
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json)
Hash identifier: ZnsVES45lpnw3PoWP0GEtWWgSZzYIS/14+3n2UhGYWU=
Subject key identifier: D3:3A:14:87:41:2A:2D:9D:AA:48:94:7F:6C:D8:F3:80:FD:BC:CF:BC
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
Manifest number: 013C
Signing time: Fri 17 Jul 2026 06:41:20 +0000
Manifest this update: Fri 17 Jul 2026 06:41:19 +0000
Manifest next update: Fri 24 Jul 2026 06:41:19 +0000
Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: 5Rr+1OoGNSsDZ6T4Jb4lllVeUOakZgCGcekJPQKAa7k=)
2: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=)
3: 3853657658CA11F188C8E1F19D833773.roa (hash: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=)
4: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Validity
Not Before: Jul 17 06:41:19 2026 GMT
Not After : Jul 24 06:41:19 2026 GMT
Subject: CN=6a59ce8f-ac1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:ed:93:e7:ef:2d:60:aa:bc:8c:f6:6d:06:
45:22:b2:35:f5:cc:b4:2b:68:ea:0a:4c:f7:a0:83:
7b:1b:1d:7a:f1:6d:d6:ae:3e:8a:7c:cf:f5:c6:db:
b3:ef:8f:3f:0a:3e:20:a7:ab:44:0f:ef:0d:94:6a:
4b:7f:3e:3f:05:fb:7e:44:af:e7:60:b5:a4:00:86:
ba:77:d7:18:b5:30:26:cf:42:cd:38:d8:05:8b:89:
9f:a3:2e:1f:00:ee:03:0c:cf:e0:3f:fd:ed:bb:61:
a5:62:97:1c:fa:ee:c4:a0:dd:cf:bc:a6:f0:b7:49:
8d:3b:79:2a:d8:06:02:83:79:d0:9d:eb:8e:db:b8:
00:49:71:76:39:83:50:51:91:f3:0e:c9:e8:4c:ec:
c4:18:0f:5c:5d:ed:0b:19:df:d8:2b:4c:7c:72:fd:
32:50:19:3b:2b:90:4a:20:4b:13:fe:d1:f9:c7:e3:
25:75:76:85:b2:7b:ad:74:d1:9d:4b:36:df:46:d4:
09:bf:4d:73:74:c5:10:39:40:ad:22:0f:40:4f:73:
21:a4:79:a8:f3:c0:e1:af:e9:19:1e:6d:42:53:94:
95:56:05:ed:c1:b7:60:76:0d:71:15:56:9d:2e:08:
8e:3f:1e:5e:da:0e:5a:5b:86:fb:f2:6a:bf:2d:42:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3A:14:87:41:2A:2D:9D:AA:48:94:7F:6C:D8:F3:80:FD:BC:CF:BC
X509v3 Authority Key Identifier:
keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:04:83:e7:c5:0b:57:9a:ef:64:ea:c3:b9:0e:6f:e0:d1:92:
58:52:28:0a:80:1e:40:4e:95:c9:c2:83:7f:ce:ff:81:f5:3c:
58:84:39:29:d3:18:63:06:e7:5a:73:5b:0f:ad:3b:3b:61:74:
e7:17:51:b4:4e:20:f0:f7:dc:83:d0:be:7d:1e:84:2c:14:a8:
be:17:f5:54:64:5e:db:26:99:17:17:ff:39:26:e6:ca:d0:7c:
3c:8c:2d:ea:ca:83:9f:51:46:21:b4:32:09:de:90:b5:4f:d4:
8b:6c:fe:2c:c7:f3:57:0d:5f:25:72:bc:c3:62:71:61:25:16:
21:d0:89:0d:21:3c:ab:7e:04:6c:72:1a:b2:3e:8a:6e:bd:17:
e1:15:d6:57:21:e0:73:87:5b:58:1d:f8:95:03:5f:b0:bc:c6:
45:6e:70:4a:91:88:88:fb:f1:d3:6c:26:8f:b3:35:c3:03:e3:
f8:c9:77:44:dc:91:7c:19:9e:85:d7:da:6b:7c:3b:84:d4:55:
fb:9f:29:c4:9a:c9:63:6e:ff:e0:c9:03:2e:e9:66:49:23:87:
73:7c:ce:59:17:b6:57:8e:44:18:39:ab:dc:4b:36:d0:c2:0a:
a9:34:2c:fe:0b:d8:9e:c0:2e:7f:36:95:61:5c:50:34:7c:cb:
b1:b6:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:40 2026 by rpki-client