
$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
File: L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft (raw, json)
Hash identifier: 9dY4RXrx07ahdRye3OTj886tZmBVcE/q6TAnVXsKZbw=
Subject key identifier: F1:04:E9:46:E3:31:BD:36:11:39:38:F1:54:E9:38:76:AC:78:43:F8
Authority key identifier: 2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
Certificate issuer: /CN=A918049D/serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
Manifest number: 8B
Signing time: Thu 23 Jul 2026 09:22:54 +0000
Manifest this update: Thu 23 Jul 2026 09:22:54 +0000
Manifest next update: Thu 30 Jul 2026 09:22:54 +0000
Files and hashes: 1: L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl (hash: L9/KFI6VtWtNHlx39k2lmwFcxvI+qGy1SBzj0UzC/d8=)
2: 541D17D2B2C811F092F27081C4F9AE02.roa (hash: +uBlVYDCPzZRUmuHurx+A+K3HLAEvtXcUCa/AfvX6ks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl
rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918049D, serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Validity
Not Before: Jul 23 09:22:54 2026 GMT
Not After : Jul 30 09:22:54 2026 GMT
Subject: CN=6a61dd6e-9a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:e6:d8:31:cf:15:b1:f2:a3:3d:b7:2e:0a:
a5:45:2c:5f:43:36:f4:f1:1e:fe:52:7c:55:45:e9:
63:74:5c:a2:72:6e:5a:8a:71:a0:67:03:b4:e4:90:
d4:53:67:c7:4c:43:d3:4a:a8:38:b0:c5:9a:9a:a6:
8e:1c:17:80:ee:31:26:a5:23:a1:0e:23:8d:ec:28:
2b:27:07:18:70:5a:d3:d0:20:89:aa:fc:de:6f:27:
35:5d:11:ed:3a:e1:5e:7a:66:46:3d:cf:8c:af:e8:
56:6f:41:00:ea:62:6a:79:30:a1:55:b0:de:a1:62:
69:2f:2a:f7:52:c9:9d:45:f5:b3:b5:b7:a7:c5:10:
19:33:d9:e0:04:b3:c0:96:57:49:73:79:c3:73:f3:
e6:9a:f5:90:38:51:6c:4a:44:98:f6:f1:a3:19:bd:
b1:b0:25:59:92:87:c0:ed:19:42:78:cb:5e:b8:b6:
9e:65:11:3f:9d:e0:8e:62:69:3b:8a:27:94:60:cb:
48:5d:db:e0:90:19:81:8e:82:04:6a:10:88:68:79:
42:42:6f:db:ea:e3:a5:22:23:56:01:9d:6c:3c:6d:
f9:67:68:c9:a7:e3:5f:02:b6:58:a2:df:12:81:71:
20:ba:a8:ca:d3:5c:d9:55:93:26:2a:86:bf:de:d0:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:04:E9:46:E3:31:BD:36:11:39:38:F1:54:E9:38:76:AC:78:43:F8
X509v3 Authority Key Identifier:
keyid:2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:f5:85:13:60:9b:39:81:59:78:8e:84:0e:5f:43:7f:66:60:
4f:4e:22:d4:50:f8:02:5c:f1:ed:3f:23:8f:da:9e:2c:db:78:
b2:a3:6a:ce:02:cd:bd:9a:e7:a0:a9:c1:08:86:c0:73:db:ba:
52:21:99:49:cc:64:d6:e8:46:48:11:e6:8f:e4:7f:4b:9a:ae:
77:a2:e2:6d:fc:d4:54:f4:fb:87:bd:f4:45:b9:e7:14:51:68:
3f:1d:f7:8e:8c:01:74:3f:9b:23:7d:8a:71:95:14:01:43:e9:
ba:3c:28:b0:8a:82:f4:f7:58:7a:58:8a:3b:ed:21:33:7b:a3:
48:53:2c:1e:e9:33:aa:df:c8:c6:2c:88:ec:55:c3:9c:2d:6e:
05:3a:84:1d:2b:4c:b0:d4:b3:b6:37:ae:0f:42:c2:d5:36:e4:
14:f3:8c:10:20:f5:f7:1f:44:fc:5d:0a:17:8a:7d:11:ec:13:
23:ba:6d:f0:91:ff:64:af:45:5e:d6:9b:33:6b:28:17:2e:cf:
d4:e5:8d:1f:0d:3f:15:a8:de:58:27:73:f3:5a:52:bb:89:c0:
24:ff:78:db:a6:25:73:7d:5e:f5:ac:eb:ac:bb:88:4d:14:32:
b5:22:1a:ac:ac:9b:a8:aa:10:3a:bc:28:c8:43:9a:72:c7:bf:
50:dc:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:22 2026 by rpki-client