
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json)
Hash identifier: d099NCrnyP5btrcLXtWJRVWGYcX07TyC4b2u2t/ERFY=
Subject key identifier: 2A:DB:3C:DB:74:50:FB:69:E2:FE:37:BF:1A:F1:82:17:34:AD:30:6E
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
Manifest number: 0217
Signing time: Tue 07 Jul 2026 03:44:51 +0000
Manifest this update: Tue 07 Jul 2026 03:44:51 +0000
Manifest next update: Tue 14 Jul 2026 03:44:51 +0000
Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: TPVxGp6H8t7Cc3iMfsAKsWCftneEMWtg6sldV7D6tUQ=)
2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: GghlvZSMgFSIPZl/c13nz5F4JJXOhoiY0qEmjni18nQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 03:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Validity
Not Before: Jul 7 03:44:51 2026 GMT
Not After : Jul 14 03:44:51 2026 GMT
Subject: CN=6a4c7633-f23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:46:a0:98:29:91:c9:02:af:25:39:f4:d1:
1e:77:01:d6:52:a6:19:4e:b7:c2:7c:1c:2d:b3:1d:
00:6c:b3:2b:07:b4:8c:f1:a4:9f:76:6d:02:11:56:
2c:38:28:cc:c8:23:db:7c:50:6e:6e:96:f2:cc:da:
76:0d:ea:21:cd:96:c8:9b:55:ac:56:ea:84:ed:90:
58:5b:02:26:5e:49:8e:d5:25:b0:2c:d5:bf:b8:cb:
0b:83:32:8c:e0:95:6a:6b:06:d8:1c:cc:24:e4:a1:
78:98:af:c4:54:60:5d:c8:3b:fb:24:25:d6:af:34:
6c:d2:0f:34:c6:b9:6e:18:2e:89:71:0f:3f:ba:d0:
3b:4c:29:98:80:93:a0:d9:76:79:46:72:e5:a4:b1:
4c:98:fc:9b:13:a3:1d:ef:5d:a4:25:9e:1c:27:da:
84:5f:97:21:55:94:2d:0a:e4:86:9a:ba:e3:73:b8:
d6:63:4f:07:d7:cc:bb:71:0b:fe:bb:b3:88:6b:80:
e1:aa:e5:6e:4a:98:4a:10:6c:f4:90:38:63:1d:83:
44:e2:a0:47:3c:1a:44:72:26:f5:5f:d3:2a:d2:fc:
3d:4d:d7:c6:6e:7f:b6:cb:c8:67:02:04:a3:a5:a5:
9d:e6:9c:de:db:b5:ec:16:04:2d:8a:ac:41:d4:8e:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DB:3C:DB:74:50:FB:69:E2:FE:37:BF:1A:F1:82:17:34:AD:30:6E
X509v3 Authority Key Identifier:
keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:78:1a:e9:35:02:82:d4:cc:98:fd:fd:f5:76:60:22:eb:42:
3e:06:a4:23:a8:8b:48:4a:88:4b:c3:c9:e0:69:b6:47:8a:ba:
bb:16:49:a6:9b:2b:6d:8a:4b:7b:11:a9:a5:ed:ed:42:74:46:
76:31:e5:58:71:99:4c:ed:f2:7b:57:b6:42:ad:38:de:bb:34:
59:4a:9f:56:61:c6:10:03:46:40:1b:0c:49:eb:36:62:26:2c:
c5:f0:c6:11:be:60:88:6b:48:98:d8:09:c2:e3:a0:63:f8:7c:
a0:54:aa:45:27:e3:33:22:e6:c8:5a:6c:17:80:33:95:af:ee:
f0:83:6a:1e:f6:ce:75:43:38:b2:74:4c:67:ad:d3:f3:39:ee:
f7:f0:65:29:fd:24:65:cf:ad:d1:ca:66:e7:c1:6a:a4:54:6c:
76:3a:c8:ce:be:58:72:b0:6e:24:11:a2:56:e0:98:e2:73:23:
37:9b:c4:5c:e1:9b:de:68:16:95:8b:ce:df:20:a4:9c:54:c3:
7c:4e:2b:f1:a5:64:4c:67:fc:65:76:b1:b3:1e:99:db:5b:03:
f8:96:c7:bd:06:f7:d3:84:53:01:b1:aa:00:57:52:f7:60:e9:
9a:a3:01:21:5c:41:08:0f:8f:80:c6:5e:24:87:87:6e:6e:f7:
2d:37:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:08 2026 by rpki-client