
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
File: lufMd6OOPhgL91JrodlTIYBONeY.mft (raw, json)
Hash identifier: T7owejt/IBwOb+PDB2LkyQr3BbSELfR3/KaYbGs0S6o=
Subject key identifier: DD:A0:9F:9D:41:B8:0B:73:E6:75:CC:85:46:EB:BE:28:87:09:EE:93
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Certificate issuer: /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
Manifest number: 066A
Signing time: Wed 13 May 2026 00:34:21 +0000
Manifest this update: Wed 13 May 2026 00:34:20 +0000
Manifest next update: Wed 20 May 2026 00:34:20 +0000
Files and hashes: 1: lufMd6OOPhgL91JrodlTIYBONeY.crl (hash: 2l6A4WibrE+kohTyl+d/TfNjw2DlnOrBFzCuKnlHA2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4FA, serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Validity
Not Before: May 13 00:34:20 2026 GMT
Not After : May 20 00:34:20 2026 GMT
Subject: CN=6a03c70d-8920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:f2:34:00:bc:bb:a7:ed:18:1a:b5:55:d4:
b0:c2:a3:f9:fa:71:36:1d:a2:ec:ab:98:4f:de:f6:
94:bf:38:48:5e:ec:7e:f5:c2:a2:90:e6:0d:10:7b:
21:ed:ae:c5:06:06:31:45:0e:9c:85:d4:b1:93:2e:
03:e2:d2:f5:84:13:88:c4:d1:04:d8:2c:a9:78:cc:
08:61:bc:98:eb:1c:a2:25:33:88:e8:f1:1e:94:c6:
fc:14:c0:a7:31:bd:f4:28:a2:a4:c8:8a:31:d3:ef:
cc:6c:d5:04:f4:de:60:c1:ae:5f:ca:f7:5d:71:7a:
c1:a2:64:be:90:4f:38:3b:e1:41:da:e4:45:3a:3d:
70:00:8e:12:3d:82:f5:6d:44:53:ab:7c:ce:98:21:
04:6e:35:c2:af:c4:70:e7:4b:08:77:00:16:97:13:
fa:eb:6e:d6:bc:7d:b2:5b:ef:bf:23:f0:b7:0c:ca:
34:e0:61:a5:74:6f:b3:8e:74:b4:15:f1:56:8c:e5:
ff:c2:33:ed:30:6c:d2:45:f7:8b:67:45:08:f7:eb:
65:15:9a:b1:49:dd:20:3e:77:b3:51:12:9c:d3:c9:
9d:3a:a0:8a:cd:7f:75:7d:23:a7:d5:14:3f:0a:6b:
55:07:32:b1:48:ae:b0:b4:ad:ba:81:ae:69:83:79:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:9F:9D:41:B8:0B:73:E6:75:CC:85:46:EB:BE:28:87:09:EE:93
X509v3 Authority Key Identifier:
keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:27:23:78:04:c1:0d:c8:19:82:63:14:6e:27:e7:99:78:1b:
9f:f6:99:d3:99:e9:9f:e2:75:8e:7f:bb:a7:72:5b:37:cb:db:
01:78:39:3a:52:5a:b8:7a:29:a6:3e:99:04:68:58:9e:10:ce:
09:28:31:4f:6c:33:d7:0c:cf:0c:bd:12:94:00:10:d6:b7:e6:
50:b2:cd:d2:22:56:75:f5:61:c1:e8:83:80:3b:24:01:7e:a1:
bb:a5:15:80:46:23:ec:d3:ea:57:77:91:a2:f4:fb:7b:74:c5:
f0:96:e0:ce:0a:01:a6:38:60:7c:fb:5a:79:6b:4c:fd:a1:8d:
a3:2a:74:17:12:75:99:25:6b:98:5c:2f:3f:94:7c:f3:79:c1:
2f:03:f7:32:72:69:8c:d4:ce:04:ba:8e:38:2f:c2:96:42:54:
e4:6f:c7:94:4b:40:c3:f6:c1:e7:60:0c:23:1e:57:e6:7c:dd:
f4:82:6e:5f:59:75:75:1e:21:0d:d4:78:c4:f1:78:aa:4d:f9:
2a:e3:f8:47:83:25:da:a1:e2:d0:43:5b:61:c8:36:f0:9d:df:
1f:5b:09:cb:fe:61:3c:fc:bf:bb:48:80:c6:9b:41:6f:a1:a5:
4e:5c:1d:9a:8d:8b:71:05:2d:f8:c7:d5:bd:36:6e:03:c7:7a:
bb:97:25:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0RkExMTAvBgNVBAUTKDk2RTdDQzc3QTM4RTNFMTgwQkY3NTI2QkExRDk1MzIx
ODA0RTM1RTYwHhcNMjYwNTEzMDAzNDIwWhcNMjYwNTIwMDAzNDIwWjAYMRYwFAYD
VQQDEw02YTAzYzcwZC04OTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhivyNAC8u6ftGBq1VdSwwqP5+nE2HaLsq5hP3vaUvzhIXux+9cKikOYNEHsh
7a7FBgYxRQ6chdSxky4D4tL1hBOIxNEE2CypeMwIYbyY6xyiJTOI6PEelMb8FMCn
Mb30KKKkyIox0+/MbNUE9N5gwa5fyvddcXrBomS+kE84O+FB2uRFOj1wAI4SPYL1
bURTq3zOmCEEbjXCr8Rw50sIdwAWlxP6627WvH2yW++/I/C3DMo04GGldG+zjnS0
FfFWjOX/wjPtMGzSRfeLZ0UI9+tlFZqxSd0gPnezURKc08mdOqCKzX91fSOn1RQ/
CmtVBzKxSK6wtK26ga5pg3korwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2gn51B
uAtz5nXMhUbrviiHCe6TMB8GA1UdIwQYMBaAFJbnzHejjj4YC/dSa6HZUyGATjXm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB
NkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1BoZ0w5MUpyb2RsVElZQk9O
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x1Zk1kNk9PUGhnTDkxSnJvZGxUSVlCT05lWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzRGQS9CODlCQ0JGNEJBNkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1Bo
Z0w5MUpyb2RsVElZQk9OZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwScjeATBDcgZgmMUbifnmXgbn/aZ05npn+J1jn+7p3JbN8vbAXg5OlJauHop
pj6ZBGhYnhDOCSgxT2wz1wzPDL0SlAAQ1rfmULLN0iJWdfVhweiDgDskAX6hu6UV
gEYj7NPqV3eRovT7e3TF8JbgzgoBpjhgfPtaeWtM/aGNoyp0FxJ1mSVrmFwvP5R8
83nBLwP3MnJpjNTOBLqOOC/ClkJU5G/HlEtAw/bB52AMIx5X5nzd9IJuX1l1dR4h
DdR4xPF4qk35KuP4R4Ml2qHi0ENbYcg28J3fH1sJy/5hPPy/u0iAxptBb6GlTlwd
mo2LcQUt+MfVvTZuA8d6u5clWA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:45:55 2026 by rpki-client