
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json)
Hash identifier: 9qoARBJtzxRTO1Mtm+1gKJDVoPR+R5C0h/8DonbCkJw=
Subject key identifier: 5D:0F:82:49:BF:8F:30:DF:1E:74:15:AC:BA:20:1A:17:92:7C:B8:66
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial: 3608
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
Manifest number: 3590
Signing time: Wed 22 Jul 2026 14:25:21 +0000
Manifest this update: Wed 22 Jul 2026 14:25:21 +0000
Manifest next update: Wed 29 Jul 2026 14:25:21 +0000
Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: boCvtYUkGqkQt7dZ1NzhG6xzztWBcHLvE5R4w7nH0gU=)
2: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=)
3: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=)
4: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=)
5: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=)
6: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=)
7: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=)
8: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=)
9: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13832 (0x3608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Validity
Not Before: Jul 22 14:25:21 2026 GMT
Not After : Jul 29 14:25:21 2026 GMT
Subject: CN=6a60d2d1-2be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:8c:cd:c6:d5:ee:fb:07:e1:cf:eb:c8:25:
92:ed:11:40:12:85:a2:de:6b:b1:a7:60:b4:89:c2:
e6:28:8d:bb:3d:cd:75:15:05:72:88:53:e4:b6:ad:
c9:dc:ec:99:e7:a5:5c:e5:4d:19:08:5a:0e:82:f5:
f4:a4:18:7e:c3:d6:c0:6d:a2:b9:b6:f3:94:25:e1:
da:9e:fa:e4:45:c5:01:df:5c:24:9f:40:a4:86:f5:
10:46:6c:c9:62:de:80:4f:74:76:1d:bd:ea:b1:bd:
3d:73:8d:58:1d:dc:4e:b5:97:86:0b:80:34:f3:2c:
15:75:45:78:24:89:db:5c:29:b1:9e:f4:6b:f4:95:
b4:0b:f5:a2:77:e6:d5:d9:4a:5e:c2:3e:d3:d8:6a:
9d:ed:81:52:29:05:38:f4:98:f1:9e:98:a1:3a:a6:
a4:6c:f9:5b:11:87:92:bf:10:b9:26:9c:9d:8e:da:
87:09:21:c3:a7:3b:ce:db:92:02:26:cd:ba:f2:33:
57:f1:0e:d6:50:df:69:45:ea:d3:69:33:a0:8c:5d:
2f:e2:a8:ef:17:76:aa:71:f5:9c:d7:f2:8a:93:c0:
47:0d:11:80:8a:78:7f:4d:53:1e:8b:95:21:eb:74:
fe:35:af:d0:81:24:40:83:2e:81:3f:cb:6b:a0:1a:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0F:82:49:BF:8F:30:DF:1E:74:15:AC:BA:20:1A:17:92:7C:B8:66
X509v3 Authority Key Identifier:
keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:84:8f:5a:d4:37:4c:f6:3b:28:c7:0f:ac:91:76:57:a6:
d9:9a:5b:0c:e3:aa:eb:1d:e7:14:49:83:85:4c:9d:2f:f8:c3:
dc:fb:40:a9:bb:c1:f6:77:d9:52:41:b8:9c:c8:98:67:f2:7b:
c4:a8:c2:e2:8b:a5:a0:b2:4f:7c:6c:c5:44:98:00:50:e9:e8:
a4:a1:8e:e6:eb:f6:d5:1f:c3:17:2b:b7:f0:8f:93:dd:02:76:
3a:41:ed:04:ae:aa:53:a4:d1:ec:2c:11:5e:6e:fd:e9:5b:3a:
3a:65:ca:3d:77:37:40:6e:c1:3b:a0:df:44:34:bf:49:99:23:
a6:be:b4:73:be:3b:9e:37:f4:0e:9a:5c:3e:21:a6:34:3b:ee:
9b:6e:0b:ac:5e:51:22:eb:cd:d7:14:a8:db:02:4b:1d:5a:1e:
1e:79:50:81:e9:b1:37:e0:93:ed:a3:91:e0:f8:9b:f1:fe:cc:
9f:b1:65:3e:43:1d:09:ca:d3:4c:a3:c2:8e:fe:8c:d8:b9:5a:
fe:ee:6e:54:d8:df:74:27:60:2a:f5:78:d7:4f:df:ef:e9:5e:
6a:2d:f0:73:56:14:6d:0a:a7:77:82:ff:37:10:24:86:01:9f:
cb:6a:5f:7a:e0:64:b0:4a:e8:9d:46:3b:b6:02:e3:49:f8:f4:
85:34:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:07 2026 by rpki-client