
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
File: len3la_fIgULvTA6j619nI1G_Eg.mft (raw, json)
Hash identifier: bjrtswZ9kH0oEADSfBhLC8WrYTKhFb8GCkw//XWRp1Y=
Subject key identifier: 14:A0:02:7A:B6:9F:AD:16:29:0D:4A:69:84:95:38:C1:C8:3C:C4:64
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Certificate issuer: /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial: 06D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
Manifest number: 06CB
Signing time: Wed 20 May 2026 22:21:03 +0000
Manifest this update: Wed 20 May 2026 22:21:02 +0000
Manifest next update: Wed 27 May 2026 22:21:02 +0000
Files and hashes: 1: len3la_fIgULvTA6j619nI1G_Eg.crl (hash: 67Gr0XkX9JXRg7I4JjYyfDk7AKCC4bKlHqGFw/baCHs=)
2: FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (hash: EhzEr12MKYRhFjAu1OCUgJCldiu5pOljwgsY2sAb5cE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746 (0x6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Validity
Not Before: May 20 22:21:02 2026 GMT
Not After : May 27 22:21:02 2026 GMT
Subject: CN=6a0e33cf-506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:1b:62:b6:be:b4:46:95:f8:17:ea:29:ea:
c4:e4:5e:90:32:12:80:1b:21:cc:34:e8:ed:57:ef:
40:f0:e4:7c:36:bd:bb:ce:56:11:ee:0e:69:bf:a8:
50:b3:64:79:ff:cb:9e:dd:7c:46:20:44:cd:a8:ef:
b2:c8:2c:78:4f:5c:1e:cd:b4:9f:b2:34:4a:1b:42:
fc:16:e5:68:6d:23:06:16:d4:74:57:88:f9:8d:87:
9d:c0:33:9a:bb:ea:97:3a:72:90:3d:cc:98:03:46:
73:17:06:ab:f0:c3:0e:c2:6b:30:c8:7a:2f:82:0f:
ff:69:1a:eb:4a:b6:aa:a5:d5:5f:46:45:3a:f5:a3:
78:39:93:65:f2:2e:d5:65:52:0f:44:8e:58:1a:be:
91:65:40:ef:ec:81:32:67:5c:5a:ed:12:47:3a:5d:
46:40:1c:b4:58:2d:ac:a5:e5:f2:80:6f:5d:b8:d1:
81:a8:be:df:e7:09:f3:b7:b4:eb:7c:31:82:47:45:
18:99:3a:5e:aa:d7:4d:4c:20:f9:5e:42:8f:fe:64:
75:85:a1:a7:0c:4e:f2:96:ec:83:66:30:fc:3a:32:
2c:0b:54:50:4d:57:08:f6:34:df:54:83:fb:87:e3:
43:c5:65:49:54:bb:e0:4d:50:56:4e:6c:b9:dd:aa:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A0:02:7A:B6:9F:AD:16:29:0D:4A:69:84:95:38:C1:C8:3C:C4:64
X509v3 Authority Key Identifier:
keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:c9:92:16:46:ad:ef:94:a4:4d:6f:3a:fd:f8:35:6b:d9:
27:30:fc:53:89:41:d4:7a:6d:22:71:46:65:28:fe:3b:3e:5f:
81:95:22:d0:9e:09:85:77:fa:9c:b0:37:75:82:b7:ba:e6:73:
61:c5:ab:cf:40:12:2b:01:fc:12:91:65:36:27:48:93:0c:aa:
74:24:b6:68:f4:30:2e:3e:7c:ea:51:98:eb:6e:29:3a:79:2c:
4c:3c:e4:5c:c4:51:9b:1c:e7:2e:07:c0:6b:59:79:60:0f:a8:
3c:18:32:9a:35:f8:7c:97:ef:f5:3b:b4:e9:7f:e4:c6:4c:ef:
4c:e5:2a:cd:b9:bb:89:b3:78:ee:61:9c:c9:0e:d0:68:44:08:
e9:21:52:20:74:67:31:3f:ab:73:9b:56:fa:4a:83:de:60:d1:
71:e9:31:dc:16:64:00:f3:32:b6:61:77:10:43:ba:0f:e7:66:
eb:93:a5:b0:71:dc:76:91:76:b1:af:d2:83:29:39:57:7b:31:
9f:0c:9b:8c:12:d7:32:48:23:6e:5f:dc:13:19:ca:72:37:1b:
19:9d:21:08:c9:0d:50:f8:c9:e3:14:dc:91:da:66:f2:90:f6:
73:33:55:b4:71:7d:98:27:ae:67:e7:0f:bd:52:17:29:c9:1f:
b3:63:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:13 2026 by rpki-client