
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json)
Hash identifier: 1XEqkV/iVp/zniq5vVbnn1IpQHI2hl2nIEe20fmYC3c=
Subject key identifier: 5C:9F:F7:DE:8F:1F:C2:97:91:E0:C1:69:96:5C:E1:8E:2C:42:9A:EE
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
Manifest number: 0106
Signing time: Sun 05 Apr 2026 05:33:41 +0000
Manifest this update: Sun 05 Apr 2026 05:33:41 +0000
Manifest next update: Sun 12 Apr 2026 05:33:41 +0000
Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: fO4yWZ3Uu+j+oEpYNSiy2w8pOboWS2kTPjBPnZjLXQY=)
2: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=)
3: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Validity
Not Before: Apr 5 05:33:41 2026 GMT
Not After : Apr 12 05:33:41 2026 GMT
Subject: CN=69d1f435-cd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:9e:d6:4a:74:a9:bb:9b:13:a4:00:0d:b5:
5e:47:12:f9:85:64:46:d6:2d:11:10:19:50:89:7f:
57:df:a4:10:e5:4c:ca:17:71:f1:1a:5a:38:fc:d5:
4d:77:4d:f5:f4:19:7d:ac:a3:0d:11:d1:73:9f:55:
3e:4c:49:76:d8:0b:2c:19:bb:e4:66:55:c9:e8:ea:
86:df:19:ba:1f:4e:9c:e6:77:06:5b:d4:c7:e4:b7:
2b:1e:f2:15:23:a8:8a:80:09:11:cf:31:47:a1:43:
5b:71:ab:3d:ff:b9:b9:65:df:c8:f1:22:bc:57:f8:
fe:60:ff:b4:a3:d0:71:72:89:31:61:99:02:2a:03:
f2:23:04:3e:a7:7f:ae:ec:1c:3f:75:a6:eb:5c:c8:
3a:2b:b6:f4:4f:5f:fc:6b:ae:6d:91:2f:65:33:d1:
98:22:2a:56:57:62:ec:83:4f:96:19:de:b7:99:ee:
a4:ad:ce:0f:d4:b6:08:92:02:6f:6c:5c:c6:5e:d7:
6b:6e:f0:64:c2:95:b5:23:a1:6d:57:84:e8:f7:77:
37:ad:0f:dd:fe:5b:9a:95:83:4b:c4:6b:8c:58:57:
b9:bd:e5:52:59:7d:43:ce:35:0c:79:89:44:96:30:
a0:27:7c:d3:15:54:71:72:cb:dd:c3:80:30:45:e6:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:F7:DE:8F:1F:C2:97:91:E0:C1:69:96:5C:E1:8E:2C:42:9A:EE
X509v3 Authority Key Identifier:
keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:e3:06:c9:2f:da:13:1a:9f:6f:d0:bc:1a:a3:22:18:5d:b7:
24:f9:1d:35:73:88:af:11:76:de:af:2e:29:85:50:1d:30:b0:
83:1f:69:0a:48:d4:77:11:1f:9d:c9:63:b7:1a:12:cc:50:52:
d2:9b:12:5f:f4:55:38:dd:eb:b6:1e:5f:64:0b:92:09:4d:78:
b0:e8:e8:ae:ff:38:af:12:9d:8f:79:3c:8f:5d:0c:5d:8c:8b:
b6:d9:4c:da:dc:76:a8:2a:05:08:f8:74:a9:63:66:d3:3c:53:
69:98:95:58:f9:53:bf:99:b3:ac:5b:83:a8:e4:bf:c3:21:8d:
13:a3:50:a7:f0:59:54:74:a0:aa:ef:4e:fd:c2:82:09:25:b3:
07:9e:71:e4:3c:48:a5:36:84:db:f6:aa:61:af:7b:a5:71:fd:
63:73:fd:c8:f8:82:92:81:da:c6:af:15:00:58:25:9d:cb:45:
2c:54:eb:01:1d:84:d7:db:2f:f8:ac:d4:16:8c:c0:f8:d7:b2:
50:73:8f:b4:bb:7c:bb:3a:df:07:9d:dd:23:2d:5a:c0:02:52:
b6:b8:b7:50:bf:53:42:cb:5d:76:e5:63:db:99:0d:4d:4e:cc:
5b:92:a5:77:9f:23:ee:18:60:01:71:0b:6a:18:ff:4a:1d:49:
b7:50:ba:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:16:32 2026 by rpki-client