
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier: PmOuF/o3nzYPeC/l66qsrU3MxV8znTpytcLKgDKXCPg=
Subject key identifier: 38:6A:B2:85:8A:71:7C:87:F1:44:74:6B:E5:61:86:1C:E7:94:E2:46
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number: 013C
Signing time: Mon 01 Jun 2026 06:19:04 +0000
Manifest this update: Mon 01 Jun 2026 06:19:03 +0000
Manifest next update: Mon 08 Jun 2026 06:19:03 +0000
Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: LArHy2SB35+D2dNv6EmJ/0KFXzdy4mQEGtOZgsE3Uhg=)
2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: 4QxgO/v1kKmqzX3Jt1zEm2uuH1Y0Ot5nAQyWZtBjGQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Validity
Not Before: Jun 1 06:19:03 2026 GMT
Not After : Jun 8 06:19:03 2026 GMT
Subject: CN=6a1d2457-0d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:1e:68:33:b7:5d:02:3e:a2:8e:f0:8e:dd:
7d:a8:23:85:b2:4d:07:9a:8b:47:4d:9e:bb:bd:30:
ae:1f:e3:7c:a4:09:63:d5:4e:2a:3d:17:18:d0:fa:
42:3c:3a:e5:da:36:60:95:26:2d:2a:a6:47:e8:c0:
8f:54:be:fe:45:0d:63:27:c4:b2:d4:38:8b:6a:b7:
32:72:07:52:f3:5a:96:ed:f5:41:db:9d:cf:73:c6:
75:a1:0b:9f:0e:06:ac:9b:ca:9a:f1:69:ae:e8:52:
87:f3:8f:fc:3a:7f:2c:00:c1:cc:97:a6:04:a5:7c:
b8:8e:09:77:47:03:ae:f8:da:40:d9:80:8b:44:a2:
43:b0:d6:92:1f:e3:f6:4a:c7:00:b6:23:39:73:b3:
a3:e4:0c:89:80:de:ee:76:d2:cb:47:69:ca:f6:b7:
83:a8:b9:e8:5b:bc:28:b6:20:9b:3b:a4:c1:6c:d7:
3e:30:62:a8:1d:37:70:e5:9f:2d:d4:26:f9:6a:35:
55:c4:67:7e:7f:b5:d9:e0:5f:26:77:c0:63:c0:4b:
15:7b:59:f9:75:04:63:ea:d1:a6:f1:36:2c:c4:6a:
a6:02:9a:b0:48:17:58:da:9b:e3:ff:7d:ec:ee:e5:
e4:3d:ae:3f:f9:b7:7a:86:86:e7:87:31:6b:f5:72:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6A:B2:85:8A:71:7C:87:F1:44:74:6B:E5:61:86:1C:E7:94:E2:46
X509v3 Authority Key Identifier:
keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:0b:e0:8c:d2:75:05:59:28:35:7a:6c:37:41:72:38:14:
09:31:14:a9:98:cb:09:d2:22:76:39:e0:9b:d0:af:67:81:e4:
02:d2:f7:f4:fd:8a:b4:c0:eb:e5:eb:b1:b9:5f:b7:e0:ce:9c:
52:37:33:b9:1b:e4:ce:a4:3d:1f:f3:4c:24:f4:08:54:51:f6:
a6:b8:75:61:26:a1:aa:60:14:b4:0a:43:60:0e:4e:55:41:cb:
ec:60:34:cb:21:a1:85:fd:bb:18:3f:fb:24:c7:96:ce:a1:eb:
cb:63:e7:dc:3c:47:2a:57:a2:3c:fe:a8:84:1d:e9:2d:c4:b2:
22:38:76:03:2f:07:f9:45:52:6c:95:55:48:01:de:02:65:d3:
32:2e:92:8c:8b:f3:0f:91:c4:0e:69:48:cd:01:69:88:37:17:
2d:1d:01:cf:cf:62:e2:a5:56:30:cd:e8:f4:1a:9c:4c:6f:51:
57:e0:0d:29:d3:90:a9:ae:3f:97:26:2c:fb:9e:c3:35:ef:36:
fd:fc:40:a8:6e:be:92:5a:8f:a8:71:8f:1b:39:d8:60:db:a8:
7c:88:96:08:5b:d6:df:9a:66:0d:d0:17:c5:f3:d8:80:f2:2b:
a5:c0:f8:0c:52:da:da:43:bd:0d:4e:1b:1c:c9:2a:fe:ba:b6:
df:e7:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:38 2026 by rpki-client