
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
File: L_lZl1deZzKwh5DXV_bBoMXyu_o.mft (raw, json)
Hash identifier: EpEopYjArLqPKjTW4uxgsd2r1gV9t7d1laZiohxeJfk=
Subject key identifier: 21:1A:CF:C6:E8:12:D5:71:A5:53:91:6A:25:09:CC:21:92:C3:4F:4A
Authority key identifier: 2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA
Certificate issuer: /CN=A9187579/serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
Manifest number: 30
Signing time: Thu 23 Jul 2026 10:47:12 +0000
Manifest this update: Thu 23 Jul 2026 10:47:12 +0000
Manifest next update: Thu 30 Jul 2026 10:47:12 +0000
Files and hashes: 1: L_lZl1deZzKwh5DXV_bBoMXyu_o.crl (hash: cc3nQe4XZqlNnYxPkG3LoA9lZTO5z0S4cE2jHk0bToM=)
2: B84A6F2E4FF411F18E63268DB6833773.roa (hash: BI2faFTClY4g1rHtoS/vehoRqM4DrLlRB/gGKATWsKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl
rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187579, serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA
Validity
Not Before: Jul 23 10:47:12 2026 GMT
Not After : Jul 30 10:47:12 2026 GMT
Subject: CN=6a61f130-53f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:98:ef:66:1f:15:bf:87:a8:38:aa:7c:16:
0b:14:f9:9c:04:23:17:f3:07:80:e1:a0:da:e2:a9:
8c:c2:5f:b4:46:6d:1c:e0:c5:30:cf:f4:92:0e:0e:
f3:9f:4a:3e:3a:40:82:29:94:83:09:3b:f2:75:0e:
6f:b1:91:df:6e:7a:03:f8:47:f2:20:38:92:67:ef:
17:a8:41:c6:6e:0f:84:cc:92:d9:0b:47:30:50:6f:
36:4e:c2:37:b1:61:fb:38:84:a9:2d:b9:20:13:90:
50:94:30:ec:4d:83:b0:01:e4:4e:34:42:a6:8d:b5:
7b:cc:2e:f0:53:aa:0a:67:97:2a:e2:7a:8f:85:8f:
bb:6e:60:f0:8d:02:31:a1:d5:55:65:73:fd:4c:50:
7d:84:d3:7b:46:f0:cd:44:d3:a3:03:7e:0a:fe:cf:
c8:76:73:ce:a1:c0:be:6c:ba:6d:b3:7c:9b:c1:6f:
65:3e:ad:e8:ed:3b:1a:ac:93:40:b6:5a:75:20:91:
c4:37:3e:79:fb:c3:6b:1a:64:d6:85:54:81:59:bf:
e0:74:86:91:8f:cc:ba:dc:1f:75:48:5a:50:c0:da:
bb:e7:01:61:04:8c:13:83:11:c5:41:00:f6:c3:81:
c8:44:07:ae:82:56:13:7a:44:66:98:ac:17:e2:12:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:CF:C6:E8:12:D5:71:A5:53:91:6A:25:09:CC:21:92:C3:4F:4A
X509v3 Authority Key Identifier:
keyid:2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:d5:59:bd:8b:ad:a2:7a:9c:37:e4:a4:74:d5:8c:f4:31:00:
5b:7b:b7:f9:80:8c:5e:98:7c:f1:cb:34:89:4f:3a:13:b0:fd:
85:ff:77:80:6b:fa:26:c6:db:d9:da:95:49:ce:57:e5:f0:1a:
5e:11:dd:27:0e:2f:29:ec:a7:92:b5:35:e1:61:53:40:a9:8f:
f5:20:50:25:ee:dc:07:51:88:77:9b:c0:34:83:ff:49:3a:1c:
f9:7f:73:b0:b2:00:37:d5:18:5a:56:45:38:95:8e:be:87:37:
1a:b1:ac:bb:83:2b:b6:3d:89:46:35:08:b2:b1:fd:d2:35:94:
22:c2:c6:e0:c1:41:7d:ff:d9:5b:b9:99:e9:08:f2:e0:87:c5:
16:66:aa:5f:60:7d:b7:d5:67:a1:74:43:12:a4:85:7f:62:1e:
67:42:af:46:fe:d3:6a:8c:ab:78:cf:4d:05:a0:98:5d:6e:df:
fe:7f:6b:f6:b1:7e:98:91:e3:a3:74:f4:54:7a:9f:b3:70:89:
1e:e8:f1:ac:cd:41:0e:7b:41:64:e4:89:a7:ec:83:98:0f:8c:
aa:3f:d2:f4:5e:d4:28:44:5c:48:a7:b6:02:c2:b8:b8:21:af:
ed:ef:20:e9:c5:57:2a:4a:0a:39:61:3a:5e:90:db:f1:12:3f:
c9:d7:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:49 2026 by rpki-client