
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json)
Hash identifier: xZeLgrB6mS0f9+BIYr4FdVlJ+uUvUoXOMMmo16y6K1o=
Subject key identifier: AC:53:09:36:D5:FD:CD:17:9A:55:64:76:39:C1:39:C2:9F:DC:CB:15
Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
Manifest number: A6
Signing time: Fri 03 Jul 2026 08:04:53 +0000
Manifest this update: Fri 03 Jul 2026 08:04:53 +0000
Manifest next update: Fri 10 Jul 2026 08:04:53 +0000
Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: R64MyjLgD1IHBkIK5/M9Jc01JlZkg5hOLnqHvQ1+ZoE=)
2: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: 0u1ZLLqCampcdXnPq/pBAes2DhVX2vLtj9KlG8BoPAY=)
3: 442749147D6311F0BC413466C4F9AE02.roa (hash: pZzQ3wcf5NhKLhQ5y0SYHfcdZzM5PRL9cbkeNwOsguc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 08:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Validity
Not Before: Jul 3 08:04:53 2026 GMT
Not After : Jul 10 08:04:53 2026 GMT
Subject: CN=6a476d25-1919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:95:0b:64:d3:1f:de:cb:c4:74:9e:8b:c1:
48:d7:5a:a2:45:fe:ac:19:db:ef:7e:9d:52:e9:45:
a6:37:4d:8a:73:24:02:ce:0b:f9:e2:84:a2:54:a4:
ab:09:27:b5:a3:77:54:39:07:64:75:d7:0c:22:56:
82:19:23:e5:e8:de:2c:0e:24:1d:cb:68:ed:ab:ae:
75:bb:6f:7a:79:ed:23:b8:1e:bf:63:13:17:3e:0b:
97:5f:7f:e1:73:aa:13:f7:59:58:d4:e7:14:af:4a:
3a:4f:3b:60:44:0d:b6:8a:25:5e:91:bb:b5:7e:24:
f0:17:2c:aa:68:0e:ea:9d:13:d9:9f:84:83:80:52:
58:5a:9a:6d:9c:c8:02:62:72:2f:70:aa:5a:ed:11:
d6:b4:b1:8b:c4:69:58:2f:5e:80:0f:36:0f:9d:31:
c9:e6:9f:cd:cc:42:6d:94:13:73:78:52:1d:1f:fc:
e3:57:55:96:4f:49:04:fc:52:ae:4e:d7:2e:86:b6:
b4:71:0a:fb:79:24:6b:25:0b:9e:db:51:98:6b:c7:
3c:d5:58:9b:59:67:c5:18:54:75:ec:a3:14:6e:18:
1b:5c:48:c3:d2:90:bf:0b:ab:04:bf:84:96:4e:56:
67:90:9a:91:51:79:e9:7b:c8:54:d2:60:a4:15:d1:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:53:09:36:D5:FD:CD:17:9A:55:64:76:39:C1:39:C2:9F:DC:CB:15
X509v3 Authority Key Identifier:
keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7f:3a:d9:c1:76:1b:ed:4a:69:8c:15:69:ce:47:c9:5a:be:
56:d5:93:fe:21:9c:25:83:0e:f4:bb:7d:ba:1d:85:04:2d:31:
55:c3:ff:c1:b5:81:b4:ac:8d:97:b5:c6:1d:d2:94:18:07:1a:
f0:ce:be:2d:3d:40:0d:b9:42:c4:e3:e9:c7:cb:72:57:e4:db:
66:d1:68:fd:36:1a:10:55:05:76:89:a8:9a:46:4c:23:7d:06:
6e:7b:5c:7e:9e:c1:f0:81:3e:61:03:43:54:69:4b:37:66:48:
ac:86:11:fd:d5:e4:de:74:41:01:88:fd:28:b0:90:eb:ee:c7:
f6:bc:8d:d0:f9:7a:42:d2:74:c4:a2:6d:0b:33:77:b0:d5:28:
4b:9a:c0:5f:08:e1:36:d1:ea:57:a7:6e:37:71:88:a6:a5:6a:
0f:86:08:42:5a:93:15:49:dd:e1:c9:7c:24:14:77:93:71:10:
2b:9e:17:b7:a1:bf:73:45:50:18:0e:30:ce:fa:f9:46:db:7e:
d1:58:12:ce:51:f8:e7:72:f8:8b:01:fa:32:e4:93:5d:58:00:
06:6f:0f:58:e4:5b:56:e8:5c:14:e5:50:08:43:24:a0:9e:d0:
6a:c0:f4:c3:0b:cb:06:b0:9c:d1:8f:b4:5f:0c:7c:22:b5:5a:
ed:49:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:20 2026 by rpki-client