
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json)
Hash identifier: qKEMaJcm1OMmSHVTmH0HCXy8qlRLaDgzAoIyNkevNJA=
Subject key identifier: 18:58:AF:F0:FD:99:D7:CF:B9:5A:5C:C3:C5:FB:4F:3D:F6:0B:98:90
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
Manifest number: F3
Signing time: Thu 21 May 2026 06:45:06 +0000
Manifest this update: Thu 21 May 2026 06:45:05 +0000
Manifest next update: Thu 28 May 2026 06:45:05 +0000
Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: Z9dJMgOkIAHEritpGSghMuhLoc4xrK/+UPCUr2uotCo=)
2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: PannZ6VHlnMlbIAiTwMXrhZQx+rOzoDIuG7Svi8FR6k=)
3: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: KaHspWR0HemZK0q9LOChU8le2zgj9l3UI0kexYlJ+/g=)
4: C8171E8EC04D11F081466417C4F9AE02.roa (hash: F2rHWA0aG3jOYck+BArfetJHmQYT8RWz4zDyWgQQ0/Q=)
5: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: emwrRh6MHxR/MKG/kZ4kbsedosRabW/yCqw67x249ko=)
6: D87376860A1511F09D97420DC4F9AE02.roa (hash: 8lzuSsXoeVTLO94cZnbjFM82UzyIWVo6xrDZpzd/rnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Validity
Not Before: May 21 06:45:05 2026 GMT
Not After : May 28 06:45:05 2026 GMT
Subject: CN=6a0ea9f2-b64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:da:6c:7f:00:c5:f5:66:3b:7e:47:a8:aa:
e0:00:f3:8c:42:a8:f9:1b:d0:c4:b7:f4:2d:fa:61:
3d:ed:26:4e:27:14:ce:b9:89:32:42:76:ab:9c:b7:
a7:ed:17:7a:80:17:42:37:a2:de:c3:7b:3a:2b:94:
ab:a8:8d:6e:6e:db:1e:26:f7:cd:5e:fa:bd:f4:8b:
e1:2f:4a:4a:25:3c:45:5c:13:2d:55:25:b1:f5:21:
5e:ed:a1:45:1e:e1:fe:f2:5d:79:f4:73:6c:5e:e5:
1e:e9:50:c7:f3:71:71:77:c2:73:c9:c1:7b:d7:4d:
71:62:8b:1b:66:d1:dc:70:2d:76:8a:30:8e:d9:64:
32:10:0a:61:ec:c1:11:d1:84:0b:23:2a:a8:5e:25:
6c:28:da:32:1c:34:4f:59:6b:9e:37:29:e7:8c:5c:
e7:5f:b0:43:17:7c:0b:dd:d8:a8:0c:f3:52:0f:59:
26:98:84:37:56:ed:8d:90:ed:66:fb:01:ff:4f:6f:
01:89:59:a8:e9:76:3d:f4:d6:a1:81:de:76:ad:05:
57:bd:7f:1f:25:32:82:b1:e9:c5:ae:4d:ef:4e:67:
ba:fc:1e:4f:d1:d5:7d:43:52:5f:63:03:67:62:ae:
12:06:d8:08:cf:4a:33:a3:78:6b:7d:8d:b2:31:e7:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:58:AF:F0:FD:99:D7:CF:B9:5A:5C:C3:C5:FB:4F:3D:F6:0B:98:90
X509v3 Authority Key Identifier:
keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:59:d3:b5:e9:44:58:39:3f:6e:a1:27:ca:d3:e9:29:9b:19:
f9:3e:2b:e1:8a:7e:53:4b:94:de:d6:38:c4:ac:c3:69:44:55:
a2:f3:9a:18:a7:a9:c8:db:bb:c5:cd:17:7a:0e:dd:de:b7:11:
9f:74:81:ab:6e:cf:ee:66:ee:8f:0b:7c:ad:81:75:df:5c:7e:
39:4c:49:dd:f4:f9:54:51:9d:ca:be:b0:f2:ad:d8:8f:eb:6e:
65:25:5b:26:e7:1d:bf:59:0d:cc:f8:00:b4:aa:fc:bc:55:5b:
c0:4e:bf:21:1a:f9:e9:49:90:8c:15:a4:bf:0e:46:01:fd:55:
67:e6:44:a7:d5:19:53:aa:64:3e:f7:5c:32:25:37:fd:5c:05:
0b:08:86:4b:e3:f9:7a:dd:5c:53:aa:7e:3e:f3:40:be:75:b2:
f6:b4:2b:57:a6:42:a7:a7:05:78:da:5e:6d:56:4d:4e:bb:b3:
ba:25:6a:08:94:01:15:94:2a:5b:50:0c:6f:ad:b5:7a:3c:81:
45:70:49:c3:83:d6:06:d6:28:7e:4f:36:9b:f0:37:94:b4:17:
35:80:50:2b:3d:3b:95:a1:f5:02:43:fa:71:3c:dd:14:b3:4a:
0c:a7:e5:ad:43:23:12:c5:46:93:d3:ba:8a:f6:ef:7f:a9:56:
2b:50:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:17 2026 by rpki-client