
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json)
Hash identifier: wp0XHR27YJ5/kOhXwdXc0aHtlEiGRk8z4lyQCfQ3SOo=
Subject key identifier: 8C:E2:37:8D:F5:56:E8:71:7D:34:D2:52:F3:3E:A6:9E:F5:52:5C:87
Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Certificate serial: 039D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
Manifest number: 038F
Signing time: Thu 23 Jul 2026 01:41:36 +0000
Manifest this update: Thu 23 Jul 2026 01:41:36 +0000
Manifest next update: Thu 30 Jul 2026 01:41:36 +0000
Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: sFDGOArdkhLNNThMnXgQn/H6F7LMpV1PUaZKYwWBhy0=)
2: ULsBzvtfgl1K2igC59L2mzvRxB4.asa (hash: bMTyR+adZecSbErM2lmgCv3g2pNnvAsEv7EFqtHkOqE=)
3: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: DhWrSSSIb3yMa22B1M5gCqAEgOoCIxcBBwKz1msoORA=)
4: MV52KExuh2QQ1cDV77_rjB-fxi8.asa (hash: hj7dzH3p5PUyIc/5PrX8QABZUwY7fGc0N+IJoH4lBa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925 (0x39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Validity
Not Before: Jul 23 01:41:36 2026 GMT
Not After : Jul 30 01:41:36 2026 GMT
Subject: CN=6a617150-2719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:b6:d9:a7:20:79:d3:7f:f7:af:be:9f:d1:
d3:af:d9:21:d0:bd:81:19:d3:5b:ec:1b:5e:e7:80:
3e:49:c0:26:a4:a5:04:43:ee:06:dc:22:69:16:85:
3f:06:d9:bc:18:d7:86:9f:8f:06:53:88:d5:e1:02:
1d:91:50:c4:a1:4a:85:8c:dc:2e:12:b8:7c:dd:f6:
c7:5d:72:30:62:ec:8f:62:27:de:81:4e:e3:ea:69:
3d:e8:99:10:f0:10:bb:74:54:e6:19:34:44:65:5f:
16:f2:f7:04:2f:fe:36:21:c9:c2:a1:67:de:54:49:
72:73:05:79:99:62:1b:a8:75:09:ad:00:a0:d5:1d:
33:a1:1e:05:0e:db:4a:64:87:f0:76:26:5d:a0:c6:
11:61:c7:36:ed:8b:c9:4e:a4:23:23:15:42:b8:65:
30:42:2a:29:44:16:df:2c:8d:48:d3:0d:9f:22:35:
84:73:f1:da:a6:7c:4c:e7:64:ef:71:98:2a:c9:8a:
ae:ac:ba:ed:19:b1:66:51:c2:ff:a1:ea:01:70:f4:
86:c8:67:e7:67:4e:d4:02:ce:db:d3:62:1d:47:68:
f4:79:ae:80:1b:25:fa:5b:54:3a:84:52:b0:74:c3:
ec:7e:91:39:02:eb:e6:c1:54:04:08:c1:55:78:94:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E2:37:8D:F5:56:E8:71:7D:34:D2:52:F3:3E:A6:9E:F5:52:5C:87
X509v3 Authority Key Identifier:
keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:0e:ba:f5:4e:18:e0:94:f2:b9:b0:5a:e8:78:12:72:ae:e3:
7c:e7:35:2d:7e:13:f3:fd:70:56:ca:da:1d:06:d8:12:0f:6f:
1f:d1:bb:d0:c2:fa:b8:33:2b:05:54:40:cd:41:38:44:2d:a6:
e2:a4:40:13:cd:af:51:63:ca:cb:3a:92:3d:39:7b:20:78:35:
2e:17:d4:55:19:8e:75:49:e2:56:e1:11:26:67:d3:8c:27:a7:
a5:14:3e:a7:de:4b:da:73:f6:a3:76:cd:f8:70:71:11:11:e5:
99:78:c1:00:b4:4c:32:bc:bb:93:31:ff:d4:de:c1:63:2e:2b:
cd:a6:88:93:51:d4:2e:03:ed:9b:7e:fd:6a:4b:71:89:d2:71:
26:72:26:2f:9b:70:55:5b:8f:5a:34:dc:69:e8:2a:e1:2d:cf:
35:df:c1:a6:d1:03:83:69:66:4c:3a:3c:fa:85:19:00:b2:fc:
f3:43:19:7e:a2:de:35:c1:3e:f9:d7:cc:ec:c3:0a:b8:80:0e:
6d:05:97:78:87:dd:f4:10:e5:4a:a5:41:0d:7c:1b:a1:4f:bd:
d3:64:9b:af:e4:1e:78:19:7e:4c:96:67:8b:80:a2:9f:ef:58:
4b:d9:87:5f:cb:58:65:af:44:5c:35:c7:cc:2a:d0:46:7a:fd:
60:dc:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:11 2026 by rpki-client