
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier: porfabNrE2U7aVNHVes50QSqX4VTi5N+eYPii08xeGM=
Subject key identifier: F2:81:62:88:50:97:8A:5E:AE:20:FB:69:7A:67:56:80:F5:B6:DB:3D
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial: 0BFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number: 0BF4
Signing time: Mon 22 Jun 2026 18:52:13 +0000
Manifest this update: Mon 22 Jun 2026 18:52:12 +0000
Manifest next update: Mon 29 Jun 2026 18:52:12 +0000
Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: u9x2/kOYqOaIda+T6fOZnkUFklXkiqOBRR5v77nrxYk=)
2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: 57IyN+j5ROGuU5ynfQIQti4jxcGtYYtyy6B0K7wr+nU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3071 (0xbff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Validity
Not Before: Jun 22 18:52:12 2026 GMT
Not After : Jun 29 18:52:12 2026 GMT
Subject: CN=6a39845d-9be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:b2:b9:3a:83:06:70:d8:21:c8:3b:2b:62:
7c:f6:30:04:c9:68:57:fd:6e:89:f8:6d:92:c7:1d:
f9:bb:71:04:86:b7:01:80:4b:32:39:c6:8d:df:bc:
ad:6c:51:ff:85:5e:94:b3:f8:98:39:f2:bc:4e:88:
3f:f9:45:16:ab:1a:3e:4b:e2:c0:36:4e:b2:fc:60:
c4:93:61:61:6f:4e:e0:02:ba:9f:c1:d4:7a:59:b6:
f4:a9:9c:ef:1c:91:a0:c0:5c:80:28:af:24:c7:72:
2c:a1:0a:f0:64:3b:3d:93:26:60:23:9b:ac:2e:db:
59:07:c0:90:fb:b3:2b:55:19:73:8f:69:26:7e:36:
8b:2b:a2:96:f2:c3:7e:d3:90:c8:60:7d:4e:17:59:
0d:34:a3:3c:1a:1b:d3:58:9d:44:df:bd:95:d0:04:
1a:57:c0:ee:cb:3d:2e:8e:e5:17:35:5c:e2:ef:9d:
24:65:46:d3:31:2b:1f:35:8f:94:83:10:5e:21:24:
0d:eb:50:3f:6e:53:62:64:38:0f:fd:67:c6:2b:04:
80:a8:39:60:e9:cc:c6:c9:44:7d:39:b5:54:b8:f2:
ed:e4:44:fc:61:41:28:13:b7:e3:59:a3:6e:3d:9e:
ca:1f:17:b3:aa:73:fd:1c:73:f1:12:28:d3:16:18:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:81:62:88:50:97:8A:5E:AE:20:FB:69:7A:67:56:80:F5:B6:DB:3D
X509v3 Authority Key Identifier:
keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:d8:7b:f4:67:2a:e6:1e:d9:ac:7f:39:76:f6:0d:d2:cc:e2:
51:04:21:68:88:0a:b3:53:16:42:4d:81:02:69:de:ab:7f:7f:
87:a2:af:dc:3b:33:71:d0:ee:f2:ee:e1:1d:5a:4d:3a:8d:ba:
fb:09:25:84:20:60:68:6a:e7:34:a5:b0:e3:15:b7:f9:62:82:
93:89:c9:3e:a3:e4:d2:80:8a:90:46:44:00:5f:60:56:f7:84:
e3:15:de:d6:3f:f2:08:fa:9b:9f:78:f3:d8:98:64:2d:e1:9c:
1b:49:f4:db:96:2f:c6:91:bf:68:55:27:67:6f:c2:a9:dd:3c:
82:a9:8d:11:70:11:ce:2f:ec:e4:d3:4f:29:48:b9:92:97:fb:
41:61:23:f7:d7:42:45:5f:c7:cd:d6:b8:a2:b3:76:a6:59:e8:
3a:c2:d0:37:0c:f6:74:8f:b3:80:f0:24:e0:63:36:14:3e:85:
6e:87:6d:28:32:9c:79:ac:9a:86:2d:12:df:72:e6:3f:e3:44:
8a:cf:6b:74:e1:61:09:e1:15:67:ac:11:a3:2c:e6:85:94:df:
7a:ee:eb:ff:ec:41:f3:0b:71:98:8d:32:41:7a:a0:56:3a:32:
c3:d2:b2:f4:e7:5f:0c:1c:8e:37:51:f5:80:9a:50:a6:57:c3:
7e:02:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:10 2026 by rpki-client