
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json)
Hash identifier: A+sl1fckmv5F/DU9qWTdlvlFYe7Sc7Ef4gZmFMTq+jc=
Subject key identifier: 24:2D:46:99:8C:2E:B9:A0:1E:1D:A1:D6:FE:67:3C:4A:A5:23:29:B5
Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Certificate serial: 0CEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
Manifest number: 0CE4
Signing time: Wed 22 Jul 2026 18:40:26 +0000
Manifest this update: Wed 22 Jul 2026 18:40:25 +0000
Manifest next update: Wed 29 Jul 2026 18:40:25 +0000
Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: e3gtMCWX9URPkI8MB+fcsK6iXiW41/1yGXN8WWdtvu0=)
2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: xD5ELxyj4bWF9z+q/0VL9OifUcgzca/SexnDM+WQXMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3310 (0xcee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Validity
Not Before: Jul 22 18:40:25 2026 GMT
Not After : Jul 29 18:40:25 2026 GMT
Subject: CN=6a610e9a-ffef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:33:de:fe:c9:3c:d8:71:a9:22:6c:a8:0f:
aa:69:5c:eb:bb:40:8f:9c:12:7d:54:df:1b:8f:e7:
22:83:36:cb:eb:a0:91:f5:9c:3d:a0:eb:ef:7b:f1:
ed:13:40:d6:32:28:b2:77:2f:e7:09:a4:dd:92:12:
ef:57:e2:64:45:20:01:3b:e7:c1:ca:5a:da:ff:0a:
bb:35:db:aa:f3:ca:96:36:9e:11:c8:88:14:47:94:
06:eb:78:a0:3d:1d:d3:14:e4:71:1b:e9:2e:ee:9c:
f1:4f:90:97:4c:77:29:8f:87:ab:7d:7f:10:74:6a:
e5:f2:e8:4b:1d:71:b7:63:8c:22:c7:6d:d2:9c:c5:
b5:3d:8b:c8:9f:7c:4c:60:43:4b:14:94:d6:29:01:
a7:19:66:c0:20:1f:79:79:cf:fa:47:cc:6a:f7:06:
5b:17:d7:30:aa:d4:1e:ee:89:47:98:99:ef:d1:db:
9f:b6:a0:e0:af:95:0e:9d:22:ed:da:54:d1:eb:f7:
9e:c2:16:a6:53:1a:74:b6:fd:fb:28:f9:3e:36:7b:
4e:79:c1:88:c1:49:d3:70:6b:dc:f7:43:e7:cb:23:
f1:ca:49:67:ae:ee:4c:35:4b:1f:7c:ed:f9:f6:df:
9f:eb:c5:2a:57:dd:35:77:e8:fa:ae:67:7a:e0:6c:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:46:99:8C:2E:B9:A0:1E:1D:A1:D6:FE:67:3C:4A:A5:23:29:B5
X509v3 Authority Key Identifier:
keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:15:e2:c0:72:bc:de:a7:37:72:aa:c4:5a:b5:db:4f:91:db:
60:09:2d:2d:ad:1a:25:f8:a6:4a:14:5a:87:38:16:e2:6f:b7:
9a:a3:e6:47:e5:ec:58:1b:ec:aa:b5:a3:f5:e9:2d:ec:4b:33:
74:98:12:40:70:74:52:b8:07:f0:27:4d:51:07:a9:ef:37:eb:
42:7d:a3:21:1b:0e:54:2e:72:64:9a:f5:3a:dc:c9:77:c9:5c:
09:84:fc:86:fd:a6:59:7f:ec:92:47:79:dd:87:c4:49:a2:53:
23:73:0b:10:5f:0e:4a:41:f4:c4:ff:f7:11:70:f7:85:72:06:
7d:1f:45:b6:01:f6:db:dc:ca:83:0b:a1:8a:c9:eb:08:14:17:
63:dd:bd:73:6d:28:0d:81:0a:85:52:a8:a5:d2:56:8e:63:76:
8e:22:40:f8:a9:32:ea:cb:3d:e5:2f:00:cd:e2:42:03:ba:20:
ed:6f:23:f7:9d:19:da:60:3f:db:f3:bf:68:64:be:04:71:3a:
83:a9:18:f7:c0:62:5d:51:4d:87:0d:df:9b:80:ed:97:a9:06:
22:43:be:20:8e:c3:9c:b7:0e:75:2b:1c:d8:ef:87:9f:8a:04:
b7:64:1c:f5:c0:ef:e5:75:eb:02:ba:07:ad:60:4b:d6:f9:84:
4d:7b:ba:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw
NzJGQjE3MzQwHhcNMjYwNzIyMTg0MDI1WhcNMjYwNzI5MTg0MDI1WjAYMRYwFAYD
VQQDEw02YTYxMGU5YS1mZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApQIz3v7JPNhxqSJsqA+qaVzru0CPnBJ9VN8bj+cigzbL66CR9Zw9oOvve/Ht
E0DWMiiydy/nCaTdkhLvV+JkRSABO+fBylra/wq7Nduq88qWNp4RyIgUR5QG63ig
PR3TFORxG+ku7pzxT5CXTHcpj4erfX8QdGrl8uhLHXG3Y4wix23SnMW1PYvIn3xM
YENLFJTWKQGnGWbAIB95ec/6R8xq9wZbF9cwqtQe7olHmJnv0duftqDgr5UOnSLt
2lTR6/eewhamUxp0tv37KPk+NntOecGIwUnTcGvc90PnyyPxyklnru5MNUsffO35
9t+f68UqV901d+j6rmd64GyFIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQtRpmM
LrmgHh2h1v5nPEqlIym1MB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG
NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0
Rll6aUdwVGJ2N2tITDdGelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQhXiwHK83qc3cqrEWrXbT5HbYAktLa0aJfimShRahzgW4m+3mqPmR+XsWBvs
qrWj9ekt7EszdJgSQHB0UrgH8CdNUQep7zfrQn2jIRsOVC5yZJr1OtzJd8lcCYT8
hv2mWX/skkd53YfESaJTI3MLEF8OSkH0xP/3EXD3hXIGfR9FtgH229zKgwuhisnr
CBQXY929c20oDYEKhVKopdJWjmN2jiJA+Kky6ss95S8AzeJCA7og7W8j950Z2mA/
2/O/aGS+BHE6g6kY98BiXVFNhw3fm4Dtl6kGIkO+II7DnLcOdSsc2O+Hn4oEt2Qc
9cDv5XXrAroHrWBL1vmETXu6gw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:10 2026 by rpki-client