
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier: QpD8O51zC64g6X+4jSWLEVEfM6qCgYVve2CNB6Lb0rA=
Subject key identifier: 57:87:BC:5F:79:E9:8B:9D:1A:D2:DF:99:2F:A3:40:5F:21:D1:4A:19
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial: 0E60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number: 0E4D
Signing time: Wed 22 Jul 2026 17:58:02 +0000
Manifest this update: Wed 22 Jul 2026 17:58:01 +0000
Manifest next update: Wed 29 Jul 2026 17:58:01 +0000
Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: aFNZp1YkC2rldh3qy8CRnDnJs29JOc67wvkTt2grFbI=)
2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: HnvsHqcmUKW7ahLgN9nvtNlg8GIV2Dhcq2/uEZrWjX4=)
3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: bhmnlpYZPEuWaSc0+L7rL2QZ7zRKqGCV4y6eL/DlqEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3680 (0xe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Validity
Not Before: Jul 22 17:58:01 2026 GMT
Not After : Jul 29 17:58:01 2026 GMT
Subject: CN=6a6104aa-785a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:6d:71:33:3c:aa:8d:52:d3:8a:67:ad:19:
2e:b1:a9:76:0b:dc:54:1a:fe:0a:bb:b2:8c:ed:43:
50:06:d7:28:ad:47:7e:12:fe:8e:c8:94:94:38:71:
f2:30:e8:e0:c6:00:50:1d:01:ba:d8:c9:2b:eb:f1:
13:d4:66:8d:09:0e:66:1d:25:eb:53:a7:2a:a2:32:
79:27:37:35:4f:82:34:e7:68:fd:1c:81:ff:22:e4:
e1:60:54:48:1a:e5:cf:d4:24:d7:cd:74:4e:33:a6:
9b:24:47:51:22:ab:04:04:11:d9:cd:a8:0f:a7:1d:
08:90:e6:7a:6a:d7:ee:08:ba:9e:81:af:f2:0c:37:
0e:16:e8:01:d9:f5:7c:87:12:77:fb:6e:40:f0:b9:
15:d8:95:5c:eb:9e:af:64:ac:81:63:96:c9:8c:48:
35:fd:01:ed:c6:76:1a:f4:87:72:ce:5b:48:f2:c6:
8e:8d:9f:ee:c7:a1:55:5d:3e:ae:ea:15:ac:1f:00:
14:05:d7:04:f4:26:d9:55:70:ae:ee:59:f5:26:47:
e4:01:94:44:0b:9f:a8:46:9e:bf:3c:41:cd:92:db:
db:1c:03:8e:d7:3c:79:a8:b7:7f:c0:51:d8:36:8b:
9a:f0:26:0c:d9:0f:99:16:0d:6e:65:9f:1f:b7:b6:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:87:BC:5F:79:E9:8B:9D:1A:D2:DF:99:2F:A3:40:5F:21:D1:4A:19
X509v3 Authority Key Identifier:
keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:47:21:16:88:8d:ba:da:5e:ad:1e:f0:ee:92:c6:9f:3e:63:
79:94:9a:22:42:5a:91:55:48:70:ea:30:2d:81:de:a0:9e:d6:
e9:99:4d:68:12:6b:fa:cd:56:64:2c:e5:4e:3d:47:f4:ca:77:
d7:65:ec:d1:bc:61:e3:db:0a:df:06:d0:7d:fd:37:70:24:62:
5c:a8:49:9b:67:ee:24:6f:e8:7a:22:e9:52:cc:1c:d8:47:26:
83:fe:91:4f:5a:91:84:80:a7:81:48:95:6f:9f:42:24:e1:e5:
f2:b0:1d:45:a0:1d:d9:31:4b:72:55:3b:06:d0:50:5f:e4:f4:
e5:c5:a4:b5:39:ec:db:2e:11:8d:dc:1f:8c:2d:c7:13:33:ee:
59:55:44:81:5b:cc:76:04:17:55:36:ec:33:1c:88:c3:e5:58:
ce:ea:5d:90:61:67:80:de:26:4b:18:a8:f7:b2:53:51:06:c3:
3c:90:82:9a:de:fe:68:36:9f:d4:cf:11:c1:e1:76:fd:e1:23:
ea:ae:53:a8:86:79:00:ea:2c:f8:f2:7e:1c:fe:c2:85:cc:30:
52:ed:6f:91:9f:bc:1b:cb:3f:e3:56:97:a6:dd:ed:0b:c0:7a:
67:04:42:28:1f:3f:a2:13:b6:75:77:14:e4:14:d8:29:28:ba:
03:9b:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:30 2026 by rpki-client