
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json)
Hash identifier: jY+b07ZrhJ+41PgZ/gXHZx6nZCriaqSiFif6Et1irwk=
Subject key identifier: F9:48:C4:C1:7D:68:20:F5:89:50:40:C2:A1:CC:1F:FC:05:53:11:DC
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
Manifest number: 0201
Signing time: Sat 23 May 2026 03:08:06 +0000
Manifest this update: Sat 23 May 2026 03:08:06 +0000
Manifest next update: Sat 30 May 2026 03:08:06 +0000
Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: bey5OhPl9XFpHLveh7M1dGHRmucGFsGUQ/Ss9vw+Ww0=)
2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: GghlvZSMgFSIPZl/c13nz5F4JJXOhoiY0qEmjni18nQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 03:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Validity
Not Before: May 23 03:08:06 2026 GMT
Not After : May 30 03:08:06 2026 GMT
Subject: CN=6a111a16-1110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:08:1b:9b:d5:58:8e:f5:8a:fa:7f:0d:8f:
4e:2c:87:ff:33:f6:a2:94:4f:7b:7e:46:c7:75:e0:
1f:ee:20:6f:6f:7e:c4:ef:82:fd:23:9f:83:83:2b:
65:a6:6b:58:27:75:d6:b0:1d:d1:63:b0:e8:33:ae:
ae:bb:9b:e1:6e:fc:31:64:dc:08:5f:7e:14:92:3b:
ee:ed:ee:68:cd:ce:af:27:b2:e6:15:ad:42:73:11:
a6:b8:19:91:47:29:2f:81:cf:1a:a9:77:87:61:2a:
d0:df:2d:7f:93:dd:64:be:f3:db:d4:1a:bd:71:0b:
bb:e4:63:5c:dc:00:b0:fa:2c:24:48:8f:c6:18:a9:
19:2c:38:0c:a1:eb:d1:f2:1a:69:24:bc:eb:7f:43:
7e:92:78:df:18:31:e8:27:36:55:65:69:6c:e0:3c:
c1:d8:25:a6:ad:ed:5c:59:34:b0:a3:39:73:42:92:
e6:39:9e:59:67:48:f7:75:bf:a2:76:bc:f5:9b:ed:
99:ba:9f:1a:7b:bd:cf:95:ad:68:a0:62:e4:b6:e0:
9b:e0:7c:4c:53:18:73:59:85:89:c2:b5:0f:a6:32:
45:8c:fd:4e:92:3c:1e:d7:88:09:4b:30:aa:7f:0a:
ca:b8:d8:be:86:b1:83:37:a0:2f:45:f9:7b:e9:50:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:48:C4:C1:7D:68:20:F5:89:50:40:C2:A1:CC:1F:FC:05:53:11:DC
X509v3 Authority Key Identifier:
keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4d:aa:73:14:da:32:7e:22:45:92:6e:3d:ca:0a:6c:ab:87:
f0:24:d4:c4:dc:fc:7c:da:a5:22:36:d6:91:f1:d7:f3:a0:06:
0b:cc:09:d4:a2:7f:68:86:ac:90:c5:5e:e2:7a:26:8b:86:ef:
25:8b:24:8b:9b:4f:a8:51:30:69:f2:98:03:d5:9a:90:34:25:
63:52:a7:38:27:22:36:87:13:cd:e1:d7:c5:b9:9e:0a:ff:c4:
af:4b:dd:a8:22:cd:ca:3b:21:7e:5a:9a:1d:9a:ba:17:1b:aa:
18:f3:63:8f:c2:b2:90:04:ae:97:be:d6:6c:04:a0:8a:f4:11:
02:84:b9:74:52:b4:88:14:f3:25:d0:53:f6:10:95:8b:a5:06:
12:ae:e7:fd:93:4c:d7:a0:69:90:36:9d:b5:08:ce:cc:5e:bc:
06:24:98:1d:5e:9c:d1:a6:ec:3f:86:31:90:80:6d:44:2c:0f:
ba:8e:10:07:e1:2a:a1:8d:47:bb:81:49:95:65:57:c1:b5:07:
bd:42:b1:cf:c6:fb:8e:89:80:34:45:95:48:b7:27:5a:5c:5d:
d4:7a:1b:a9:83:2e:37:55:f4:12:67:56:d1:c1:a0:e9:48:e4:
1c:e3:b0:e6:8b:82:d1:ac:de:64:1b:24:bf:bd:21:ab:dd:d8:
fe:a6:87:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz
NDUzQThGNTIwHhcNMjYwNTIzMDMwODA2WhcNMjYwNTMwMDMwODA2WjAYMRYwFAYD
VQQDEw02YTExMWExNi0xMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1UIIG5vVWI71ivp/DY9OLIf/M/ailE97fkbHdeAf7iBvb37E74L9I5+Dgytl
pmtYJ3XWsB3RY7DoM66uu5vhbvwxZNwIX34Ukjvu7e5ozc6vJ7LmFa1CcxGmuBmR
Rykvgc8aqXeHYSrQ3y1/k91kvvPb1Bq9cQu75GNc3ACw+iwkSI/GGKkZLDgMoevR
8hppJLzrf0N+knjfGDHoJzZVZWls4DzB2CWmre1cWTSwozlzQpLmOZ5ZZ0j3db+i
drz1m+2Zup8ae73Pla1ooGLktuCb4HxMUxhzWYWJwrUPpjJFjP1Okjwe14gJSzCq
fwrKuNi+hrGDN6AvRfl76VDQzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlIxMF9
aCD1iVBAwqHMH/wFUxHcMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2
OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt
c0syUzZ6OEtmSzgwVTZqMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqU2qcxTaMn4iRZJuPcoKbKuH8CTUxNz8fNqlIjbWkfHX86AGC8wJ1KJ/aIas
kMVe4nomi4bvJYski5tPqFEwafKYA9WakDQlY1KnOCciNocTzeHXxbmeCv/Er0vd
qCLNyjshflqaHZq6FxuqGPNjj8KykASul77WbASgivQRAoS5dFK0iBTzJdBT9hCV
i6UGEq7n/ZNM16BpkDadtQjOzF68BiSYHV6c0absP4YxkIBtRCwPuo4QB+EqoY1H
u4FJlWVXwbUHvUKxz8b7jomANEWVSLcnWlxd1HobqYMuN1X0EmdW0cGg6UjkHOOw
5ouC0azeZBskv70hq93Y/qaH8A==
-----END CERTIFICATE-----
Generated at Sun May 24 04:37:19 2026 by rpki-client