
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json)
Hash identifier: 0bZncpznNGViH88QC63on2gwXwAsLovsDZx1nlFmNzI=
Subject key identifier: FB:B3:CA:4F:7A:22:18:FA:02:9A:13:A5:A8:C9:C4:4B:42:99:AF:5F
Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Certificate serial: 358C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
Manifest number: 3586
Signing time: Sun 04 Oct 2026 15:16:13 +0000
Manifest this update: Sun 04 Oct 2026 15:16:12 +0000
Manifest next update: Sun 11 Oct 2026 15:16:12 +0000
Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: xCDolDgTyMX2eEErHVxfq94nLZ1+RRSgtsMp2ezlK/g=)
2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: G/kXHotVNXe/Ru6S94R+9y4XKhDCZ9Ild+4s0h8wWNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13708 (0x358c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Validity
Not Before: Oct 4 15:16:12 2026 GMT
Not After : Oct 11 15:16:12 2026 GMT
Subject: CN=6ac26dbc-7d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:2c:6a:d4:06:2a:2d:bd:ee:3e:cd:46:36:
fb:2d:30:6f:62:0a:16:8b:5c:1a:fe:2e:8e:6b:19:
2f:ff:f7:21:60:1c:a7:ec:21:fd:97:6c:21:a3:65:
f4:aa:51:09:bd:a4:47:c3:9e:a9:38:21:15:ad:b9:
90:87:a3:6a:26:dd:c4:a3:37:b4:90:5e:73:8f:65:
64:bd:d3:2f:0f:67:15:0b:3c:1f:ce:25:69:c2:1f:
95:42:b3:18:42:8d:84:f0:39:04:9f:46:7e:35:7a:
e7:10:00:59:87:9e:55:c4:de:53:a9:29:52:26:52:
31:55:9c:61:d5:f6:0a:09:bb:99:ac:b5:37:c8:40:
24:4c:20:0e:8e:5c:ec:5f:78:7f:0a:44:e3:27:fe:
87:a3:e6:82:d3:4d:ea:50:29:8f:d2:96:5c:31:f7:
7e:6d:5b:97:ab:2c:ac:1f:f2:7a:74:b2:2a:50:2d:
b2:ef:83:8a:29:5f:0b:50:70:bd:00:2e:de:4a:92:
e1:67:63:d2:4d:eb:b1:80:a2:b2:b4:2f:36:01:97:
ce:d7:f5:71:d5:17:f3:18:8a:55:dc:ee:c4:08:6f:
9b:46:45:7d:b7:3e:39:b2:e2:ef:89:f6:4c:88:09:
28:7f:9f:ef:a0:e2:5d:46:c1:ea:7a:48:cc:46:1e:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B3:CA:4F:7A:22:18:FA:02:9A:13:A5:A8:C9:C4:4B:42:99:AF:5F
X509v3 Authority Key Identifier:
keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fc:fe:f7:d8:f0:2c:83:9e:bb:f0:b1:c7:1a:a8:70:95:79:
ae:c9:cd:b6:8a:ce:59:02:45:9e:62:4a:32:97:fa:44:ec:b1:
85:50:e2:0e:0e:03:4c:d0:c9:69:e2:6c:54:22:8f:d8:d3:22:
22:89:de:ab:a4:48:37:b2:b6:14:72:3e:e8:cd:9c:0f:cb:c1:
96:6e:b6:64:25:d7:10:dd:66:0d:34:3b:8f:ec:9c:ed:76:e6:
2e:6a:37:40:bd:92:49:3c:d9:e5:75:97:1d:00:23:00:b7:26:
13:f4:8c:0c:af:8a:bd:25:5f:f4:02:59:43:76:54:ba:78:ce:
98:82:1a:25:39:01:3e:88:09:b5:ba:fb:19:8d:36:27:5e:7a:
6b:21:f4:13:f7:1a:4c:6e:04:80:69:ea:f6:70:86:bc:28:6a:
ad:b2:ac:67:31:d7:87:00:51:57:3a:04:95:7b:24:32:13:08:
d1:68:02:1b:d0:b3:06:b3:fd:03:a8:43:33:cf:b7:a0:83:0c:
83:f3:5e:20:7f:de:3a:c9:01:d6:73:3e:83:13:7f:54:37:58:
fc:de:98:fd:d8:23:61:a8:43:a5:17:a0:76:89:d2:9a:39:78:
fc:cd:ab:9a:6b:2e:f4:31:bd:da:bb:81:a4:70:12:e6:87:3f:
10:c5:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:24:24 2026 by rpki-client