
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
File: L_lZl1deZzKwh5DXV_bBoMXyu_o.mft (raw, json)
Hash identifier: +bOEaI4wRHdl1CS5mhJkoeAYYbZsAQPElcsRpTQYI5w=
Subject key identifier: 76:F6:63:9B:07:0B:96:EF:24:99:57:55:54:67:65:F9:C4:ED:54:32
Authority key identifier: 2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA
Certificate issuer: /CN=A9187579/serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
Manifest number: 18
Signing time: Mon 01 Jun 2026 09:50:10 +0000
Manifest this update: Mon 01 Jun 2026 09:50:10 +0000
Manifest next update: Mon 08 Jun 2026 09:50:10 +0000
Files and hashes: 1: L_lZl1deZzKwh5DXV_bBoMXyu_o.crl (hash: 1u8L0C9zkEN/L3LBnoKZSfcKTZtFbsSSSexC/wiAkxw=)
2: B84A6F2E4FF411F18E63268DB6833773.roa (hash: BI2faFTClY4g1rHtoS/vehoRqM4DrLlRB/gGKATWsKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl
rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187579, serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA
Validity
Not Before: Jun 1 09:50:10 2026 GMT
Not After : Jun 8 09:50:10 2026 GMT
Subject: CN=6a1d55d2-3b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e6:46:63:d5:d5:69:f8:ab:c9:31:12:3a:e0:
06:8a:49:33:aa:d5:3a:85:66:81:e2:ab:e8:2b:78:
37:65:20:45:62:ff:4d:17:d7:42:6e:c0:cf:d4:ed:
06:27:2a:f1:88:66:66:7a:19:77:35:68:97:e7:66:
89:14:a0:a4:58:20:5c:3f:33:14:bc:c1:24:de:bb:
b2:9f:d0:98:5d:bf:7c:37:4f:85:22:01:64:9c:4a:
c8:51:c2:6b:65:4a:3e:d6:a5:2e:80:f3:f3:1f:12:
3a:33:e8:0f:95:4d:a0:af:bb:06:7a:b1:7c:67:23:
bf:1d:25:cc:26:0c:60:d8:18:5d:b0:f7:3a:df:23:
8f:22:e8:e4:fe:c6:9e:2e:00:fc:d3:5d:c3:f5:62:
bc:cd:15:41:4b:9e:02:2b:cb:87:a4:a3:ef:84:f7:
3b:9b:cf:4e:3b:06:12:34:36:fb:78:67:11:ef:02:
e8:2f:f8:2f:60:e0:5b:5f:f3:00:76:a3:31:8f:5f:
a0:2d:93:e1:16:af:a4:e1:60:67:02:c7:a2:aa:aa:
76:9d:66:70:77:af:5a:4a:dc:9c:d0:85:6f:e8:84:
70:03:51:46:8c:3d:ef:e6:6f:ad:c7:ab:c8:68:1c:
6f:66:3e:4a:39:40:f7:31:9b:28:19:50:40:35:8b:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F6:63:9B:07:0B:96:EF:24:99:57:55:54:67:65:F9:C4:ED:54:32
X509v3 Authority Key Identifier:
keyid:2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:14:be:3a:b1:6a:5b:45:f9:fd:65:9b:2f:9a:5e:f6:cd:83:
d0:f0:0f:0d:96:6b:44:af:56:e6:7e:e4:7b:a1:bf:a2:cc:3e:
17:15:0c:da:9e:21:5e:4e:f5:a0:db:e3:76:f2:be:fa:65:c7:
4b:6d:d8:ae:61:59:e9:26:83:e1:67:14:7f:ca:04:b9:aa:79:
a4:0f:ed:4d:f3:90:24:08:77:3d:55:83:fb:45:60:f9:aa:cd:
59:d4:e7:dd:48:a9:a3:b3:ac:2c:71:4b:af:33:ad:b9:cb:89:
13:f7:86:15:4e:48:e4:c4:6b:8f:8c:53:cf:44:8c:31:1f:e7:
61:e7:9f:f9:00:b9:7d:d3:a7:b6:99:a1:cf:a1:00:f0:28:b5:
87:56:0e:d3:5e:c1:86:3c:8e:21:36:4c:66:c6:9a:65:97:47:
19:1a:b4:78:5c:6c:03:5b:83:c6:aa:be:57:72:2a:11:d2:77:
17:8d:ce:3b:93:c3:33:5e:12:82:82:c6:85:95:cb:9e:6f:9c:
eb:13:8b:16:60:5f:b5:eb:84:8c:d4:97:0c:1f:19:de:87:3e:
09:61:d4:45:59:48:c4:52:de:9c:d2:de:cd:5d:a8:9b:99:42:
ea:44:ce:08:a9:40:58:bd:a7:3b:e4:c5:e4:e9:0e:db:90:e1:
3c:c0:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:18:39 2026 by rpki-client