
$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
File: L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft (raw, json)
Hash identifier: 10/CQGw+TBTSRIPkqDaEbqYT6kVAcbtUAjQHcXtRY9E=
Subject key identifier: 4A:E4:E8:60:3E:6A:49:D9:30:83:F4:D3:D8:70:29:2E:57:08:3F:36
Authority key identifier: 2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
Certificate issuer: /CN=A918049D/serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
Manifest number: 72
Signing time: Mon 01 Jun 2026 08:34:20 +0000
Manifest this update: Mon 01 Jun 2026 08:34:19 +0000
Manifest next update: Mon 08 Jun 2026 08:34:19 +0000
Files and hashes: 1: L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl (hash: 2D+GXjS2XT5Y/iq5AeFrEFAyKevbNLNO1JTlJnZzOdU=)
2: 541D17D2B2C811F092F27081C4F9AE02.roa (hash: +uBlVYDCPzZRUmuHurx+A+K3HLAEvtXcUCa/AfvX6ks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl
rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918049D, serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Validity
Not Before: Jun 1 08:34:19 2026 GMT
Not After : Jun 8 08:34:19 2026 GMT
Subject: CN=6a1d440c-fbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:06:0e:8a:c8:a7:62:02:71:c3:b1:a3:83:
2d:50:3e:06:94:c9:08:6c:80:65:11:94:fd:b3:4b:
ad:5f:36:12:74:92:fc:1b:47:90:92:a1:b4:94:d3:
39:a1:5c:20:09:8b:75:01:18:4f:7c:42:78:a7:ae:
a4:dd:bd:8f:4a:b3:d3:67:4d:d1:41:ad:24:fe:56:
fb:c5:6c:81:75:ca:19:87:7c:41:95:18:19:30:e8:
e3:5f:92:eb:71:46:63:e6:0f:84:68:de:e9:e5:3b:
d0:8f:d2:07:7d:fc:10:99:7b:5a:56:47:eb:53:5b:
78:3c:64:46:0c:79:b4:64:48:24:d5:67:df:55:d3:
24:fd:c4:46:61:af:49:d0:0e:d0:ff:58:44:5f:4e:
99:02:8f:3a:82:33:36:13:f1:75:36:c0:dc:0f:56:
6e:c1:ca:56:79:cd:c3:6b:85:f3:63:5c:4f:c5:42:
b2:d0:45:64:c2:08:7a:3e:84:b4:f6:3d:43:87:bd:
c9:d2:7e:4d:32:39:d5:dc:8a:b7:23:da:fe:c4:da:
0c:89:dd:16:36:55:5e:94:b8:c6:05:e3:ed:55:72:
57:f6:bb:c4:30:f4:50:c7:e7:2e:7e:84:16:7a:b5:
ae:1a:f9:5c:e4:43:40:23:d2:1d:1a:7a:5c:ec:9a:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E4:E8:60:3E:6A:49:D9:30:83:F4:D3:D8:70:29:2E:57:08:3F:36
X509v3 Authority Key Identifier:
keyid:2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:8b:be:55:46:21:51:65:19:71:e9:b1:bc:ce:df:80:0d:8d:
b0:1c:97:fb:ef:89:c4:31:59:d8:53:88:99:d6:f8:16:5a:fb:
68:86:33:50:77:b4:9b:5f:51:a3:80:63:08:9f:cc:2b:72:45:
2d:53:12:f3:3f:ba:c3:3d:4b:92:7a:5d:19:8c:c4:4c:33:c2:
e5:a0:4e:5a:bb:10:08:13:4c:91:f6:7e:d7:ab:7f:6b:3d:5b:
af:d0:85:a4:b6:38:55:00:81:92:d1:49:7b:98:c7:c4:1c:09:
b4:ac:a0:c3:46:d5:cf:1c:43:de:f1:65:fa:19:7e:1d:bf:37:
cd:79:bc:a5:3b:06:dc:47:b1:cd:d3:1b:76:fd:1b:c6:d3:cd:
85:cb:6b:71:da:85:8c:04:b0:b9:49:be:45:e1:2c:9a:ab:4a:
5e:8d:49:fe:e3:1c:17:ec:e4:39:70:8d:33:e3:e8:a8:76:85:
1b:95:a8:1f:6d:af:a9:55:b8:61:73:ba:75:5e:fb:10:6a:c6:
0e:f9:41:df:2a:0f:0f:8c:4e:31:44:3f:27:96:39:2d:8a:bb:
83:51:56:77:50:81:27:71:eb:7e:54:bb:60:1d:6e:71:1b:d8:
a2:86:53:cd:fe:3e:80:0c:cd:17:88:eb:af:53:85:8e:44:6d:
75:02:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:33 2026 by rpki-client