c:3c:c9:37:4f:68:c6:
1a:78:99:16:99:30:98:0d:73:23:7d:43:4c:36:6e:30:30:a6:
f9:09:68:2f:2b:05:56:cc:77:2f:22:ec:89:48:a4:04:84:78:
26:6d:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:49 2026 by rpki-client