
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json)
Hash identifier: vz013shVd/6vRxiffR683ufCHUDWiKGFatAFWHYb7xI=
Subject key identifier: 43:CB:B7:73:AD:3F:50:36:6E:AC:DD:30:01:21:4B:86:1A:33:48:CF
Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Certificate serial: 3598
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
Manifest number: 356F
Signing time: Wed 20 May 2026 14:46:51 +0000
Manifest this update: Wed 20 May 2026 14:46:50 +0000
Manifest next update: Wed 27 May 2026 14:46:50 +0000
Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: hQPDMx7In2SJrWO94eDAZepbGh7TMou67g6MWP+G+zU=)
2: CBCF6A88358611F08913BB23C4F9AE02.roa (hash: IpjTugbacRrmVDXaQ3QI6KXxc3S9UtKA8Py8AWeqxg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13720 (0x3598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Validity
Not Before: May 20 14:46:50 2026 GMT
Not After : May 27 14:46:50 2026 GMT
Subject: CN=6a0dc95a-aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:9d:a3:ec:6c:f5:28:f0:51:a2:4d:7f:63:
d7:9f:6b:11:27:e0:1d:c5:88:b6:8f:f7:ef:e1:34:
78:cc:61:b7:14:22:2e:89:7b:c3:1a:62:1d:12:8b:
40:75:84:9a:54:a1:19:51:8c:73:d7:4c:f9:7c:3c:
7a:fe:8a:2d:6b:3c:dc:34:c9:c5:45:c6:13:a1:b9:
4a:62:ae:2a:45:34:aa:93:5d:1b:37:aa:3d:f7:7e:
3c:54:d7:f1:c9:27:7e:7d:06:86:30:bc:c7:50:46:
81:89:83:bc:ef:b9:48:a4:f2:9a:cf:0a:93:6b:a1:
dc:4c:7a:19:f7:01:3c:4c:57:48:7d:5f:64:a0:9e:
b3:d3:c5:de:4e:79:ab:98:c3:a3:4b:e9:13:d8:8a:
ae:b1:af:ad:cc:40:3e:77:46:38:85:cf:e6:e4:e2:
b3:04:8e:09:18:5f:8d:33:30:28:0e:dd:91:ff:dc:
07:37:b6:0e:64:95:69:4b:77:37:f8:da:fc:0a:ca:
dc:58:ea:30:72:d0:01:43:38:0f:13:2b:f6:2e:64:
2e:c5:09:da:f3:ac:47:1d:ac:7f:a4:ac:c1:ab:8c:
a7:9a:b3:73:89:07:40:15:9a:84:68:93:19:06:56:
c2:91:63:ff:76:d6:36:18:17:04:63:fb:be:f3:31:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CB:B7:73:AD:3F:50:36:6E:AC:DD:30:01:21:4B:86:1A:33:48:CF
X509v3 Authority Key Identifier:
keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:55:2d:2a:cf:7f:98:83:8d:6e:14:c4:8f:6f:d6:16:ee:2e:
89:4c:e3:1a:74:44:b2:40:e2:64:8b:d8:2b:82:20:ab:c0:19:
0b:fe:49:c6:5b:cf:b6:b6:2e:1a:39:8f:b1:82:6f:7b:ca:92:
94:16:4f:42:0f:6f:6c:19:52:be:a3:d0:df:25:b7:4b:81:5a:
45:38:1f:55:eb:84:b0:28:63:bd:fa:5b:bd:c6:c0:5d:ed:31:
d0:36:e3:d6:59:92:5e:42:2a:6f:20:e1:db:17:0f:00:d2:60:
be:11:dc:df:6c:6d:12:4d:ab:89:43:e9:20:61:08:9d:c0:b2:
b5:13:be:d6:35:47:e9:7f:9d:72:a9:8e:a7:3c:b5:98:99:3a:
48:fa:8d:21:af:51:1f:7e:b1:6e:08:fa:e9:fb:6e:0a:fa:bd:
e4:b5:87:09:b5:e7:c5:fd:f0:be:3e:1f:54:6c:1d:2b:98:a5:
f2:68:73:ef:0a:42:b6:35:8d:4b:45:b5:cf:4d:9b:99:32:cb:
78:7f:8a:21:6b:04:7b:6f:8e:a8:86:f4:47:bb:a5:ae:20:8c:
be:cd:db:13:7b:f7:07:1f:a8:94:ba:03:1b:75:31:2a:52:8d:
8d:98:42:88:25:1a:c4:e0:54:f8:4d:83:7c:12:24:87:c2:40:
5c:4b:25:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB
RTExNTgzMjUwHhcNMjYwNTIwMTQ0NjUwWhcNMjYwNTI3MTQ0NjUwWjAYMRYwFAYD
VQQDEw02YTBkYzk1YS1hYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppKdo+xs9SjwUaJNf2PXn2sRJ+AdxYi2j/fv4TR4zGG3FCIuiXvDGmIdEotA
dYSaVKEZUYxz10z5fDx6/ootazzcNMnFRcYToblKYq4qRTSqk10bN6o99348VNfx
ySd+fQaGMLzHUEaBiYO877lIpPKazwqTa6HcTHoZ9wE8TFdIfV9koJ6z08XeTnmr
mMOjS+kT2Iqusa+tzEA+d0Y4hc/m5OKzBI4JGF+NMzAoDt2R/9wHN7YOZJVpS3c3
+Nr8CsrcWOowctABQzgPEyv2LmQuxQna86xHHax/pKzBq4ynmrNziQdAFZqEaJMZ
BlbCkWP/dtY2GBcEY/u+8zH9ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPLt3Ot
P1A2bqzdMAEhS4YaM0jPMB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE
OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB
WllpWEJid3U4YzJ1RVZneVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQlUtKs9/mIONbhTEj2/WFu4uiUzjGnREskDiZIvYK4Igq8AZC/5JxlvPtrYu
GjmPsYJve8qSlBZPQg9vbBlSvqPQ3yW3S4FaRTgfVeuEsChjvfpbvcbAXe0x0Dbj
1lmSXkIqbyDh2xcPANJgvhHc32xtEk2riUPpIGEIncCytRO+1jVH6X+dcqmOpzy1
mJk6SPqNIa9RH36xbgj66ftuCvq95LWHCbXnxf3wvj4fVGwdK5il8mhz7wpCtjWN
S0W1z02bmTLLeH+KIWsEe2+OqIb0R7ulriCMvs3bE3v3Bx+olLoDG3UxKlKNjZhC
iCUaxOBU+E2DfBIkh8JAXEslHA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:00 2026 by rpki-client