
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.mft
File: lckPE7iLVNi5Aowid2ir6Cyp0qc.mft (raw, json)
Hash identifier: SLziPEGUQ8cF/BGBH91LoqJx/NGPJoBHCEctp9mM+ZY=
Subject key identifier: 7E:F2:D5:F1:46:46:A2:2B:19:4A:37:9D:11:71:0E:1E:02:BF:94:D0
Authority key identifier: 95:C9:0F:13:B8:8B:54:D8:B9:02:8C:22:77:68:AB:E8:2C:A9:D2:A7
Certificate issuer: /CN=A918FD04/serialNumber=95C90F13B88B54D8B9028C227768ABE82CA9D2A7
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lckPE7iLVNi5Aowid2ir6Cyp0qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.mft
Manifest number: 16BD
Signing time: Thu 24 Sep 2026 18:18:08 +0000
Manifest this update: Thu 24 Sep 2026 18:18:08 +0000
Manifest next update: Thu 01 Oct 2026 18:18:08 +0000
Files and hashes: 1: lckPE7iLVNi5Aowid2ir6Cyp0qc.crl (hash: HtspDT821IHmCrhCybm4elz7tQzOcIg1hVLBKESgPSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.crl
rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lckPE7iLVNi5Aowid2ir6Cyp0qc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD04, serialNumber=95C90F13B88B54D8B9028C227768ABE82CA9D2A7
Validity
Not Before: Sep 24 18:18:08 2026 GMT
Not After : Oct 1 18:18:08 2026 GMT
Subject: CN=6ab56960-eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:50:d8:30:03:4b:c5:31:6b:54:c3:f0:94:
d3:98:75:57:b7:ab:c2:92:cb:4d:3e:56:46:38:c1:
07:5a:dc:75:8d:d0:a3:0b:62:59:c1:04:1d:dd:0a:
45:69:51:47:4f:3c:03:57:61:68:e1:e4:95:3e:d3:
c8:f9:6e:f2:b8:63:91:1e:73:25:d9:e3:2a:82:64:
0e:f0:1d:6c:7b:82:43:de:0e:1c:fd:35:7d:fd:10:
0c:b4:07:f9:ed:5d:f1:c8:46:58:e2:cb:aa:a7:b4:
33:6c:4b:e1:59:9e:8c:bf:0c:43:b9:e2:cb:2f:1c:
ad:a5:27:79:1e:b1:df:6a:60:88:ef:16:c0:2e:89:
0c:0d:ac:cf:46:98:5d:9a:1d:69:df:53:10:13:ab:
d2:3f:e3:0f:48:81:77:f6:d0:17:bc:a4:3a:a9:6a:
1f:b2:16:61:e1:7d:33:16:be:aa:f1:a7:29:47:61:
10:9a:44:6f:3f:8d:71:e0:97:85:93:42:8f:3e:8e:
f2:ee:b0:d9:df:f1:3b:54:cf:ce:fb:15:fd:44:02:
be:26:de:f9:5e:39:5e:1b:1f:61:f7:32:70:35:e6:
25:cd:d7:22:dc:96:7e:7b:96:62:2f:c8:f8:0d:27:
a8:19:8d:97:a2:77:d1:b5:f4:db:60:2c:32:62:d8:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:D5:F1:46:46:A2:2B:19:4A:37:9D:11:71:0E:1E:02:BF:94:D0
X509v3 Authority Key Identifier:
keyid:95:C9:0F:13:B8:8B:54:D8:B9:02:8C:22:77:68:AB:E8:2C:A9:D2:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lckPE7iLVNi5Aowid2ir6Cyp0qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:43:16:1c:38:70:55:ab:6c:46:92:24:8a:cd:a4:2e:b2:7a:
08:c6:9e:2a:72:9f:8e:09:5c:a6:25:77:3b:44:05:ce:38:64:
c0:b4:a4:d2:ae:1e:c1:1a:01:71:19:64:e4:e6:c7:fc:5b:b4:
80:c6:1d:b8:7e:61:32:ea:0b:83:e9:61:22:05:02:3e:ad:f8:
e6:38:d9:c7:3d:61:74:58:3c:73:75:03:2b:23:15:05:1f:5c:
c7:0c:46:db:94:30:27:45:b5:fa:c2:58:ad:fc:ff:ec:68:2f:
00:25:e1:d1:eb:2f:e8:4f:26:77:5d:64:9b:cd:84:22:09:3e:
15:69:3f:15:bc:15:ee:6f:08:9b:31:dc:be:72:d9:d2:ee:4e:
52:cd:3f:31:0a:ac:76:0b:d6:38:46:b8:3e:b3:a8:51:a8:bc:
73:7d:96:73:e1:a0:f7:42:80:7d:41:de:1e:ce:4e:ce:eb:2c:
7c:d9:ec:a8:c4:c9:5a:2c:ba:bd:7c:f6:6a:91:a0:5d:2c:7e:
0a:98:a8:e4:65:6a:e9:aa:53:34:f3:6f:fc:c8:77:69:87:45:
af:06:eb:a6:29:50:cd:79:55:74:0e:57:1e:02:c4:c8:48:bc:
c5:37:43:fd:4b:f4:bd:4e:04:58:05:1c:b9:25:bd:c5:ca:6d:
96:a1:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:52:48 2026 by rpki-client