
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json)
Hash identifier: Xhk20NfbcEskBc8SnotJ/9fWUA0we7Lte6GqbEXa2bU=
Subject key identifier: 02:73:69:50:79:41:84:7D:F8:E4:F6:4D:5D:71:6C:17:A4:2B:45:6D
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial: 35CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
Manifest number: 3553
Signing time: Tue 24 Mar 2026 14:24:39 +0000
Manifest this update: Tue 24 Mar 2026 14:24:38 +0000
Manifest next update: Tue 31 Mar 2026 14:24:38 +0000
Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: ygJ+MNDTWMSxAhY+zMDarKx2WJXxu7BE6mVd6HoIWrg=)
2: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=)
3: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=)
4: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=)
5: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=)
6: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=)
7: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=)
8: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=)
9: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13771 (0x35cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Validity
Not Before: Mar 24 14:24:38 2026 GMT
Not After : Mar 31 14:24:38 2026 GMT
Subject: CN=69c29ea6-7211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:4b:bd:74:04:df:58:78:c8:2b:cc:35:ae:
b5:27:7a:bd:57:16:33:52:bd:89:b2:19:9f:52:b9:
62:5b:1c:30:77:7f:85:c4:6a:ad:f7:26:2f:16:e1:
a6:d0:66:f2:23:8d:f2:91:17:5c:0c:0a:1a:7b:ab:
c3:be:78:b9:5d:1f:07:73:78:9a:3f:9c:90:d5:3e:
4a:66:bf:63:4a:e2:29:12:c8:91:04:1f:05:70:44:
57:de:ea:f6:3f:90:47:4e:6b:b4:87:40:b5:ec:e8:
f0:68:e6:33:de:f2:57:fe:65:27:77:cf:51:08:6c:
66:04:cc:8c:b9:9f:c8:54:d5:41:68:3e:bb:9d:c9:
33:14:7e:20:85:d6:95:82:9e:09:9c:de:14:44:2a:
03:ba:24:32:51:77:ab:40:89:96:98:81:28:a0:17:
79:42:6c:49:4d:8f:d1:26:c3:b6:77:a6:45:68:24:
bd:7a:c7:e0:ed:ae:60:46:e0:92:08:69:fb:e1:03:
fb:1a:75:76:69:a6:ec:02:6f:92:0f:dd:22:e5:26:
f1:57:f2:71:8a:08:64:a6:e1:7d:8c:1c:e5:25:01:
a5:16:f2:7d:bd:54:a1:bc:f5:6c:4b:06:da:1a:c3:
5c:b0:6d:4a:e2:56:84:21:90:cf:78:45:f1:ca:43:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:69:50:79:41:84:7D:F8:E4:F6:4D:5D:71:6C:17:A4:2B:45:6D
X509v3 Authority Key Identifier:
keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:17:9e:4f:4b:c2:0d:63:4c:0e:a4:5c:53:e6:57:60:83:cd:
60:5f:a5:0a:71:f4:0e:e9:5f:82:d0:85:c9:0e:23:0a:05:18:
f1:ff:5c:34:bc:2d:f1:e8:82:a8:fd:2f:c7:cf:c7:13:6d:72:
9a:8f:0b:d1:c9:f2:a8:5f:4f:ef:c3:e3:c6:7e:aa:64:c1:7e:
67:fe:de:37:c5:9d:de:26:02:bf:e4:b2:b3:30:84:36:52:10:
43:dd:26:33:a8:f2:37:16:bc:90:e0:1c:c6:5a:d9:88:4a:84:
c5:29:51:7d:95:ef:5a:31:e4:4e:9c:69:1c:e7:ed:5b:46:67:
80:7c:19:3b:db:3d:68:de:88:9f:88:4e:b8:c2:93:e5:a7:ec:
3f:95:7c:27:06:fd:ec:d9:bc:20:8b:80:82:7a:05:30:f2:ed:
fd:dc:9a:49:be:d8:2c:71:79:49:82:f5:58:cb:8d:08:59:1c:
b4:1d:c0:96:2d:43:88:86:06:7d:5c:4a:41:c3:84:45:f2:e9:
27:54:94:8e:68:bd:98:53:21:8a:9b:c2:fb:3b:e6:cc:fd:e2:
87:fe:16:a2:f6:73:2f:d1:cc:41:98:9e:9a:cf:36:95:67:23:
1f:bc:85:64:3c:f3:7e:9b:16:21:25:a2:ea:00:cd:b6:6a:d9:
97:d8:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:49 2026 by rpki-client