
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json)
Hash identifier: iZnLcqzIJbzkImgXDkNz6J/ACLklPVW6qmtaWNOa0yw=
Subject key identifier: 19:E9:3F:7B:0B:BC:1C:26:15:96:72:B8:FB:87:51:6A:5E:D8:E2:EE
Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
Certificate issuer: /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
Certificate serial: 3591
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
Manifest number: 3589
Signing time: Fri 18 Sep 2026 14:36:45 +0000
Manifest this update: Fri 18 Sep 2026 14:36:45 +0000
Manifest next update: Fri 25 Sep 2026 14:36:45 +0000
Files and hashes: 1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: yZTgfJkkktbRH0CFJvWYvcA7mTfxIoCGqgpSSXJ34xI=)
2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: 5gb2IR3RmAQfetfMD3Cf2kp33anqtncaV+qXbOqkB4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl
rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13713 (0x3591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
Validity
Not Before: Sep 18 14:36:45 2026 GMT
Not After : Sep 25 14:36:45 2026 GMT
Subject: CN=6aad4c7d-14b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:47:aa:89:b6:f3:31:be:43:d7:76:b2:f5:c8:
91:85:fb:18:1e:3f:52:15:d8:cd:8e:f5:39:86:15:
2c:8b:de:35:4a:d7:b0:db:a9:17:80:d2:32:ae:27:
e7:39:64:a9:59:7e:a6:44:56:5f:37:d2:0d:5e:e2:
92:46:cd:96:62:2a:0a:42:cc:07:43:54:02:5f:97:
26:65:8d:d6:cc:79:ce:49:c6:80:16:fd:14:b3:4d:
77:bf:d2:7a:0a:72:b3:98:ff:33:4d:05:fa:0d:0b:
e2:15:fc:76:93:91:5f:03:d0:cd:6b:e6:0c:7e:f4:
69:d8:d8:3b:f4:c5:86:ad:3c:9a:a7:a2:00:97:c7:
a4:8e:b8:a9:ff:95:dd:85:2c:f3:44:cf:bf:96:2d:
b8:12:e4:db:a0:b3:3d:bf:1e:68:d5:6c:58:71:62:
d0:f0:50:b9:71:83:a3:63:a8:e2:ec:86:e5:16:a7:
10:2a:05:95:66:73:c5:4e:d1:30:b3:56:7e:8c:3c:
e5:ed:be:bc:d1:b0:f3:1a:8a:c5:86:95:ea:2b:6e:
c6:1b:9b:0a:75:8a:d0:44:71:9d:5a:c0:52:2e:12:
c0:be:8c:b3:d3:6e:65:6e:1e:30:10:70:37:4a:ef:
15:53:4e:bc:88:10:a6:99:8d:3d:fb:9a:75:0f:31:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E9:3F:7B:0B:BC:1C:26:15:96:72:B8:FB:87:51:6A:5E:D8:E2:EE
X509v3 Authority Key Identifier:
keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ea:c6:63:04:4e:ea:50:04:a7:32:2b:92:33:02:01:a1:b9:
9f:48:3b:39:52:25:b8:0c:aa:46:cf:8e:76:d2:9a:56:f9:2f:
5f:b8:3c:9b:13:91:30:78:a1:b4:57:6a:79:51:b9:70:dd:cc:
e9:35:bb:4a:0c:92:26:86:c1:4b:ab:48:b8:01:3e:cb:f1:2c:
76:28:fc:48:67:bc:57:43:70:2d:c2:11:1a:7e:43:a9:b0:b4:
b0:fd:e6:a8:b3:b0:96:85:07:e0:3f:aa:f8:9f:fc:24:b1:e0:
60:89:13:19:01:27:76:c6:bb:e7:69:7c:9a:15:e2:1c:89:68:
2b:06:d2:80:6a:64:38:f3:9a:5f:8e:56:11:f2:e9:81:da:05:
13:d3:86:9f:c0:f2:67:2c:de:8d:6d:1f:40:62:dc:43:77:84:
40:1c:cb:e5:4e:24:d8:5a:32:81:fe:fe:e1:a2:e8:c1:a1:f5:
b4:26:26:a7:be:8e:9d:1a:fb:ca:5e:23:76:09:4a:1e:71:71:
71:95:70:58:22:2c:62:c9:a0:f7:63:00:9b:8e:3f:7a:2e:c9:
5c:29:76:bd:01:1b:eb:68:b4:21:ce:47:18:6e:d9:9c:2d:9e:
2a:c1:79:de:4a:15:66:ff:2d:07:38:9c:49:fd:4c:db:3c:50:
e0:62:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:05:15 2026 by rpki-client