
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json)
Hash identifier: yHD7/0ob4ZS+JyAr5I1XIoTXkF4jNQLRnMuYXGtWbdk=
Subject key identifier: BC:1D:65:9E:6C:77:AC:8D:BB:86:4A:B1:6D:38:93:98:2D:3D:5F:32
Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Certificate serial: 21BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
Manifest number: 21BF
Signing time: Wed 20 May 2026 15:54:12 +0000
Manifest this update: Wed 20 May 2026 15:54:12 +0000
Manifest next update: Wed 27 May 2026 15:54:12 +0000
Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: miCWQAxXciHsqnCkeetL+01Pt+wDYJvL3F62R9yLIrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8639 (0x21bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Validity
Not Before: May 20 15:54:12 2026 GMT
Not After : May 27 15:54:12 2026 GMT
Subject: CN=6a0dd924-c82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:ac:49:da:52:3b:3e:e6:d9:7c:23:a2:61:
2d:0c:a5:95:23:b2:05:38:e8:49:35:4b:04:34:15:
aa:7d:df:d9:82:9c:7d:85:fd:e8:9e:d4:0b:e9:45:
87:39:37:c7:8e:fb:27:3e:f8:9a:cb:15:34:a0:3e:
3f:89:b2:78:29:1b:35:3f:9c:92:3a:99:ea:c9:c6:
3b:61:52:6f:a5:1d:6e:eb:c7:40:6c:b0:5c:2d:e5:
46:50:54:74:a0:4e:69:67:b7:4e:73:5d:ef:0a:f2:
65:2b:d0:c8:72:0c:50:05:84:a1:bc:74:e9:88:d4:
77:76:3a:b7:31:68:d0:7f:03:8f:25:b8:02:1a:c4:
a4:b7:7e:d7:e4:a5:ab:ee:60:3f:f1:4b:9d:96:f4:
c8:1a:d5:c0:d2:ab:99:33:3e:b2:11:0e:27:d6:cf:
d3:b7:cf:d5:eb:f4:ec:b7:b6:ad:7b:e8:53:f5:5c:
5c:af:29:e8:b5:a0:19:8a:6b:8b:f1:2e:5f:e1:3e:
9d:f4:06:1d:14:5b:6e:86:c1:ea:bd:19:7d:a4:76:
36:6a:db:60:49:75:13:27:36:aa:0f:74:06:bf:48:
86:d8:d4:59:c9:fd:69:e5:30:53:0d:f3:d2:42:3b:
ec:cb:77:6b:51:a4:47:39:7b:5b:fd:27:45:eb:b1:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:65:9E:6C:77:AC:8D:BB:86:4A:B1:6D:38:93:98:2D:3D:5F:32
X509v3 Authority Key Identifier:
keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:02:26:ca:66:9a:b4:02:d5:aa:46:3b:0e:00:f2:6a:d6:2a:
c2:64:78:3e:d6:72:fe:e0:41:fe:f1:87:1a:be:6b:25:cf:24:
c4:0f:0c:9b:35:df:c4:43:e4:4c:a3:77:25:4b:af:c6:bd:ee:
9a:76:59:cd:a7:d2:8c:e2:36:fb:a7:1f:b7:93:78:b1:53:58:
a2:3c:d8:c7:60:e2:a1:f1:76:e3:cc:9c:8c:c0:83:81:92:3b:
dc:1e:bc:48:ec:fd:b4:84:9d:58:ce:64:31:26:5d:e2:61:f0:
ad:e8:0e:cc:d0:c1:e1:c2:56:3a:82:86:84:70:61:cb:bb:96:
bd:e1:72:36:75:51:41:d1:d5:38:3f:c4:28:c2:50:2d:ba:da:
84:df:22:b1:a7:1a:21:ce:27:d4:f5:78:ca:c0:da:b8:91:b9:
95:e1:9a:26:4a:1f:b4:3b:cd:92:79:3f:2b:9f:14:b2:84:fc:
fd:75:76:6f:53:f0:5c:dc:3c:e3:03:f7:77:1f:97:97:4a:1f:
d4:a5:48:0a:a9:de:6e:51:45:4a:17:41:72:1b:83:d1:53:96:
7c:9d:81:86:dd:17:24:d8:ae:23:5b:19:ba:db:a5:e3:38:66:
c8:b2:dd:6c:ee:cd:a5:08:4b:c8:3b:89:80:a6:a5:4f:89:49:
6a:36:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:22:33 2026 by rpki-client