
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json)
Hash identifier: 8iZS3jFFagXt9x/mZy+owqMngbRlrNxLva80MsF7wQU=
Subject key identifier: 3C:EA:F1:AA:EB:8E:5B:1E:A4:07:5E:34:F5:D0:34:2F:99:79:57:C0
Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Certificate serial: 21BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
Manifest number: 21BB
Signing time: Tue 12 May 2026 15:54:24 +0000
Manifest this update: Tue 12 May 2026 15:54:24 +0000
Manifest next update: Tue 19 May 2026 15:54:24 +0000
Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: PH2jzvGELtTblPhc6uMRngNorhaU9o9iAgP+L/urM0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8635 (0x21bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Validity
Not Before: May 12 15:54:24 2026 GMT
Not After : May 19 15:54:24 2026 GMT
Subject: CN=6a034d30-0da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:dd:8b:94:f5:e9:be:1c:3f:eb:e6:be:a5:
25:89:7a:ed:ec:4c:5a:eb:19:80:40:c3:b7:30:30:
64:70:70:37:3b:50:ac:48:7b:63:e5:13:a6:c4:7c:
66:f0:40:2c:fe:fe:27:30:3c:f3:3e:12:75:e7:12:
94:11:13:f7:a2:5b:bd:5c:84:2b:84:5b:b9:1b:94:
c4:e0:89:0b:fe:c3:b6:60:3a:6d:4b:4d:d5:ad:0e:
d7:69:4a:af:9c:89:f2:db:df:0c:85:73:ec:54:29:
43:13:2b:ae:64:df:ef:89:45:d1:ac:26:52:d1:11:
85:4c:e2:39:02:f5:d6:86:74:77:f9:a0:eb:9e:e7:
7f:a2:96:43:2c:94:e6:69:e9:d4:e3:d4:c8:d4:dd:
2c:9f:7f:bd:ef:a1:9b:16:61:27:7f:1f:32:0c:e9:
01:77:18:4d:d3:1a:a3:ef:f3:4e:06:2e:da:fe:ab:
b0:2b:82:93:6f:49:6d:bd:e6:08:69:52:c7:63:4d:
63:e5:d5:b2:e3:0a:53:08:62:44:1a:5f:7b:0f:e9:
e1:c0:48:23:c5:84:d7:94:ee:fb:82:50:24:d2:57:
c0:1c:f3:6b:15:42:91:30:f1:4c:4d:12:a8:f5:0e:
f1:77:f9:26:cc:5a:18:c0:d3:9a:25:39:b0:2b:7c:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:F1:AA:EB:8E:5B:1E:A4:07:5E:34:F5:D0:34:2F:99:79:57:C0
X509v3 Authority Key Identifier:
keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:3b:f3:6f:d9:7d:e1:e7:45:0e:ac:bc:b2:d5:e6:ea:0d:57:
12:2b:19:e9:6f:58:17:e7:60:fb:71:12:f2:c7:19:30:22:b8:
ff:e5:51:f4:c8:f9:e8:13:ee:5b:77:65:0a:27:78:b5:4a:4f:
d9:50:02:27:5e:37:dd:02:82:f3:2d:a2:f6:36:95:f8:68:39:
4d:46:1f:45:b3:5d:95:00:d9:15:57:ec:f9:19:60:c9:16:9d:
bf:61:aa:1b:73:00:c0:5d:a5:47:9a:bd:df:81:2f:e0:81:00:
17:f7:8b:ce:dc:5c:0a:9b:2c:e9:3d:70:e9:91:39:91:fb:25:
96:19:15:fa:b3:38:94:b3:f1:72:35:6d:32:82:9d:fc:4b:45:
60:e6:69:d2:d5:48:cc:0b:ea:65:36:0f:b3:4f:0a:cb:9b:ba:
a1:d8:dd:24:21:cd:02:14:ee:e2:c1:c4:3a:5d:e0:40:00:53:
3c:f0:74:e4:f8:ef:12:a7:28:e0:45:34:90:50:2c:55:11:6d:
75:24:64:08:60:56:10:8f:66:7e:35:f6:ca:de:c2:07:00:b3:
a1:87:56:06:06:89:58:86:e5:44:8a:04:f4:b3:22:cc:82:6e:
95:2e:c6:31:4e:60:d6:aa:cc:0c:a5:a5:df:b7:02:67:d0:9a:
33:94:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:26:23 2026 by rpki-client