
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json)
Hash identifier: x0U8qbikHKAfT9Z/TOVWQF2IITyeV/mLaVBsNRG8AFQ=
Subject key identifier: 56:F3:CC:9A:19:46:31:38:79:F7:0A:73:81:4B:12:EC:B7:F0:8E:4D
Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
Manifest number: 01CF
Signing time: Wed 23 Sep 2026 03:36:10 +0000
Manifest this update: Wed 23 Sep 2026 03:36:09 +0000
Manifest next update: Wed 30 Sep 2026 03:36:09 +0000
Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: CPw0xyNpI2B5SmK2eev1lOj4ZiMOrNjUn3qy06x7Ea8=)
2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: NjKx3lBEyKkNGoJaupNKZrXKHeRj+2wuPTX2DUxYmu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F
Validity
Not Before: Sep 23 03:36:09 2026 GMT
Not After : Sep 30 03:36:09 2026 GMT
Subject: CN=6ab3492a-f6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:c7:80:1b:89:37:58:98:9b:cc:76:b6:c2:
ee:55:b4:20:6c:10:43:62:ac:b2:78:e1:48:8e:e8:
bc:17:5b:fb:b5:49:48:11:f8:cb:72:10:05:6b:fa:
59:50:d4:07:ff:6b:68:0f:3f:6b:ee:cc:9e:f2:5f:
98:88:98:95:be:ff:02:0d:7d:43:18:f9:9a:ea:eb:
9f:04:dc:66:b2:1a:15:ec:04:4a:c4:85:f1:e6:1b:
d0:b7:51:c9:27:18:4a:e1:15:4f:ae:9b:25:9e:76:
7d:b2:7e:3c:bd:7d:8f:25:49:0f:ef:c8:c0:6f:bb:
71:58:53:49:96:a5:8c:37:cc:7f:7a:f1:ce:f4:8a:
cf:82:bd:50:db:3c:56:6c:a3:30:9f:27:be:c0:27:
5e:fc:d8:bc:c6:1b:99:27:e7:83:4a:ea:d5:e6:99:
79:80:f3:6e:45:9b:85:cd:f1:fb:b4:1e:da:24:97:
a8:0c:e6:9e:e1:95:b1:78:0f:92:af:4c:e8:6d:f6:
1f:79:6e:9e:75:ed:e1:fc:37:92:90:d4:51:07:1a:
90:2e:60:c8:2f:41:80:b6:7c:68:94:cb:b4:3f:90:
39:62:7d:ca:36:b9:83:ab:c9:e1:fa:24:1f:62:b3:
8d:79:4e:c1:8e:ae:ec:7e:9e:12:74:3a:d9:9a:94:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:CC:9A:19:46:31:38:79:F7:0A:73:81:4B:12:EC:B7:F0:8E:4D
X509v3 Authority Key Identifier:
keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:d3:d8:6e:a4:93:05:db:33:0c:c3:e4:29:7e:ad:08:b9:45:
ed:52:4c:7b:0a:bd:47:19:9d:10:c7:ee:82:d6:c9:4f:3f:13:
2c:0c:de:cf:9f:f1:d8:57:18:7b:48:7c:51:72:c4:37:5a:11:
0d:34:72:5c:4f:6a:67:17:87:f9:28:a0:bd:1d:15:bc:f0:6d:
f4:60:c4:90:57:b9:46:6c:fc:e4:ec:83:6a:03:3a:dd:4b:1a:
45:71:2c:33:b4:59:ca:a0:62:63:69:01:9a:2e:fd:8f:2b:53:
00:a1:94:e9:71:eb:7c:bd:63:c5:6d:7b:35:db:8c:62:6e:cb:
47:5c:73:dc:cc:84:31:5a:da:eb:c1:8c:31:dd:4e:5f:7c:42:
d8:70:bf:c0:ca:b2:b2:8f:b0:e2:2d:8a:6e:7a:4f:08:96:3f:
87:21:2b:d0:2f:f1:e5:9c:94:19:00:90:1c:2c:a4:0f:57:df:
c7:6f:86:49:f2:2e:70:66:98:6d:4c:cf:a6:a5:21:8b:e7:e7:
7b:c8:11:1c:35:8a:a7:9a:da:6a:2b:d7:05:9f:ef:26:fd:62:
49:c9:b7:f6:04:42:44:51:ca:c0:54:c8:43:e7:38:9f:ba:27:
42:d6:1d:d7:e4:ec:89:ba:f0:1f:a3:c1:7c:c8:51:a6:4b:99:
02:37:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:48:28 2026 by rpki-client