
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json)
Hash identifier: QLGQbOR5TGagIgf0XB4QGn3L0rw5L1ypRorEMzVXuvQ=
Subject key identifier: DF:83:CF:6D:E3:A0:13:4F:D9:D3:A9:7D:1C:B9:27:46:EB:52:6E:A0
Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Certificate serial: 0AD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
Manifest number: 0AD0
Signing time: Mon 22 Jun 2026 19:26:34 +0000
Manifest this update: Mon 22 Jun 2026 19:26:33 +0000
Manifest next update: Mon 29 Jun 2026 19:26:33 +0000
Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: XmwF7Jr2shSLhE4GuYzQ1gyt/8GxqwFbTIBQMYMLU+c=)
2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: 5OPogG3ZOrkKX2Cbkuzk/+A/+LB9+L5qaFthCEEqGN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2776 (0xad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Validity
Not Before: Jun 22 19:26:33 2026 GMT
Not After : Jun 29 19:26:33 2026 GMT
Subject: CN=6a398c6a-37d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:56:bf:b5:53:72:4f:a5:ae:16:01:25:5d:
04:13:4d:4f:7a:fc:54:74:8f:9d:3f:03:47:71:86:
03:bc:d8:1d:64:50:d3:a2:10:aa:71:5f:e4:a3:4e:
7b:48:ad:70:22:be:da:0f:df:6b:74:54:6d:23:4f:
d8:34:93:15:77:63:28:39:62:a8:88:77:1a:4f:11:
60:a7:47:0e:5a:6c:9f:74:9d:5c:e1:a0:ff:60:a4:
c9:7e:7b:f4:63:33:eb:3f:7a:e8:b6:d0:78:c9:aa:
38:b3:78:64:be:d0:d6:d5:ae:3c:94:b1:c8:49:98:
dc:eb:93:5e:af:26:7b:05:58:0c:d4:22:95:d5:27:
99:6c:2e:80:66:1f:97:63:01:7e:50:dd:49:17:2c:
39:85:d2:c0:f8:93:c5:69:c5:72:a5:13:21:3c:ad:
2f:b6:ff:c3:63:45:d8:d1:dc:5d:a3:c4:6c:af:63:
f6:d2:bc:9f:61:5d:29:80:76:59:ef:0f:f5:80:3c:
ac:42:3d:38:3b:39:2d:92:78:46:d4:ee:76:90:1b:
0b:de:74:07:1b:1d:55:3e:dc:ca:1a:72:7f:7e:ae:
71:b5:e8:4c:70:70:d1:fa:a5:1f:b6:f1:ea:32:bc:
33:71:ab:d1:38:2c:9b:e6:ba:97:72:3d:91:68:a1:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:83:CF:6D:E3:A0:13:4F:D9:D3:A9:7D:1C:B9:27:46:EB:52:6E:A0
X509v3 Authority Key Identifier:
keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b6:a4:e7:24:28:85:ca:fa:e1:e8:00:01:8a:58:94:b0:b2:
04:96:64:3b:ae:73:1d:ea:f1:c2:75:69:5e:5e:4e:50:65:13:
f5:14:ed:16:fe:16:55:18:ae:b7:00:42:4d:4f:f3:f3:ef:26:
e2:ef:b8:c8:24:5b:3a:82:9c:87:45:1a:49:54:a1:77:87:c6:
46:65:a8:cf:bc:da:c8:8d:90:50:0c:c6:db:6e:8b:e3:b1:ab:
37:dd:bd:23:ce:f4:65:47:d7:4c:f7:9b:80:5a:c1:e2:a5:e8:
c4:13:18:c0:17:54:14:03:f1:32:b7:95:09:5f:ea:26:a4:87:
6e:bf:6b:9f:41:58:ec:63:12:33:f6:53:9d:b4:59:be:a3:9c:
67:65:26:15:23:cf:23:54:8f:28:de:f3:ac:78:32:7a:27:bb:
ef:d6:36:7c:69:b4:49:28:7d:c6:e3:ac:71:3f:99:3d:e6:43:
ce:ae:95:27:d6:fb:85:cb:85:90:ac:42:75:8c:57:fe:83:1f:
d3:69:3e:db:87:6e:e2:6d:87:2a:0a:43:c7:58:ee:1a:fa:43:
85:7f:5b:96:b5:e7:25:2f:e3:52:ed:3c:b6:60:e7:6c:31:1b:
3b:94:37:d1:50:57:fc:44:1d:e9:60:28:3f:d4:16:47:2d:80:
87:19:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:50 2026 by rpki-client