
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json)
Hash identifier: W9XhMqgueBXOACuVeN9DTuBS0wi+o1QUmPAo8WWYTqU=
Subject key identifier: AA:86:22:3C:25:79:E6:4C:25:5E:3D:1D:F9:58:48:98:9B:F7:16:0C
Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
Certificate issuer: /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
Certificate serial: 354F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
Manifest number: 3547
Signing time: Tue 12 May 2026 14:37:53 +0000
Manifest this update: Tue 12 May 2026 14:37:52 +0000
Manifest next update: Tue 19 May 2026 14:37:52 +0000
Files and hashes: 1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: FnWb06prRp6N1Scf9BGYH3S8lTOYuRmczhUvG3T140U=)
2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: 5gb2IR3RmAQfetfMD3Cf2kp33anqtncaV+qXbOqkB4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl
rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13647 (0x354f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
Validity
Not Before: May 12 14:37:52 2026 GMT
Not After : May 19 14:37:52 2026 GMT
Subject: CN=6a033b41-11fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:21:de:a2:28:5b:0c:ec:9a:6d:b2:3c:69:
ef:3b:c4:4f:9e:80:60:f6:11:a2:ae:5e:50:45:cf:
c3:38:77:5c:1b:e7:d9:34:5a:44:60:11:bc:4e:40:
59:19:90:47:54:32:aa:46:12:9f:6c:bf:61:ac:9c:
6a:f2:51:59:62:d4:c6:93:64:d4:63:4b:37:33:99:
b0:13:61:fb:4f:f0:19:5c:e8:09:fa:19:cb:40:ee:
a0:1b:95:d5:5b:4c:97:59:b3:85:4a:2e:94:ac:a8:
9b:b5:c4:c0:0d:d0:5b:be:b1:5f:03:7a:3e:87:0d:
bd:b6:fd:4a:73:7b:5c:7b:5e:0d:12:4a:43:11:73:
21:03:90:0e:49:17:62:6d:f0:53:27:0a:1b:f3:af:
ef:e0:d4:12:f5:72:6f:85:52:06:92:35:3b:8c:df:
6c:30:fd:bf:62:05:f7:be:84:6d:7a:93:77:e6:2b:
20:4a:bd:ab:cd:6f:3e:3c:0d:0e:f2:38:c8:c8:92:
61:06:ad:77:af:48:ce:fe:7e:4f:f6:34:df:23:66:
5b:e0:95:24:57:a5:aa:e6:b7:91:72:d8:aa:e0:99:
3a:ea:29:77:1b:95:f8:83:91:2d:49:a8:03:0c:e8:
98:44:01:68:a8:09:b4:c0:4c:c5:f3:2b:5d:36:dd:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:86:22:3C:25:79:E6:4C:25:5E:3D:1D:F9:58:48:98:9B:F7:16:0C
X509v3 Authority Key Identifier:
keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:ed:94:a4:3a:dd:09:7d:36:1e:9e:fe:a6:b3:df:75:4c:83:
10:41:75:f7:02:74:46:5a:a4:00:3f:0c:9a:fe:c5:da:5e:82:
38:5c:b9:b2:b9:98:c7:8a:09:9e:39:4f:58:1a:d8:eb:6b:07:
44:52:b7:14:16:01:0c:74:21:d8:25:58:3d:59:d8:26:6b:53:
6e:b5:36:21:fa:dd:2c:f8:2f:a8:3e:68:c7:78:e2:00:e2:90:
d9:a7:9c:f0:4b:d7:7f:05:1c:2a:fc:92:44:c2:9d:40:a9:0c:
17:2f:d6:6d:7c:91:a3:39:9e:19:1a:54:59:a3:33:6c:39:14:
e3:1c:3e:72:79:15:4d:58:fb:6f:4e:ca:5e:39:36:30:4b:7a:
cf:bb:d5:47:8f:fe:2b:b3:d5:ee:c1:93:34:e8:88:da:75:86:
e3:b3:0c:c3:e1:ff:3c:fc:0b:b5:68:4e:96:10:d8:92:0e:eb:
7c:2a:fb:d2:4e:84:00:f5:83:98:53:88:55:de:18:9d:e3:97:
13:f6:c6:40:0d:f8:cc:91:2e:c9:8e:c7:c9:21:c5:de:af:73:
40:5e:98:01:e6:e8:ad:31:a2:f4:04:9e:e8:48:1d:3b:a7:73:
1b:cc:8b:cd:35:8a:48:c7:2f:6b:4b:8d:d3:f0:6e:ee:ff:23:
cc:db:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:32:56 2026 by rpki-client