
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier: 94YnzzzssKb67UoU45wHzVUWRkmea5jRFzJW2KgjOwc=
Subject key identifier: 4D:A5:48:34:D6:4D:96:56:7D:F6:D0:72:A7:6F:D1:6E:C2:1D:87:9C
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial: 0D1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number: 0D11
Signing time: Sat 04 Apr 2026 17:57:00 +0000
Manifest this update: Sat 04 Apr 2026 17:57:00 +0000
Manifest next update: Sat 11 Apr 2026 17:57:00 +0000
Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: U4jRVsy5VfGZKLG27GucqOlyh+9Xt5sQU4sGPYZihrw=)
2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: 2ofxCMC41OCd7xHEWUK98z0O11e/ASg9LLd6dkWeoic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
Validity
Not Before: Apr 4 17:57:00 2026 GMT
Not After : Apr 11 17:57:00 2026 GMT
Subject: CN=69d150ec-b52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:4e:f0:db:ff:e8:9a:9d:46:24:a2:f2:5c:
6e:90:49:44:62:d2:8c:39:03:fc:07:bb:b6:7a:48:
26:c4:58:11:d2:cb:4d:18:46:cd:ce:b0:7a:1d:92:
40:5b:7f:35:42:c9:11:eb:d7:f9:c0:a4:e2:5b:b7:
78:df:da:31:da:ca:4b:c5:e5:7a:e5:ce:be:4f:66:
e4:67:42:43:5c:2b:a3:3a:18:94:46:0b:99:08:c4:
ec:f0:d3:f8:d5:3e:57:b8:2f:87:88:1f:dc:05:b8:
6c:81:bd:b2:cd:3d:62:2f:01:de:e6:ac:e6:a8:7b:
03:ac:7f:ac:43:82:77:18:9e:ef:2a:cb:b4:f7:78:
13:bb:47:bb:c5:6e:1f:b7:d2:c0:8b:51:42:83:d6:
fc:f2:bf:7b:53:f9:b1:36:2c:59:89:b0:84:d3:f5:
3a:60:73:4e:6c:9e:56:ee:2e:67:a5:b0:6a:49:3c:
af:ac:b9:89:50:44:d8:86:09:59:65:b5:f9:4d:cf:
23:70:dc:f7:cc:8c:80:37:2c:b4:66:75:ce:33:e2:
22:ef:15:4d:6e:9b:e3:d5:ba:44:98:6d:b9:33:be:
b5:96:c2:21:08:2c:f9:57:a8:4e:df:34:9a:10:d0:
86:d4:8a:ff:44:2d:ce:16:b8:65:d0:7f:7b:9f:b3:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:48:34:D6:4D:96:56:7D:F6:D0:72:A7:6F:D1:6E:C2:1D:87:9C
X509v3 Authority Key Identifier:
keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b3:32:87:98:a0:02:e0:97:07:fc:98:37:da:86:6b:c8:e1:
c0:bc:55:37:37:55:59:28:65:38:2c:94:c2:ec:c3:99:2c:f9:
54:b1:72:f8:45:d0:3e:c0:5f:f6:51:d6:1f:76:17:8b:23:8f:
0d:a4:11:cc:fc:81:70:b3:24:8d:1a:ca:9f:f5:b6:5b:da:66:
b1:d7:64:33:91:ee:90:77:9f:08:6c:fe:e6:ea:94:26:ab:22:
7b:6e:7c:2c:55:59:3a:24:df:62:ad:2a:9f:22:c9:98:40:aa:
60:5d:8c:bc:24:91:26:7a:78:9d:9c:9d:da:8c:54:e7:95:38:
cf:73:f6:86:23:0d:8b:77:97:07:09:97:50:2d:c0:f7:27:ea:
08:f6:de:0c:ee:bc:b6:46:14:1b:24:69:9e:30:5d:c7:22:71:
60:b4:6b:0d:81:4a:6d:42:46:e7:73:64:6e:03:ee:c3:30:3c:
80:3f:3f:8f:aa:98:1c:0a:e6:00:76:ba:2d:f3:d4:52:b7:57:
fb:d4:16:9f:13:57:d0:7a:db:23:be:42:db:3a:97:a3:03:b1:
5a:f8:8b:52:cc:bf:e2:bf:e3:19:b9:00:59:dd:c4:81:09:28:
01:d4:c2:29:6b:66:1e:b6:74:b0:01:3d:3d:f9:ba:51:4b:f9:
49:b6:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:26 2026 by rpki-client