
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json)
Hash identifier: xpAz+yuBTY/Jl0L73xxnDPiiWCSnOOtIx3nfUOv+QnE=
Subject key identifier: 3B:1F:B1:62:16:39:E4:9E:4C:68:C5:D6:98:DF:C4:91:34:2A:C9:4D
Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Certificate serial: 3574
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
Manifest number: 356E
Signing time: Tue 18 Aug 2026 15:19:11 +0000
Manifest this update: Tue 18 Aug 2026 15:19:10 +0000
Manifest next update: Tue 25 Aug 2026 15:19:10 +0000
Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: 2AAzBejr1m94GyrOXJnB7M1N8m33msCQ90qM0HPGPY4=)
2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: G/kXHotVNXe/Ru6S94R+9y4XKhDCZ9Ild+4s0h8wWNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13684 (0x3574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Validity
Not Before: Aug 18 15:19:10 2026 GMT
Not After : Aug 25 15:19:10 2026 GMT
Subject: CN=6a8477ef-6ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:f8:66:9e:23:97:a0:7c:5f:ce:3f:8c:9a:
15:f3:42:db:f9:19:8f:2c:b7:58:1d:92:12:ed:5f:
e2:db:92:cf:6d:a0:8b:c7:9f:50:0e:7c:9a:8e:1c:
1e:7f:26:6b:bb:43:28:f9:b9:47:8d:9c:b7:81:58:
d2:0f:38:db:a5:e6:d2:bb:b2:27:2f:6f:1b:32:74:
6e:c6:69:e1:64:ae:8b:c1:c1:fa:d0:be:85:c5:80:
67:77:c4:ca:3f:53:b2:c7:96:72:f9:a0:e3:15:85:
64:b0:d6:7e:c3:53:7e:d1:17:a3:1c:04:c6:4c:b8:
40:d9:31:5c:72:90:23:bb:dd:17:aa:c4:92:93:6e:
7a:d0:56:d8:07:10:14:e6:86:83:4b:fb:e5:1f:2d:
e4:77:52:33:c9:fd:10:d5:65:b7:ec:97:e7:23:11:
96:c8:5c:c5:c1:74:d9:02:19:ec:c1:dc:43:d1:d5:
e0:cf:50:59:9b:e6:e2:ac:f6:ed:9b:51:3f:b3:10:
f0:b2:78:28:57:06:ff:89:94:c1:62:1c:e1:ef:2b:
ac:cb:80:9c:61:32:96:00:36:75:1e:09:fc:b2:93:
44:98:f2:a9:ac:ea:86:ce:f5:1c:78:9a:9d:42:59:
71:d4:5c:cd:f1:32:12:29:91:0c:8f:e2:f0:a4:38:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:B1:62:16:39:E4:9E:4C:68:C5:D6:98:DF:C4:91:34:2A:C9:4D
X509v3 Authority Key Identifier:
keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:14:82:b9:98:68:8f:26:f9:56:5a:84:7d:d8:fb:90:db:fa:
83:57:ac:25:eb:6e:59:15:5a:ac:67:3c:e0:05:1c:6a:c4:8a:
60:0b:24:d4:0f:f7:3f:7d:9f:a1:96:c1:a0:15:17:2e:9c:a7:
d7:41:a6:ca:f7:e9:ed:6e:e2:04:e0:65:3f:79:1d:bd:62:d9:
7e:4b:51:c2:18:c4:f9:10:96:94:cf:12:db:fe:ca:4c:c0:73:
84:90:32:97:60:9a:23:65:59:05:f8:59:2b:04:2e:62:e4:bb:
be:56:8d:b4:55:4b:19:34:7d:cc:e0:b9:6a:66:a4:bb:45:17:
87:7b:ec:12:27:72:39:85:2c:36:af:b9:22:65:8a:95:98:b3:
b8:25:7d:e6:11:67:eb:38:6b:c1:ef:59:df:11:5e:95:61:61:
ea:53:af:46:38:bf:f7:91:16:71:7b:a9:92:78:32:9e:bc:f3:
d1:b1:d5:e9:b1:24:ac:90:f0:0c:19:58:4a:84:41:3f:bf:bb:
d0:55:a5:e9:4a:d3:80:60:4b:2e:51:9d:6e:6f:77:b9:7f:b5:
66:d2:f8:d6:17:b9:20:7e:4f:7a:b6:40:bd:e3:51:45:77:79:
04:4e:1b:cf:ec:4b:eb:f6:87:2b:88:f7:04:9b:c7:e0:7d:fb:
0a:d2:28:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:59 2026 by rpki-client