
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json)
Hash identifier: /McNBLzvtnBJY72dK9CSq1F8NU/yBS9EauUFXSjVRU0=
Subject key identifier: 6D:26:F6:B3:13:5E:3D:E8:84:39:CA:9C:33:38:69:2B:EE:04:60:C5
Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87
Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87
Certificate serial: 35CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
Manifest number: 35AF
Signing time: Sat 14 Nov 2026 15:15:05 +0000
Manifest this update: Sat 14 Nov 2026 15:15:05 +0000
Manifest next update: Sat 21 Nov 2026 15:15:05 +0000
Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: cWf4OE4qjOGQsjE8P90tq+WXU232wU534tGtssZFlIg=)
2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: HQH51hi8x4G+r78sw5Vb/qFkzB1JErJiNGaCDyzi5E0=)
3: uCAt4SXBl2CtUWyQ22mEcLh7WPg.asa (hash: btoH/G2nBy0fOe8e9v5dhBMJtDpFQdFY2sJmPNuTutI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl
rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 15:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13773 (0x35cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87
Validity
Not Before: Nov 14 15:15:05 2026 GMT
Not After : Nov 21 15:15:05 2026 GMT
Subject: CN=6af87af9-ab8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:90:ad:b3:90:36:17:bf:6d:58:95:52:7b:
db:03:23:cc:36:e9:93:f5:b9:14:f1:1a:0b:af:6b:
ff:11:e3:df:3f:9e:b8:73:cf:fd:d2:a4:f1:d5:50:
6e:44:44:7c:e0:b8:aa:73:9b:68:70:a9:d1:7e:6f:
34:ca:ee:f7:18:dc:3d:08:0f:aa:ea:44:d7:3b:a9:
f4:ec:5e:73:54:37:97:5d:58:b7:c5:07:ce:84:8e:
d4:2b:a7:c4:91:a8:79:7d:2c:02:40:7d:a1:fb:33:
18:89:58:de:cc:b0:dd:50:bd:99:fe:e7:5e:2c:8d:
93:ed:78:c5:56:52:f9:ef:97:e4:ed:b2:c4:c8:d5:
64:08:5b:29:b4:e9:fd:55:7d:c7:38:03:cd:12:ed:
95:6a:24:7e:7f:28:bf:8e:73:e6:95:6f:3a:8b:52:
f3:87:64:a2:a1:23:c3:84:25:9c:77:1d:b5:af:df:
de:20:84:c5:c4:08:45:e5:66:6d:57:19:b4:8e:22:
b6:c5:0d:8c:18:33:3c:ea:90:b1:f5:f5:68:7b:79:
fc:23:f9:c0:b1:bf:05:d3:a2:13:f5:eb:4f:0e:8f:
39:be:7b:6b:ee:9c:e7:2d:8e:4c:f0:53:62:9d:ec:
c1:57:0e:ff:79:64:50:88:24:04:62:1e:b2:10:de:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:26:F6:B3:13:5E:3D:E8:84:39:CA:9C:33:38:69:2B:EE:04:60:C5
X509v3 Authority Key Identifier:
keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:98:0d:06:b0:82:d3:c4:94:34:c2:ab:74:f2:77:f5:34:68:
44:99:4c:6b:0c:10:10:f5:8a:1e:c8:eb:da:6c:c1:76:f8:fd:
36:ae:97:3c:84:67:8c:5e:c2:66:d0:30:f4:71:2d:48:22:87:
aa:f9:93:a8:7f:f4:07:62:d6:24:72:93:ef:41:1d:c4:0e:44:
ae:8d:41:23:06:4e:6f:99:8c:53:69:86:9e:6c:62:78:12:51:
c5:f6:ca:cf:3f:f1:fe:f9:67:9d:6d:52:a5:d1:53:25:f2:bf:
74:9d:79:c3:35:ee:bd:cc:8a:8d:0e:24:cb:be:e7:7d:e0:fe:
d6:83:0b:9f:1a:68:6f:2f:69:ac:08:3b:8d:2a:bf:91:86:0d:
1a:90:da:c4:e8:e5:54:24:d5:69:a3:99:77:8f:8b:2b:12:e3:
d2:fb:ef:88:f1:12:6b:38:c6:54:e3:af:78:94:b1:af:df:ca:
e9:ba:5d:80:90:c6:02:6c:e8:4f:9b:ca:6d:26:22:92:b4:6a:
fd:0f:dc:ec:05:ff:27:41:7d:3a:96:41:2b:d3:e0:72:01:0a:
cc:c0:12:2e:71:0a:94:c3:bf:74:f6:32:60:21:c1:5f:73:06:
91:ee:2c:b9:c6:5a:72:c5:b9:0d:5a:36:be:4b:16:15:bd:3e:
e3:d3:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:06:35 2026 by rpki-client