
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
File: lSpNx8TWEJWYvu5awKIG0nuFxWo.mft (raw, json)
Hash identifier: Y5mQsZTgxYLrHoAWg7WrZ7jWzquPb5wXDgZl4LjnL+4=
Subject key identifier: 1B:78:65:FB:BB:8F:CC:F0:6D:3D:09:82:04:BB:13:5E:A8:B2:34:9C
Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
Certificate issuer: /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
Manifest number: C2
Signing time: Mon 01 Jun 2026 07:42:15 +0000
Manifest this update: Mon 01 Jun 2026 07:42:15 +0000
Manifest next update: Mon 08 Jun 2026 07:42:15 +0000
Files and hashes: 1: lSpNx8TWEJWYvu5awKIG0nuFxWo.crl (hash: 0k2FHHeJgm1cqMKgSX8tYNOhCIGgnjyMvoNeLh/gBSU=)
2: 4002AE6236CF11F0AA705D26C4F9AE02.roa (hash: PYLDscz39D9VfGo8zcZSUWDhN0EWb8SMMJ0oBjb9APU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Validity
Not Before: Jun 1 07:42:15 2026 GMT
Not After : Jun 8 07:42:15 2026 GMT
Subject: CN=6a1d37d7-2806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:31:13:85:e8:3f:fb:fe:6e:1b:aa:2b:e4:
1e:92:d1:ca:89:69:88:39:c6:40:d8:c0:76:c0:59:
ca:74:7f:e8:c9:84:49:8a:22:52:ad:00:9c:59:aa:
98:99:ba:68:7a:0b:76:21:15:81:7c:45:57:4c:48:
ea:4c:75:3b:8d:e0:2f:50:d6:4c:78:30:df:a6:4e:
e6:ce:58:38:bd:f0:41:e4:68:1e:ee:60:ee:50:27:
ff:3c:8c:27:d5:3a:d3:6b:c4:60:b7:42:19:7e:e9:
eb:57:f4:f7:64:21:58:0d:2b:99:f4:f0:6f:45:38:
47:63:7f:34:b8:39:ab:58:84:5e:0d:ff:4d:b4:12:
47:3a:7d:cf:f8:0c:76:27:31:94:b0:25:19:22:c8:
45:33:9a:08:31:22:83:b0:86:2c:14:d8:dc:29:5d:
71:5c:ab:90:ef:b3:a3:ee:da:7d:70:69:4d:a3:b7:
c9:3c:ca:85:54:52:cc:16:85:29:0e:7c:c7:af:ff:
f3:a2:8e:b3:c3:65:54:60:0e:46:2c:b2:bb:8d:dc:
1b:b0:20:ce:01:cb:77:47:1c:a7:3d:d8:7e:af:cb:
6e:e7:b4:1a:83:a8:eb:b2:79:67:8b:02:94:55:89:
8c:c4:ab:5b:f3:fb:85:bd:70:5b:f8:ac:56:fd:2a:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:78:65:FB:BB:8F:CC:F0:6D:3D:09:82:04:BB:13:5E:A8:B2:34:9C
X509v3 Authority Key Identifier:
keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f1:27:18:d2:45:91:c1:b1:71:53:8d:21:11:9b:87:cf:a1:
d8:de:ef:cd:21:70:26:3b:e2:f6:75:ca:18:48:e4:21:a9:6a:
55:66:95:22:e9:21:5c:72:db:83:cc:58:b7:04:7d:e6:37:12:
4b:da:09:62:fd:8d:b5:c8:4e:ad:21:8b:52:25:62:f2:8e:9b:
20:2a:0c:7e:26:11:ad:39:06:6c:3e:59:23:c4:f5:f9:8f:c7:
7b:8a:d2:91:ac:44:31:b8:50:0c:be:03:08:12:08:67:58:f3:
b9:c5:71:22:de:83:33:c9:d8:8a:5d:32:b3:ae:af:3b:51:4d:
61:4a:48:89:cf:16:1e:5a:68:5d:5d:fb:58:c0:40:44:23:9d:
98:03:18:aa:47:e4:95:8b:db:46:52:79:e9:d7:5f:bd:ec:77:
8b:d1:7d:5b:15:76:6f:d4:d2:e8:ce:bb:62:82:0e:13:68:45:
30:4e:e4:9e:41:3e:6f:f3:8d:3e:ee:cb:69:91:3b:da:7d:da:
94:43:08:f2:09:63:1f:27:94:e2:e5:bd:de:8a:54:70:68:2c:
4c:c5:cb:1b:c6:60:79:fb:d4:9c:cf:6c:a0:ef:9f:4b:2f:2e:
b7:6f:90:3f:39:bb:2a:58:c8:6b:16:06:5f:be:ed:b1:8f:79:
f3:c6:42:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:45 2026 by rpki-client