
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File: s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier: KyrPZGJV90kOAsf0O6WU2rCMkVfvg+DnotqGMbAiR3o=
Subject key identifier: 88:A4:31:E4:88:CC:93:6B:03:EA:4A:F1:25:43:35:38:19:F8:47:9C
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer: /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number: 01B7
Signing time: Tue 09 Jun 2026 04:04:21 +0000
Manifest this update: Tue 09 Jun 2026 04:04:20 +0000
Manifest next update: Tue 16 Jun 2026 04:04:20 +0000
Files and hashes: 1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: qOM0UIJXNBjclR0vhNG5hQ+EVlmkx16VnXcqhksRRKI=)
2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: 6FaC3RWt9d1k1q8QIDmkVggro95lutrtiUauXZX6w7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 04:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Validity
Not Before: Jun 9 04:04:20 2026 GMT
Not After : Jun 16 04:04:20 2026 GMT
Subject: CN=6a2790c4-9d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:06:57:34:9d:e3:82:91:fc:1c:ee:41:09:
ae:e6:c6:b0:7d:52:9e:c0:fb:97:61:d9:27:cd:26:
c6:7f:14:2e:cf:65:63:da:2d:51:ac:c9:62:89:03:
6d:82:41:64:3f:ae:e9:f6:82:b9:15:79:d9:0c:48:
f8:f0:b1:ff:d1:9d:ea:f5:b6:07:44:7e:24:c7:09:
8d:86:91:d7:6b:4f:74:d0:91:17:b3:f8:de:9c:c0:
6c:ec:96:b2:f8:38:7d:66:90:d7:92:97:e3:75:8a:
65:08:70:52:8d:1b:f4:43:48:98:8d:df:48:4b:9c:
d1:14:7d:0b:14:a1:96:2d:7d:e9:2f:b8:51:64:69:
70:5a:c3:70:62:f0:92:4c:54:e8:1a:3e:c3:19:86:
87:2f:2f:eb:09:69:50:97:7b:27:15:37:04:a8:7c:
da:90:c6:a5:a2:0f:4e:b0:27:27:34:8e:21:5c:36:
c5:42:89:45:70:f5:13:0b:64:cb:be:d4:e8:32:57:
de:7f:a0:60:fe:c8:35:fd:d4:38:21:bf:2e:bf:3b:
40:ba:17:48:3d:b7:69:6f:0d:d7:f6:76:af:de:bd:
6d:07:86:be:d4:fd:13:13:fc:1e:1a:6c:10:8f:d9:
f9:6b:82:1c:dd:0b:0e:97:a8:1c:ec:72:94:b4:33:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A4:31:E4:88:CC:93:6B:03:EA:4A:F1:25:43:35:38:19:F8:47:9C
X509v3 Authority Key Identifier:
keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3a:06:f3:ff:18:76:51:0f:53:2e:f7:9d:4a:12:7f:8e:0c:
05:45:1a:5d:af:39:d6:76:04:d0:ab:59:72:03:fa:bc:11:76:
58:23:9a:01:57:a0:2a:bd:8d:3c:30:5a:da:8a:56:77:7b:b0:
f7:82:a3:61:2f:2b:a6:61:e4:c7:3a:bb:b7:55:91:f4:59:c9:
ad:cb:10:37:1d:c2:cd:ce:ac:20:cd:7e:f8:30:b7:19:d4:46:
1a:13:24:7d:99:a6:41:11:c6:43:1d:97:78:68:fd:ac:66:c9:
9a:58:a6:c0:f6:09:ae:e9:3b:c9:29:db:5e:15:6e:b3:48:24:
09:f7:d5:bf:93:ba:53:5c:5b:f9:3f:5d:38:2a:a8:d5:6f:4d:
dc:d6:8c:7d:1a:53:d7:1e:47:ea:d0:58:6f:e9:68:b2:44:d8:
ce:c4:e2:70:5b:27:b3:6d:09:6a:c7:1c:8f:f8:c1:83:e5:44:
8b:8c:d7:4b:09:22:d9:02:f5:e8:ce:5f:7f:00:ab:2f:6b:f4:
58:59:f4:57:5b:91:0d:a0:b8:ea:72:3b:bd:5f:b7:69:fe:ae:
10:5d:f6:58:4b:a6:77:dc:b7:c1:4f:31:26:85:f7:ed:ad:e6:
0f:6d:2e:d5:25:61:dd:b0:0e:bf:c7:b2:ef:12:c7:3d:b6:e1:
0d:23:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 18:57:11 2026 by rpki-client