
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier: Uj+FnOAl1StJ5chMu82kGHjyWTKQyInSQ8lE5Q3e3uI=
Subject key identifier: 1B:0E:03:50:5A:B2:4A:E2:43:3E:75:53:14:E3:31:27:09:4E:CF:C4
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial: 0E38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number: 0E27
Signing time: Tue 12 May 2026 17:50:30 +0000
Manifest this update: Tue 12 May 2026 17:50:29 +0000
Manifest next update: Tue 19 May 2026 17:50:29 +0000
Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: WxK8lKcNDhLK+afDLTLP1aVw2kOIjE6AkrKtLwUd2so=)
2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: hREq3dfebI3lmN/AdMfL+hkUkOZoLrGY9aPcGr6VVN4=)
3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: 2pN9nTFxj6nclr0WTJ25vKxxUHXAvjKZjFUhskFnTRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3640 (0xe38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Validity
Not Before: May 12 17:50:29 2026 GMT
Not After : May 19 17:50:29 2026 GMT
Subject: CN=6a036866-7791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:da:b9:cc:f6:ad:f7:5e:21:2f:07:4e:9e:
26:0e:41:a9:4b:15:01:38:7b:7f:c5:89:f1:fd:4e:
3b:b0:7a:11:6e:7c:22:32:62:dc:82:e9:c9:e6:fe:
f7:0b:ab:ee:e7:88:91:23:20:37:c1:9a:e2:36:d5:
77:fa:ff:7a:e4:8b:46:d7:e1:5b:42:84:a9:fc:d7:
02:75:67:2b:00:c5:1f:28:96:05:e1:8a:7d:9b:ef:
1a:47:0d:60:2a:a5:6f:c3:87:e2:b7:88:41:4e:a5:
b9:4c:ee:c2:ad:34:3f:62:0a:6e:ec:ab:2a:f6:f9:
62:78:7b:b1:95:98:86:1e:92:3b:8c:3a:81:d4:89:
33:51:d6:7f:49:48:5a:2a:7b:b6:4a:44:12:76:4b:
83:81:51:89:d7:34:82:ea:22:38:1a:1a:66:eb:62:
e0:bb:5a:e6:9a:99:87:79:bc:47:b8:9c:9b:1d:0a:
50:9c:4d:50:d9:2a:61:3f:df:f8:5d:3e:65:41:fb:
6c:28:f8:9e:d4:dd:2b:ac:49:50:3d:1e:c4:0f:fa:
bb:0b:8b:04:2d:b3:db:a6:df:25:66:29:dd:ce:ea:
ca:ab:24:60:78:d6:fc:59:19:0c:12:b4:60:dd:c4:
f8:38:18:e3:29:37:25:5d:2f:b0:0d:ab:df:4d:7c:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0E:03:50:5A:B2:4A:E2:43:3E:75:53:14:E3:31:27:09:4E:CF:C4
X509v3 Authority Key Identifier:
keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:28:bf:78:7c:03:d2:d2:eb:87:ef:2b:35:a1:90:cc:f8:3e:
a9:df:21:22:22:fe:c2:28:47:e7:0f:5a:c8:f7:22:8d:ac:e6:
b5:ea:ae:2a:43:80:77:99:a9:69:90:2b:32:b3:f8:4a:95:ba:
d2:69:45:02:67:19:48:b1:22:3e:49:05:3a:e7:2c:55:25:a2:
8e:00:26:bf:8c:f8:21:a8:60:3d:ac:02:b5:c4:82:2d:90:89:
60:56:a1:90:8e:ba:f0:6b:49:00:7f:45:e7:ca:be:05:ca:40:
83:0b:5e:fb:7e:30:0f:50:51:18:46:82:a1:77:05:2f:8a:e2:
69:4d:97:ed:bf:94:d7:0c:0d:92:d5:b0:1a:9a:c4:58:dd:c8:
0d:97:b2:bc:99:51:d0:ae:e9:cc:a2:94:15:17:55:3f:81:1b:
2d:44:af:d1:cd:78:92:ab:ad:ac:11:80:e2:6a:f5:6c:3d:fc:
1b:2c:2c:1a:df:f1:ce:c6:28:a5:1f:41:72:df:30:fc:16:37:
b0:51:fa:a1:6c:91:78:0e:5c:ce:7d:b2:c2:d4:80:13:79:29:
6f:46:9d:ac:86:eb:8b:95:db:34:38:51:d3:98:84:1c:95:7a:
ff:30:d8:43:9c:93:c2:5e:21:b6:57:b5:90:29:06:73:91:1e:
25:e0:b2:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4
RDI0NUQzMUYwHhcNMjYwNTEyMTc1MDI5WhcNMjYwNTE5MTc1MDI5WjAYMRYwFAYD
VQQDEw02YTAzNjg2Ni03NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi3faucz2rfdeIS8HTp4mDkGpSxUBOHt/xYnx/U47sHoRbnwiMmLcgunJ5v73
C6vu54iRIyA3wZriNtV3+v965ItG1+FbQoSp/NcCdWcrAMUfKJYF4Yp9m+8aRw1g
KqVvw4fit4hBTqW5TO7CrTQ/Ygpu7Ksq9vlieHuxlZiGHpI7jDqB1IkzUdZ/SUha
Knu2SkQSdkuDgVGJ1zSC6iI4Ghpm62Lgu1rmmpmHebxHuJybHQpQnE1Q2SphP9/4
XT5lQftsKPie1N0rrElQPR7ED/q7C4sELbPbpt8lZindzurKqyRgeNb8WRkMErRg
3cT4OBjjKTclXS+wDavfTXyljQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsOA1Ba
skriQz51UxTjMScJTs/EMB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB
MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ
OFl2bUlYWEpYWGFOSkYweDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKSi/eHwD0tLrh+8rNaGQzPg+qd8hIiL+wihH5w9ayPcijazmtequKkOAd5mp
aZArMrP4SpW60mlFAmcZSLEiPkkFOucsVSWijgAmv4z4IahgPawCtcSCLZCJYFah
kI668GtJAH9F58q+BcpAgwte+34wD1BRGEaCoXcFL4riaU2X7b+U1wwNktWwGprE
WN3IDZeyvJlR0K7pzKKUFRdVP4EbLUSv0c14kqutrBGA4mr1bD38GywsGt/xzsYo
pR9Bct8w/BY3sFH6oWyReA5czn2ywtSAE3kpb0adrIbri5XbNDhR05iEHJV6/zDY
Q5yTwl4htle1kCkGc5EeJeCyaA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:30:17 2026 by rpki-client