
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
File: LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json)
Hash identifier: MWkc0XV7Uz6AseeJfnxSoV5/bSF9xNL9O2mB265b2+s=
Subject key identifier: E7:AA:EC:58:7A:27:C1:4A:94:D0:60:5B:10:16:32:E5:68:70:94:E6
Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Certificate serial: 065C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
Manifest number: 0652
Signing time: Tue 24 Mar 2026 22:22:21 +0000
Manifest this update: Tue 24 Mar 2026 22:22:20 +0000
Manifest next update: Tue 31 Mar 2026 22:22:20 +0000
Files and hashes: 1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: hHOSWpXTLmO0Fa5rt3T7miWlHtY2KJeUopDJoLzIpOI=)
2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: /7av7VmQbV+L0jTSYNfMg1H06rntjmVObrTCW6Y2sTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Validity
Not Before: Mar 24 22:22:20 2026 GMT
Not After : Mar 31 22:22:20 2026 GMT
Subject: CN=69c30e9c-6db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:40:d5:de:7e:21:74:78:3a:e6:e6:ac:1e:
04:bd:a4:d1:8a:0d:0c:17:34:dd:41:c7:e2:b0:5a:
06:c9:c3:d5:6a:59:ae:b7:6f:a7:a1:d0:59:a7:6f:
71:6a:73:38:c0:5b:6a:cb:c8:3a:63:e5:82:68:89:
a3:19:c6:24:14:e2:4d:f6:fd:08:e9:11:37:dd:83:
94:48:ab:76:8c:b3:7c:f7:ab:a8:e5:cb:66:52:f0:
f4:e1:10:de:eb:0c:65:fd:d9:b0:97:8f:9b:58:a4:
63:d8:f8:f9:a2:23:fc:a5:19:1e:ca:e4:be:09:54:
7c:b2:c0:ee:8f:9a:13:23:05:be:05:f0:ec:70:62:
ae:a8:5e:ff:4d:3f:a7:48:5a:80:18:e1:2d:38:ef:
43:67:fd:b8:9f:54:28:36:15:e4:e3:82:57:12:92:
42:18:a8:6a:5e:74:a9:b3:be:12:f5:5c:79:9d:75:
85:13:b6:72:b8:d3:4e:61:a4:0f:31:41:d5:46:ff:
90:83:f4:6d:55:ce:f6:16:73:74:2b:38:ba:75:85:
a8:dc:c8:db:41:07:20:c2:ac:13:e0:94:ca:35:9d:
4f:d6:c8:52:72:73:1f:ea:30:77:9b:09:a1:b7:28:
27:cf:f7:31:bf:59:33:3a:32:ef:f3:a5:ce:08:5a:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AA:EC:58:7A:27:C1:4A:94:D0:60:5B:10:16:32:E5:68:70:94:E6
X509v3 Authority Key Identifier:
keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:ac:d1:39:01:3e:5f:70:da:f2:53:71:aa:f4:06:31:51:22:
f6:6e:07:cb:6e:19:87:96:78:cb:0c:27:ef:dc:67:ce:de:e2:
04:f1:98:ac:9c:de:64:14:05:36:07:b9:eb:36:bc:79:fb:6b:
53:2f:c0:6d:3f:a9:8b:48:d6:4b:68:65:5f:c7:f0:d7:78:3f:
ec:5b:8a:11:82:7a:11:c1:43:bc:6b:15:e3:c9:af:b2:56:54:
27:b0:fe:53:d4:63:83:2b:34:96:2a:37:56:56:10:d2:bb:40:
e3:67:19:8b:a1:2b:f4:d3:f8:2c:c8:8e:a6:91:be:1c:48:9c:
8a:8a:2e:07:ff:7a:b0:8a:74:59:25:90:09:b0:da:ae:22:bf:
a9:27:1d:b3:bc:2e:f6:68:b3:f2:49:c1:e5:e6:60:81:cd:2b:
d4:49:d4:03:5c:12:68:8f:d6:50:1c:ce:8f:43:bd:24:ba:8f:
3c:57:e4:ee:a8:d6:c3:39:0c:cc:ad:3c:44:86:ad:54:32:b6:
83:20:67:47:73:8c:a1:9e:9f:99:98:4d:6e:c7:20:ae:a0:39:
43:95:d4:a3:37:d5:21:1a:4a:fb:d2:03:2b:e2:63:f3:53:a3:
02:5b:96:16:ab:90:8f:b4:d0:5a:4b:03:c0:62:49:db:9a:c2:
27:26:eb:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1
MzA2MTM2QzEwHhcNMjYwMzI0MjIyMjIwWhcNMjYwMzMxMjIyMjIwWjAYMRYwFAYD
VQQDEw02OWMzMGU5Yy02ZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsgtA1d5+IXR4OubmrB4EvaTRig0MFzTdQcfisFoGycPValmut2+nodBZp29x
anM4wFtqy8g6Y+WCaImjGcYkFOJN9v0I6RE33YOUSKt2jLN896uo5ctmUvD04RDe
6wxl/dmwl4+bWKRj2Pj5oiP8pRkeyuS+CVR8ssDuj5oTIwW+BfDscGKuqF7/TT+n
SFqAGOEtOO9DZ/24n1QoNhXk44JXEpJCGKhqXnSps74S9Vx5nXWFE7ZyuNNOYaQP
MUHVRv+Qg/RtVc72FnN0Kzi6dYWo3MjbQQcgwqwT4JTKNZ1P1shScnMf6jB3mwmh
tygnz/cxv1kzOjLv86XOCFoGxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOeq7Fh6
J8FKlNBgWxAWMuVocJTmMB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3
MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDhDMy9ENzQxNEQ1NEM3MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpF
MkhlbVU1YzFDa2xUQmhOc0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdqzROQE+X3Da8lNxqvQGMVEi9m4Hy24Zh5Z4ywwn79xnzt7iBPGYrJzeZBQF
Nge56za8eftrUy/AbT+pi0jWS2hlX8fw13g/7FuKEYJ6EcFDvGsV48mvslZUJ7D+
U9Rjgys0lio3VlYQ0rtA42cZi6Er9NP4LMiOppG+HEicioouB/96sIp0WSWQCbDa
riK/qScds7wu9miz8knB5eZggc0r1EnUA1wSaI/WUBzOj0O9JLqPPFfk7qjWwzkM
zK08RIatVDK2gyBnR3OMoZ6fmZhNbscgrqA5Q5XUozfVIRpK+9IDK+Jj81OjAluW
FquQj7TQWksDwGJJ25rCJybrHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:07 2026 by rpki-client