
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json)
Hash identifier: EBxiTo9VSTDnG+/A3zzNzgurQnvCH1SaiHnbcLksIcs=
Subject key identifier: 94:A2:FB:0C:5B:FB:84:98:FB:F7:05:DA:EB:EB:3C:4B:EB:95:4D:43
Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Certificate serial: 0371
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
Manifest number: 0366
Signing time: Wed 13 May 2026 01:01:58 +0000
Manifest this update: Wed 13 May 2026 01:01:58 +0000
Manifest next update: Wed 20 May 2026 01:01:58 +0000
Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: CLkt6pF3QvMsz9ihOBvwZHBjgjt+IUoC+QeTJ2dErBM=)
2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: AJG9VwcXmykzSVjo120jxYPET3IdPC1gKF7m4iLbpbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881 (0x371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Validity
Not Before: May 13 01:01:58 2026 GMT
Not After : May 20 01:01:58 2026 GMT
Subject: CN=6a03cd86-3fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:f4:c0:ec:95:90:2a:ad:28:8b:57:84:13:
a8:ca:91:1b:c8:d2:a7:0a:84:c2:c3:c2:7e:1a:a8:
8f:a7:dc:cb:88:2e:ad:71:8a:bd:95:b6:f3:f5:6a:
2b:2d:8e:04:67:1c:fa:c9:bf:f6:69:70:fb:bf:4f:
7c:5e:e9:a7:25:16:2d:8d:d2:19:41:61:50:ee:30:
e1:77:e3:7b:d6:69:24:62:04:db:b6:a5:25:e6:d1:
1a:85:c9:62:94:b8:f9:cc:b9:2a:fc:c2:ea:77:ef:
74:b7:86:25:cc:23:f3:47:bb:a0:9f:1f:0b:ca:49:
e8:09:96:2e:aa:cb:64:28:86:5d:2c:43:43:25:9e:
d2:1c:b9:0d:a6:5c:87:ec:6e:92:34:19:bd:60:b8:
7d:77:b0:a6:c4:7a:5f:d6:9c:67:e5:bd:3f:38:49:
fd:6b:a5:00:5a:aa:c9:7e:a2:58:73:7c:4f:71:9d:
7f:87:3b:dc:55:44:a6:85:3b:65:dd:72:21:03:ba:
eb:3d:f1:40:a9:0a:7a:27:b6:61:52:5c:fe:a9:03:
e1:25:91:fd:dc:52:7a:49:47:30:5f:12:05:ff:a4:
2c:91:06:a8:dd:e0:ca:ec:a3:13:f8:86:f4:95:fe:
0b:b6:25:cb:e6:e6:e8:31:e8:fa:35:85:85:99:ba:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:FB:0C:5B:FB:84:98:FB:F7:05:DA:EB:EB:3C:4B:EB:95:4D:43
X509v3 Authority Key Identifier:
keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:4d:e3:91:2e:c4:8f:4b:cb:1d:d6:da:bd:5b:cd:b5:15:e4:
94:7d:c4:a8:3f:16:f9:de:33:6b:81:47:b8:8d:0c:c8:44:1f:
3b:cb:38:62:dd:83:8a:41:b1:22:c4:81:b6:9f:8a:fa:3f:1f:
af:4a:af:d5:0d:39:55:7f:68:c4:5d:b7:be:fc:05:9a:2d:4f:
b2:2f:fe:1c:12:13:e9:99:08:ab:b1:22:d5:0e:98:48:e6:14:
3a:d2:78:1e:b5:fe:83:c1:10:4c:fb:9b:c1:6b:b4:b8:52:f3:
7a:3a:18:d9:46:93:e0:99:3a:0a:58:60:72:dd:5c:7a:04:fa:
98:95:f7:56:f6:a7:32:9b:71:14:b5:4b:96:84:36:85:3a:ae:
86:96:ab:71:89:14:57:b8:53:50:46:8e:3c:64:98:24:07:b3:
32:1b:16:4c:38:32:33:ac:17:27:0b:46:61:f0:d1:53:f3:de:
04:f2:34:19:9a:7a:61:88:86:41:3b:f3:2c:2a:f7:85:14:13:
16:22:2b:45:bf:c6:d7:7e:66:fd:10:c8:6c:e8:03:df:34:51:
2c:85:fb:90:ca:45:cf:99:76:c5:20:2c:ed:42:0d:7a:3a:50:
6f:6c:ac:bb:ce:ba:f9:f2:d8:15:9b:62:46:c1:4f:f8:67:f9:
ea:9a:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:37:07 2026 by rpki-client