
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json)
Hash identifier: pGCUlUi7DbUBYltVmEpOjW2XXn2ooFqY1HR2pax/GQE=
Subject key identifier: E8:A6:34:31:BE:B1:15:DD:DB:CB:90:C8:04:39:DA:7D:E8:98:55:32
Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Certificate serial: 0223
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
Manifest number: 021B
Signing time: Tue 29 Sep 2026 03:22:08 +0000
Manifest this update: Tue 29 Sep 2026 03:22:07 +0000
Manifest next update: Tue 06 Oct 2026 03:22:07 +0000
Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: kpOrN2KWV1OcbuUEJTKbg47+ZToTOfo7fIHfWHIrJ5s=)
2: 2giYZ4FJY1AfV1i-ox9a5yMxwJc.asa (hash: IwYHYQgU1YboVtedT/IywN6meXIP64gHd/NsfENFs4k=)
3: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: 5/jz+C40zLVMH2SNYsrHp/ff3x36CKwapZ0lQnBenzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 03:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Validity
Not Before: Sep 29 03:22:07 2026 GMT
Not After : Oct 6 03:22:07 2026 GMT
Subject: CN=6abb2ee0-ee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:74:a1:49:7b:8d:c9:da:f3:49:bd:be:7d:
4d:25:3a:ae:2e:73:bf:81:fd:e6:89:f0:f9:8e:ab:
44:75:1e:9d:b3:13:51:8a:30:0a:18:a2:70:6b:39:
f1:b2:89:8a:9e:23:cb:72:0c:73:4f:00:9c:c2:a2:
1a:ba:16:6a:ee:45:01:72:38:c2:11:ae:23:37:91:
63:16:86:d8:70:c1:ec:8b:3e:27:13:a6:8c:57:3c:
95:3e:52:ed:cf:d7:7a:91:7f:4a:a1:9a:72:a0:f1:
4d:36:91:62:0a:e0:21:1a:7c:45:12:79:7c:92:ac:
a2:6f:ec:ac:0f:cd:89:87:c0:a2:46:94:f8:41:f3:
59:ea:3c:40:50:a7:ac:a9:bb:16:48:7f:ee:da:d2:
76:d6:4c:69:39:84:9b:f8:3f:c6:f6:ec:75:58:96:
0c:51:9c:14:4c:2b:e9:5a:4f:8a:94:05:e6:96:c9:
e0:9c:f3:00:3d:8f:80:d2:a4:5b:da:05:77:db:f8:
6d:2e:e1:9d:00:85:43:d5:6f:e7:7d:fc:93:6c:25:
82:3c:a5:d6:8c:6c:bf:df:d4:85:e7:ec:32:95:a3:
e2:67:e1:39:e4:c0:2c:dc:f3:48:ba:0d:81:8a:fd:
63:43:64:d5:cb:f6:c8:dd:60:a5:9e:fa:3e:fd:7a:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:34:31:BE:B1:15:DD:DB:CB:90:C8:04:39:DA:7D:E8:98:55:32
X509v3 Authority Key Identifier:
keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:12:7d:33:93:46:b4:10:a0:16:1f:33:00:45:14:5e:5d:
b1:ab:08:e5:46:2f:b6:2a:3e:ce:3a:a7:f9:7a:86:a5:6b:ec:
8f:b1:e5:65:b7:57:8d:51:18:f7:1a:04:a4:a4:02:82:b0:bb:
6b:e7:30:32:5b:85:f7:f9:74:12:9c:68:8c:eb:60:14:8c:40:
ca:f3:26:11:15:72:1c:15:95:40:20:f2:eb:b5:c9:c3:c7:3b:
62:9a:30:40:f1:cf:d5:83:cf:24:11:ba:ab:e9:fa:7b:9e:a7:
fa:2a:dd:16:3d:37:d8:eb:e6:50:a6:86:4d:a1:da:cf:d5:98:
7c:72:93:d8:d8:de:2f:0a:53:21:fc:9f:cb:fe:5e:ca:5b:47:
98:79:e0:87:14:bc:f9:c7:25:e7:cd:0b:c6:7b:f9:94:2a:95:
dd:d5:74:c6:b5:a1:90:c3:dc:fe:c9:ff:cc:01:a8:d0:5e:ba:
9d:c8:01:5d:ee:7c:96:aa:1e:87:2c:94:90:63:e7:53:54:ff:
58:08:05:5d:06:00:16:d5:49:47:6f:0a:30:62:b3:8d:7e:33:
14:4c:28:03:56:7a:d0:9f:9a:cd:e3:82:ae:fe:21:ea:70:33:
79:06:ac:b9:ec:8b:e5:6d:93:27:12:68:3d:61:d9:2d:f5:21:
78:37:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:40:44 2026 by rpki-client