
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json)
Hash identifier: KLQYTKNepUB0UU2T1LH3ztb8sTyiIwnekvL7U86rRnA=
Subject key identifier: 50:74:06:22:7F:34:6C:54:B5:0E:E0:3A:3A:8B:FC:19:2C:FC:6E:A7
Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Certificate serial: 35D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
Manifest number: 35A8
Signing time: Fri 04 Sep 2026 14:44:44 +0000
Manifest this update: Fri 04 Sep 2026 14:44:44 +0000
Manifest next update: Fri 11 Sep 2026 14:44:44 +0000
Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: Y2B+OH3FLqoWl+iPs6cLzdcsQYuQDaA3OZLdLZe4bcU=)
2: CBCF6A88358611F08913BB23C4F9AE02.roa (hash: mNksQE/xzdIYYCvljnqlY0EDftzvuMmGsaDQO09s8nU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13778 (0x35d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Validity
Not Before: Sep 4 14:44:44 2026 GMT
Not After : Sep 11 14:44:44 2026 GMT
Subject: CN=6a9ad95c-b6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:92:e3:42:33:13:63:78:6c:16:22:f0:85:
d3:29:3c:37:fb:c2:1b:90:ee:5f:5d:7c:a4:6b:ff:
a7:31:d5:13:cf:17:0d:de:a1:f0:2d:86:00:fb:da:
8a:79:bd:0e:aa:b7:59:1e:64:91:f5:3b:b5:31:19:
59:7d:8b:0a:08:a1:57:65:6a:1e:8a:89:ca:cd:d3:
4a:c4:c4:ec:0b:15:f8:59:45:0d:e6:df:04:ee:cd:
51:f6:c2:b1:df:4a:1e:46:50:e8:29:33:26:47:9b:
3e:3f:c4:f3:d7:ba:f4:eb:c8:40:97:39:0e:32:4b:
50:c4:fb:53:70:c0:7f:63:e8:06:1e:c4:4b:e1:2a:
cc:8c:90:5c:36:64:7b:0c:17:10:ac:48:45:af:36:
1b:c1:cd:9c:da:8e:01:85:1c:b7:f8:c2:71:41:6a:
a1:f5:2b:08:43:ee:85:d5:aa:42:72:2a:71:da:7f:
c4:21:aa:71:65:2b:d4:1e:21:90:f2:45:90:79:2b:
61:12:00:bc:63:24:fc:e1:d6:4d:ae:f0:00:82:51:
04:c1:97:5a:6b:16:47:e9:4e:0b:46:23:91:49:d8:
0b:dd:90:36:78:0c:df:90:a1:69:18:af:60:f9:64:
d0:9d:cf:53:a3:4f:f8:e1:62:44:27:f5:60:b6:1f:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:06:22:7F:34:6C:54:B5:0E:E0:3A:3A:8B:FC:19:2C:FC:6E:A7
X509v3 Authority Key Identifier:
keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c1:76:8a:2b:f4:18:17:cc:ba:ad:52:7f:bb:5e:56:84:4d:
7e:07:87:17:d1:88:b4:4c:a9:bb:a3:fb:e2:0c:5b:4b:4a:e9:
17:fb:22:14:61:d6:3c:84:7b:44:bb:b6:cc:7e:86:29:e5:31:
d3:42:06:0e:4d:89:0a:3b:c7:b9:81:08:45:aa:b1:a3:d1:03:
e4:c6:cf:50:3d:07:ef:7e:d8:ca:f3:f8:14:df:e3:f1:25:4d:
78:b8:b2:ec:8c:6e:89:95:9a:4e:44:e0:eb:01:18:47:6e:fa:
d9:4c:b4:af:3b:ce:bf:1a:cd:e3:1f:2a:34:7f:69:b5:db:84:
d7:1f:fe:d7:5f:9b:69:f2:ae:81:78:b6:e6:2f:26:4f:81:0f:
c0:72:5c:fc:30:3b:3f:cf:30:18:ea:27:84:f9:a2:08:18:cd:
ba:13:4c:47:92:35:79:7c:9a:60:cb:e3:a0:7d:d2:69:d8:14:
cf:69:ee:b0:37:a1:e2:3d:ef:7d:75:13:b9:91:3b:8d:81:98:
ca:65:3d:62:b5:29:88:78:e1:94:55:c7:7f:14:b1:ee:21:2f:
2e:d5:0d:91:38:28:af:0b:80:81:2d:8d:60:c9:20:6e:cf:4d:
77:1e:83:9e:b6:97:89:d3:92:7b:54:0f:9f:2a:8c:c0:dd:9a:
a2:d0:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:14:49 2026 by rpki-client