
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json)
Hash identifier: hjGlsBxrg42qOCkxOSi9okrMjQd1wmBwHPHnztpsV+8=
Subject key identifier: C1:7D:DC:69:06:D8:80:9C:5F:FF:15:1B:5F:EC:7B:52:C8:C6:B6:36
Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B
Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
Certificate serial: 0C4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
Manifest number: 0C43
Signing time: Wed 22 Jul 2026 19:02:37 +0000
Manifest this update: Wed 22 Jul 2026 19:02:37 +0000
Manifest next update: Wed 29 Jul 2026 19:02:37 +0000
Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: E9n7OTEfyCrHIIicWeNUoJR1AbzFmFYCynpLhOBFxKQ=)
2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: mJ7FNfAsY8ilIUPeznnb6nLSUZbSai5AntD3LtENWkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl
rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3149 (0xc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
Validity
Not Before: Jul 22 19:02:37 2026 GMT
Not After : Jul 29 19:02:37 2026 GMT
Subject: CN=6a6113cd-23a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:5b:f8:5a:db:37:61:f6:ab:b3:ca:64:dd:
5c:74:15:ec:18:88:55:d4:db:5c:58:59:04:06:ad:
7e:a7:ab:1f:c6:cb:88:83:ae:26:05:42:a8:04:8c:
35:ab:82:e8:9b:38:c5:09:f6:8f:22:82:ce:b6:0f:
10:2a:cb:49:b5:f5:b9:db:23:b6:93:ce:9d:db:96:
05:ce:f0:fc:47:87:29:7c:15:6b:a6:0a:42:02:3a:
e6:74:d0:5f:00:97:57:d3:64:a0:1a:8c:af:37:52:
ec:e5:d4:81:23:b1:ec:b2:c8:49:38:42:f5:ce:ba:
3b:ae:43:82:1d:b9:e0:31:2d:da:f0:82:5e:b5:56:
58:47:b5:75:eb:78:1f:71:f0:e2:f2:ee:c7:47:82:
9c:14:a6:f6:69:78:f4:4d:45:d4:0e:be:78:01:af:
65:fd:0b:d1:26:b7:73:29:d6:58:89:d1:98:00:f8:
4e:18:60:c0:b5:93:2c:61:7e:a6:b7:be:d8:70:0a:
46:cc:1f:69:97:44:86:b3:58:ad:69:36:a5:dc:aa:
bc:ea:70:f4:bd:2d:b6:2c:34:d1:61:ce:49:77:20:
45:04:29:e4:e7:42:85:08:79:b6:44:f8:d2:25:fc:
be:1d:2c:c3:a9:06:6e:7c:2f:23:3a:49:05:47:04:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:DC:69:06:D8:80:9C:5F:FF:15:1B:5F:EC:7B:52:C8:C6:B6:36
X509v3 Authority Key Identifier:
keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:b3:22:2a:6a:b6:bb:4a:d9:bb:57:a7:48:61:e4:8e:06:7d:
bb:b7:ad:c7:95:20:c0:5b:d9:2e:93:e3:84:44:f4:b9:21:13:
b3:32:90:5b:2e:65:93:eb:2e:e6:31:a0:6d:b6:b3:2d:5b:c7:
2f:9a:64:30:70:10:13:a3:b2:14:fb:89:86:b2:cc:d4:fe:b1:
4e:18:03:f1:5a:76:eb:7c:f4:d5:a1:77:a1:7f:6b:a8:3b:88:
6d:53:ec:f5:32:91:25:da:4f:a9:b4:1f:97:30:d2:d8:5f:02:
fa:86:ec:4e:3f:bc:44:eb:06:79:98:2f:5e:23:d8:4a:70:3b:
41:51:ef:96:1f:1b:64:7a:dc:c0:75:50:ce:68:c9:52:13:ae:
05:75:c9:f9:14:59:ca:77:16:a6:51:8d:c7:04:b3:a5:8d:08:
0a:80:06:ad:44:57:14:4e:61:2e:00:46:37:76:40:76:9b:df:
c3:9c:9d:1f:19:e2:9a:e5:1d:fb:07:3c:ff:55:94:27:c0:6b:
ac:9e:76:ca:30:64:94:9a:26:f1:03:b6:77:18:2b:ff:a4:25:
d8:07:74:1e:a8:f5:fb:a9:1f:a4:da:79:c5:dc:0a:ac:af:dd:
c0:2c:5e:be:16:f9:85:bc:30:d7:18:55:c3:cf:b4:0d:67:a6:
e7:ad:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:04 2026 by rpki-client