
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier: AvwxBoqTq+CJ5ug7b7Riw88gQnXjvk4MeUpfTklatrk=
Subject key identifier: 44:D6:90:C7:0E:B8:94:19:59:BF:FA:17:55:98:68:1C:E4:99:B2:1C
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial: 0E72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number: 0E5F
Signing time: Wed 26 Aug 2026 17:43:04 +0000
Manifest this update: Wed 26 Aug 2026 17:43:04 +0000
Manifest next update: Wed 02 Sep 2026 17:43:04 +0000
Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: eTxiEQz0sgBljJuEl0mMfRrVsWb0d6Ruqypq8t+K8j4=)
2: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: bhmnlpYZPEuWaSc0+L7rL2QZ7zRKqGCV4y6eL/DlqEg=)
3: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: HnvsHqcmUKW7ahLgN9nvtNlg8GIV2Dhcq2/uEZrWjX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 17:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3698 (0xe72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Validity
Not Before: Aug 26 17:43:04 2026 GMT
Not After : Sep 2 17:43:04 2026 GMT
Subject: CN=6a8f25a8-099c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:fe:38:d7:a4:a7:be:83:e4:4a:76:0e:02:
70:cb:bd:c2:44:51:31:5c:4a:1a:d6:ed:ad:ac:e0:
fe:c1:c7:50:bd:ef:51:14:d3:69:90:64:da:31:b9:
70:b4:5c:d2:5c:56:7e:dd:36:1b:83:50:af:6f:e3:
40:3c:b3:c0:ec:21:b5:cc:2e:44:16:ef:32:99:cf:
0f:be:52:5a:e6:8c:8c:cb:31:35:7f:94:59:a1:9a:
ac:a6:c2:6a:24:28:40:4b:83:56:c0:3e:db:3e:db:
f5:50:06:62:7c:ea:98:a6:3e:fe:a3:6c:24:5d:95:
18:7a:3e:81:5c:46:88:be:8a:c3:2d:d3:7b:ca:21:
5f:7b:79:b2:33:16:e1:4b:79:44:1a:34:54:a3:a3:
e3:d6:5d:00:f2:a2:d4:11:f1:87:7f:9a:fe:c5:31:
05:f0:34:d7:89:97:28:32:e8:65:c5:2c:93:7c:13:
2a:75:ff:13:a7:71:e8:53:e2:6f:0d:1e:e6:0b:f0:
28:17:75:87:aa:a7:16:e4:41:e7:87:72:5d:b9:26:
98:00:a0:53:ae:8f:03:ba:e1:ce:57:19:e5:59:d7:
91:3d:6f:fe:aa:1d:3e:07:ff:c5:a4:62:cd:11:e4:
2a:2c:b4:68:26:12:f7:1d:e4:62:d0:6e:8a:7a:c2:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D6:90:C7:0E:B8:94:19:59:BF:FA:17:55:98:68:1C:E4:99:B2:1C
X509v3 Authority Key Identifier:
keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:1f:ad:3e:eb:69:c0:fb:1a:bf:8e:dc:75:32:43:bf:cf:d1:
47:48:e1:f9:b2:64:87:74:bd:ac:13:ee:b9:f1:9b:7a:59:f4:
84:f1:e4:61:99:91:3a:20:0d:03:29:90:d7:21:3a:19:8f:2f:
49:b8:c3:69:87:45:f6:21:39:22:23:f2:e6:84:a6:e8:68:50:
62:70:3e:2d:47:04:9c:2c:df:59:f7:a5:26:0c:ca:aa:88:9c:
89:f6:b4:60:94:34:7a:f1:49:ec:c2:fd:84:9d:1d:aa:ca:16:
48:a6:72:ee:5a:12:1d:1e:d5:de:18:4f:f7:d8:d2:62:25:d8:
2a:23:77:c8:f5:39:83:53:5f:d9:3e:4c:48:d3:a3:d3:23:a2:
80:9c:06:f7:be:40:a3:58:21:be:23:4d:9b:6f:b3:e9:22:ba:
6f:6e:bd:0c:37:f5:16:f3:29:33:5f:ca:39:12:05:99:c0:f1:
fb:44:fb:3b:cc:e7:7d:0c:06:3e:27:bb:c3:44:2f:50:b7:73:
ea:0f:ce:e2:d5:27:02:ff:79:09:9a:80:c7:a8:6f:07:89:0f:
75:9c:1e:c4:b4:15:c7:4b:54:50:82:c6:1e:17:f4:6d:d2:7d:
ab:6f:ba:47:33:cf:59:25:9d:71:dc:f4:91:4b:5f:b8:b7:ca:
64:24:55:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:49:01 2026 by rpki-client