
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json)
Hash identifier: RdD1Cd8FNj46Aw/NyiEAZ8BxuDQrxP5jaf7Ju/T8DqQ=
Subject key identifier: 15:CC:E8:CD:2D:19:EF:A1:FF:63:F9:22:2F:A4:25:86:2D:42:52:43
Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Certificate serial: 0AF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
Manifest number: 0AEF
Signing time: Tue 18 Aug 2026 19:40:14 +0000
Manifest this update: Tue 18 Aug 2026 19:40:13 +0000
Manifest next update: Tue 25 Aug 2026 19:40:13 +0000
Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: W1t7r7RUrwxm6ABFdrjx8ZPrM8BVapHV51kIPEmhbEA=)
2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: SrQx35DtVrxCsWAmfoF73hHpqsoh3DRvVDcP3/ka8L0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2808 (0xaf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Validity
Not Before: Aug 18 19:40:13 2026 GMT
Not After : Aug 25 19:40:13 2026 GMT
Subject: CN=6a84b51e-8dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:c3:eb:5c:2d:94:58:c6:84:1c:d2:38:3d:
fd:ad:65:85:14:36:85:79:0f:90:54:c1:e5:c2:78:
a2:eb:63:a6:a8:5e:ce:d4:7d:a7:30:ab:ff:9a:54:
46:a0:28:6d:f4:ea:f2:95:a9:35:b5:50:d9:94:9b:
6f:53:16:9a:59:26:08:41:d6:87:be:e2:df:75:26:
e0:91:e0:a2:34:e7:77:07:3d:65:89:b2:fc:7e:78:
5e:4d:bb:a7:67:f6:4d:c0:b6:32:77:6c:a6:d1:e9:
07:2c:8b:07:9d:2d:e4:67:c7:ae:b0:25:20:cd:af:
30:06:d4:b7:69:dc:3d:5d:c2:ce:03:79:6f:2a:57:
8d:17:b2:fc:52:74:fc:33:16:53:a3:9c:82:94:3e:
3b:91:21:a5:35:95:4d:c5:c1:13:b3:5a:da:76:2a:
1c:62:eb:1a:a7:91:7f:0d:25:5a:7a:5b:bc:6c:85:
f6:3b:ad:ba:d3:ea:87:72:2b:a7:06:e3:25:24:de:
d1:b4:eb:fe:3d:14:20:bc:32:a6:fe:0c:c8:cd:ca:
0d:5b:e8:0a:be:80:99:19:6a:68:60:4f:71:0d:35:
87:2b:0d:45:7d:2e:78:4f:1d:1e:b3:ca:56:5a:9d:
c1:ef:ae:06:99:1e:a8:67:3f:30:a5:5c:7d:86:b7:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CC:E8:CD:2D:19:EF:A1:FF:63:F9:22:2F:A4:25:86:2D:42:52:43
X509v3 Authority Key Identifier:
keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d6:6c:98:6f:f1:5d:6a:5e:5a:3f:c4:e7:cd:46:0d:34:4c:
c3:7e:ea:77:c4:2a:39:e7:31:19:04:d2:97:03:7d:db:d0:b8:
16:6c:24:0e:6d:1a:74:2d:3e:f9:da:34:bf:84:65:b2:70:61:
40:30:52:30:b3:9a:e4:26:61:52:c1:45:d5:3d:23:5a:e2:83:
55:83:68:de:c2:c9:60:cb:e3:73:fb:5d:61:dc:bc:93:95:66:
88:cf:48:c9:e2:bb:78:53:f0:51:c9:70:d5:a9:a4:f9:4f:09:
83:a4:cc:8b:62:29:e1:d0:47:ee:3d:3b:20:00:ff:c9:3c:93:
5b:04:73:4f:17:80:ac:57:96:d8:b6:30:8c:7f:d6:3b:a9:25:
5f:d5:ec:32:ee:3a:79:ee:eb:21:23:6a:c8:02:7a:5d:b9:07:
0b:a6:3e:a8:af:80:d4:d1:f1:94:49:cf:e5:f9:2a:d4:cb:6d:
40:6c:5b:3a:28:5f:bb:84:d4:f9:70:94:21:4b:0f:37:9b:5a:
44:5f:a2:66:eb:cc:df:67:58:97:87:a4:c5:3f:e4:53:dc:9b:
e6:8d:51:31:cc:f0:7c:a6:ab:e8:3a:14:80:92:cc:71:be:1d:
ab:54:ac:47:6c:c3:38:13:be:eb:f1:14:7e:fd:a3:37:dc:1d:
b4:11:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:27 2026 by rpki-client