
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier: v73z2mFCJ0azVkBCHKZOPTlPirxEz7LYwPJrCA+tMFU=
Subject key identifier: DF:96:97:96:50:AF:3E:7B:15:E8:48:A1:65:D8:43:D2:BC:35:BB:EF
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial: 0D15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number: 0CFF
Signing time: Tue 30 Jun 2026 18:45:16 +0000
Manifest this update: Tue 30 Jun 2026 18:45:15 +0000
Manifest next update: Tue 07 Jul 2026 18:45:15 +0000
Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: s5hWlF42YXpg8JFjjvWLlHs5LQTgH9mbG0MvtOL9erU=)
2: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: v8VLFEHYfImy14LaG54KuMHpNg3eB1auJxQ0qkii+Dc=)
3: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: 5VCD3u27qrdHl1/jyodbt5Z/BUjwXQ94Xf36xQbvpgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Jul 2026 18:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Validity
Not Before: Jun 30 18:45:15 2026 GMT
Not After : Jul 7 18:45:15 2026 GMT
Subject: CN=6a440ebc-c97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:58:31:2d:1b:e0:9c:c6:82:94:6b:33:38:
83:8a:b7:43:9c:ef:e9:4e:71:6c:71:d6:82:34:e3:
5c:4f:2e:79:5a:0c:b0:8f:b7:aa:79:22:92:01:ff:
34:e3:16:4b:c4:c4:61:29:0b:db:65:99:5e:76:b0:
60:3f:96:c0:86:94:65:26:62:cf:59:c2:72:f0:8c:
cc:15:db:fa:4d:20:63:52:07:51:52:07:e5:3a:73:
44:71:22:d3:9d:23:df:04:ba:11:2b:01:04:08:7d:
89:81:d7:ec:73:e3:48:7a:3f:3e:1a:c3:53:d9:a6:
84:06:e7:42:ab:26:dd:aa:de:13:e1:73:0c:8d:34:
01:67:a3:e1:30:97:2d:06:87:68:af:06:cb:3c:af:
c5:9f:3f:12:8d:36:11:19:c7:a1:6d:31:2c:37:aa:
2d:a5:05:49:34:f1:f7:86:5b:b4:3a:ad:56:15:35:
d2:6d:01:a9:97:34:32:30:45:58:d5:e5:7b:1f:ce:
be:ab:06:52:8d:ae:97:2c:0e:44:66:17:58:08:29:
b6:22:6a:87:20:b0:0e:fc:c8:bb:95:b6:98:b3:a0:
16:66:a9:5a:03:31:90:c5:f4:32:16:55:af:8a:dc:
49:da:16:da:1a:90:0e:33:e4:0b:73:67:73:2d:2c:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:96:97:96:50:AF:3E:7B:15:E8:48:A1:65:D8:43:D2:BC:35:BB:EF
X509v3 Authority Key Identifier:
keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:77:be:82:52:ad:6f:c5:95:bf:89:ba:9c:4c:60:45:a5:6a:
9f:10:86:8e:fd:98:d9:e3:0c:e9:3d:59:91:b2:e9:a7:34:6e:
79:3a:79:95:a7:a4:bc:f2:ea:8f:05:62:85:64:01:fd:bb:2c:
b6:5c:95:1e:34:23:d1:e6:75:dd:20:c3:68:be:46:d1:df:87:
58:14:a5:69:3c:a7:89:83:fd:e9:1a:22:19:90:0c:d8:22:c0:
53:f3:66:da:34:c6:4c:20:d7:4f:20:fe:16:8d:43:0f:bd:2b:
84:f6:fb:ad:2d:92:17:18:e8:1e:5b:e0:c4:87:d9:40:68:3d:
6c:1e:6a:7c:48:fc:0b:ba:59:7e:8e:ef:2e:8d:ae:a9:5b:d2:
be:f5:9f:01:dd:90:f8:84:b7:23:d4:91:e3:61:de:39:f5:ec:
61:be:25:bb:f8:14:97:dd:cb:f9:eb:40:69:c3:37:c1:c0:1c:
e5:89:db:97:bb:d7:68:83:af:25:e5:ce:35:e9:2f:f3:88:40:
f5:c8:df:0c:c6:f9:b3:35:02:b6:27:86:3e:f1:70:73:19:07:
9e:2d:3d:eb:60:e5:80:b6:2f:e1:83:d6:c1:43:03:ce:5e:02:
b6:3f:c0:25:8c:bb:46:7b:7d:55:f9:78:50:5c:87:e8:44:64:
bc:f8:a5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:26:54 2026 by rpki-client