
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft
File: lMPujMByTro8sQMk-e24G6yFAyA.mft (raw, json)
Hash identifier: +R7fPZEFpzsv2QgXbAFCwGfdQBXCem8c0lc+S+RsWhs=
Subject key identifier: F1:76:6B:50:5A:87:18:84:70:F2:78:C5:14:4B:18:5B:65:9F:4F:D5
Authority key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20
Certificate issuer: /CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft
Manifest number: 01D3
Signing time: Mon 11 May 2026 03:36:50 +0000
Manifest this update: Mon 11 May 2026 03:36:49 +0000
Manifest next update: Mon 18 May 2026 03:36:49 +0000
Files and hashes: 1: lMPujMByTro8sQMk-e24G6yFAyA.crl (hash: QEM2//Creeb0GwrQ1QCqSj0FIqJDpCRNCcW0GKRkZps=)
2: 5E3ADA8C81CF11EE9AB1F360C4F9AE02.roa (hash: v1uuoVFUnedlDTjjrQCWqm2VkiqYxyN2FpeHQY4I9y4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl
rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197DD5, serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320
Validity
Not Before: May 11 03:36:49 2026 GMT
Not After : May 18 03:36:49 2026 GMT
Subject: CN=6a014ed2-c866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:6f:8e:aa:ed:c2:dd:f2:20:93:43:ce:ff:
25:c0:80:a6:80:06:5c:e5:8b:68:6c:64:ea:05:42:
1a:fe:d8:12:e4:ab:b3:cb:7d:54:77:44:33:cd:95:
e0:55:d3:37:16:ea:4d:f1:79:4b:57:89:b1:cd:68:
c0:ba:6a:67:e8:35:8c:bc:f4:bd:f3:86:bf:08:11:
c1:ee:53:9d:6d:7a:5f:d6:be:57:11:4b:49:e0:75:
6f:e7:92:4c:ee:dd:ca:42:2f:0b:c7:ce:57:7d:cf:
81:90:8a:5d:51:55:28:d4:23:60:d3:29:54:01:c5:
6d:93:36:ab:35:62:73:ed:b7:75:46:72:82:0e:f6:
2b:37:33:c0:2e:14:7b:d0:8d:39:29:e1:84:60:da:
82:d4:26:4e:8f:b9:7b:77:73:6c:ae:7b:c7:74:d3:
eb:b8:0d:d0:c5:42:bb:45:05:2b:98:ec:14:7e:0b:
ff:bb:aa:47:a7:a8:23:3c:d6:ee:20:40:ad:46:12:
f5:e8:52:76:ee:8c:88:fd:6b:fd:e9:6f:c4:34:cf:
c0:d0:8f:27:47:b7:b3:0f:8e:6f:35:69:fd:8e:95:
62:a3:3f:ad:ca:52:1e:8e:d6:ec:17:7b:2f:52:ee:
a7:93:43:bb:33:44:48:08:bd:ad:78:9a:b4:34:da:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:76:6B:50:5A:87:18:84:70:F2:78:C5:14:4B:18:5B:65:9F:4F:D5
X509v3 Authority Key Identifier:
keyid:94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b8:3e:6a:73:65:80:7f:1e:c8:7e:78:ba:a6:80:2b:f7:3e:
7d:70:a9:02:a6:89:15:e6:8b:50:b9:27:4f:cd:36:46:09:42:
83:5d:5e:b9:a7:b8:78:96:6a:aa:b7:84:79:5a:93:d8:60:a7:
cf:4d:44:d9:d4:01:37:0d:04:37:4a:b1:e1:a2:e5:89:98:7b:
3b:4c:16:6d:e9:4b:45:47:7e:2b:67:d6:05:41:43:01:53:de:
91:f5:8e:e7:cd:41:47:c9:26:94:04:8f:c8:5e:e9:f4:13:65:
16:7d:d8:6a:19:4a:94:1a:da:dc:95:f3:db:9f:26:f4:59:93:
c8:eb:6e:47:be:27:a2:35:3d:c5:11:b5:66:58:cc:e4:69:e3:
57:ac:5d:99:d2:0a:02:71:d7:58:dc:5a:39:54:2f:47:dc:1b:
97:a8:19:02:89:6a:e3:17:b6:fa:ef:a0:41:67:68:cd:84:3b:
25:a0:86:76:3b:02:f9:0e:52:00:58:a0:b2:24:2d:e6:3c:e3:
98:ac:51:e7:6b:43:31:08:69:7c:4d:2d:a0:89:8e:85:25:b6:
d1:10:6c:82:21:27:84:30:9b:3f:60:0d:fa:c9:19:dc:50:82:
0c:5c:2c:44:4b:d6:6a:81:ba:3f:ed:e9:21:fd:6d:d8:61:d8:
7c:41:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:01:23 2026 by rpki-client