
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json)
Hash identifier: xd8nTfuRyOwUMcZkytqdiGrz4KL9fCfScYtjGoUOjLI=
Subject key identifier: DF:4D:0D:1F:C1:84:A7:FC:6B:58:03:28:75:B2:69:26:1C:D2:59:AA
Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Certificate serial: 0365
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
Manifest number: 035A
Signing time: Sun 19 Apr 2026 00:51:24 +0000
Manifest this update: Sun 19 Apr 2026 00:51:24 +0000
Manifest next update: Sun 26 Apr 2026 00:51:24 +0000
Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: qKlXFL7xqn9OBzfKWqjMdofghfeFLY9kSmtAJTu5Ppk=)
2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: AJG9VwcXmykzSVjo120jxYPET3IdPC1gKF7m4iLbpbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869 (0x365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Validity
Not Before: Apr 19 00:51:24 2026 GMT
Not After : Apr 26 00:51:24 2026 GMT
Subject: CN=69e4270c-20a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:1d:a3:30:3b:76:0f:a0:cd:75:38:3d:5e:
d9:57:c8:d2:5b:a2:ac:53:78:a6:db:be:a9:1a:73:
e1:c0:f0:66:0b:64:08:5a:cc:0d:59:48:1a:d0:bb:
e3:cc:45:26:7f:bd:04:2f:80:c8:1f:28:e8:a7:df:
06:1b:e2:eb:31:33:de:7c:e4:e1:51:cd:45:1d:d3:
d7:40:b6:86:f6:69:13:1a:cc:c4:1b:06:62:4f:72:
24:bd:bf:d9:68:dc:f8:40:11:59:a5:8b:c1:7f:5d:
98:14:fa:46:df:43:5f:07:cc:75:66:1e:c7:40:01:
54:1d:04:7b:1e:0a:02:31:b9:e7:48:20:e0:79:7c:
2a:6d:a4:38:e8:f1:a1:18:dc:eb:79:07:d7:29:c9:
b0:64:e6:82:e5:df:a9:75:c0:03:9d:39:73:f4:66:
be:0b:70:b8:0c:f9:d7:6d:e5:50:35:c0:2f:ae:a6:
3d:45:0a:70:89:4c:fb:9b:18:0a:d8:73:42:6f:7e:
00:ae:da:a4:3b:00:57:eb:ca:56:49:e3:98:3b:27:
3a:12:c7:a8:36:62:c0:69:b9:1f:75:22:6e:10:8a:
f1:61:b0:49:b8:f4:95:7f:bf:f6:af:f9:ed:36:27:
0a:e4:2b:1c:e0:fc:b7:9e:bf:3c:4b:ce:c6:9b:b3:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:0D:1F:C1:84:A7:FC:6B:58:03:28:75:B2:69:26:1C:D2:59:AA
X509v3 Authority Key Identifier:
keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:14:cd:fd:69:76:2a:14:9b:c2:9e:7e:8e:1d:56:fb:8f:86:
8a:45:ce:77:aa:bf:a7:54:7b:10:33:f3:90:72:92:fa:ed:15:
5b:b4:7a:5a:d0:db:35:dd:7c:6f:3e:bf:49:f7:9c:62:4e:92:
ed:7b:1f:ec:39:c7:c2:e1:46:30:12:4d:65:05:21:ff:97:e6:
52:39:cf:d5:fa:f3:19:7d:2a:e7:4b:da:f9:4e:4f:d0:7c:12:
0d:4e:18:57:3c:75:b4:1a:bf:86:d8:51:06:a9:b0:48:57:24:
5d:5d:c6:76:a9:9e:9f:36:93:a6:63:e3:68:97:d6:49:4a:8e:
48:92:b2:56:00:47:2f:5d:d9:87:b4:b6:61:98:31:bf:2d:55:
fe:29:71:56:40:e5:48:00:58:b0:0c:f4:30:9c:78:e3:8d:41:
40:1c:5a:88:03:49:ff:a0:a9:9d:70:f2:a0:7b:91:72:60:64:
b6:05:e7:95:ae:b8:32:e6:2a:f0:67:8f:28:a2:0a:6a:86:8b:
c0:00:3f:32:ea:db:d8:e9:cf:3f:39:a5:51:3e:73:6c:02:3e:
eb:ad:4d:09:bb:63:9b:38:bf:a8:7e:56:f4:7a:cd:b8:af:a6:
0a:5a:c4:e2:b1:76:fe:9c:7a:95:8e:04:07:75:41:e2:65:af:
98:ea:f3:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz
NTUxQTREQTMwHhcNMjYwNDE5MDA1MTI0WhcNMjYwNDI2MDA1MTI0WjAYMRYwFAYD
VQQDEw02OWU0MjcwYy0yMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuxUdozA7dg+gzXU4PV7ZV8jSW6KsU3im276pGnPhwPBmC2QIWswNWUga0Lvj
zEUmf70EL4DIHyjop98GG+LrMTPefOThUc1FHdPXQLaG9mkTGszEGwZiT3Ikvb/Z
aNz4QBFZpYvBf12YFPpG30NfB8x1Zh7HQAFUHQR7HgoCMbnnSCDgeXwqbaQ46PGh
GNzreQfXKcmwZOaC5d+pdcADnTlz9Ga+C3C4DPnXbeVQNcAvrqY9RQpwiUz7mxgK
2HNCb34ArtqkOwBX68pWSeOYOyc6EseoNmLAabkfdSJuEIrxYbBJuPSVf7/2r/nt
NicK5Csc4Py3nr88S87Gm7OSMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9NDR/B
hKf8a1gDKHWyaSYc0lmqMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC
N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi
OW5oVnZHNVBScjQxVWFUYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqxTN/Wl2KhSbwp5+jh1W+4+GikXOd6q/p1R7EDPzkHKS+u0VW7R6WtDbNd18
bz6/SfecYk6S7Xsf7DnHwuFGMBJNZQUh/5fmUjnP1frzGX0q50va+U5P0HwSDU4Y
Vzx1tBq/hthRBqmwSFckXV3GdqmenzaTpmPjaJfWSUqOSJKyVgBHL13Zh7S2YZgx
vy1V/ilxVkDlSABYsAz0MJx4441BQBxaiANJ/6CpnXDyoHuRcmBktgXnla64MuYq
8GePKKIKaoaLwAA/Murb2OnPPzmlUT5zbAI+661NCbtjmzi/qH5W9HrNuK+mClrE
4rF2/px6lY4EB3VB4mWvmOrzAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 03:46:05 2026 by rpki-client