
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json)
Hash identifier: Wg6rv3y/wIDyjsPo4uE3Kae+7K2bLQwNcoQ70eJ/IDk=
Subject key identifier: AB:C0:9F:3F:46:F6:52:C2:A5:26:10:3F:C9:F8:48:D1:3A:7D:5F:A2
Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69
Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
Certificate serial: 08CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
Manifest number: 08B9
Signing time: Tue 02 Jun 2026 20:31:07 +0000
Manifest this update: Tue 02 Jun 2026 20:31:06 +0000
Manifest next update: Tue 09 Jun 2026 20:31:06 +0000
Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: CGSyjd0ymSBQUBeRCe9Zd6KQV75pXpfYNLySMvTQUnc=)
2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: edMpAdsKCKk/U5YKtWRInEEpB1MnGnib+hFAYPoQeoE=)
3: FB53E88A2D9F11F19981FFD49F833773.roa (hash: ZAdRDtRumQ9iSxMpncdOyULKYgh8Rn2K/EDmIVrB3X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl
rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
Validity
Not Before: Jun 2 20:31:06 2026 GMT
Not After : Jun 9 20:31:06 2026 GMT
Subject: CN=6a1f3d8b-a5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:d8:6f:51:bb:aa:47:f4:03:cf:08:7e:9b:
40:98:d9:29:b7:89:52:a2:e2:87:d0:2a:5e:06:3c:
e0:7f:14:e3:1a:13:b6:8d:3e:24:c8:ed:c5:07:d7:
67:2d:c0:4a:d7:13:83:29:17:2f:7e:15:72:38:94:
bc:98:8b:84:05:a4:7c:6c:de:3c:52:2f:a7:06:e1:
c0:bb:37:29:21:6c:f9:20:67:84:a7:7f:54:66:27:
9e:31:ab:dc:09:19:3a:c5:a8:58:d0:19:57:5b:c5:
1a:32:17:80:6f:be:f4:fa:42:5e:b3:f7:ac:0f:b0:
3e:f2:be:9c:36:4a:44:be:c9:1e:55:03:db:e9:89:
df:ed:30:a6:79:ce:43:21:b1:bd:2e:ff:f6:de:60:
5c:eb:8b:f2:13:0b:7a:4b:73:99:9e:c1:9b:f8:7c:
9a:09:25:e2:b5:b9:7f:56:2b:d6:2c:3f:84:43:be:
f8:19:b4:d3:2c:11:2f:84:ec:8a:21:6d:d9:bd:58:
c2:a0:b9:5a:d9:a2:29:65:0c:b7:28:a1:d1:af:61:
ee:b2:16:d3:25:83:1c:4e:6a:b7:05:26:21:73:85:
df:03:76:e4:c1:2e:b3:1a:eb:ff:4c:e9:e0:24:00:
77:92:05:bd:88:b8:b4:60:4b:20:4d:48:85:75:85:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C0:9F:3F:46:F6:52:C2:A5:26:10:3F:C9:F8:48:D1:3A:7D:5F:A2
X509v3 Authority Key Identifier:
keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:37:12:57:70:a5:09:21:3e:b2:cc:95:a1:b7:bc:62:d0:fd:
98:cd:7c:48:1c:e0:f5:e0:85:19:82:b9:68:31:bc:58:da:b3:
b0:ad:e6:a0:27:53:f6:23:24:3f:2a:8c:ba:72:9a:7c:c3:2b:
2e:8e:e3:0b:46:c5:1f:4c:13:55:75:f6:38:5e:a0:ff:27:75:
35:9f:69:5e:db:dd:ee:af:55:1f:5e:2e:e2:41:0e:23:c1:72:
c6:87:3e:23:1d:3d:10:f9:cc:ff:cd:88:69:81:55:45:81:9d:
50:6a:a9:07:4c:1a:30:c6:20:32:17:9e:ec:a8:b1:37:1b:da:
37:ba:63:ea:a8:40:32:26:01:5c:18:2d:72:f7:cc:5c:4a:8c:
fa:3c:d9:2b:16:36:74:5f:18:2d:2c:29:ac:82:91:d5:bf:8b:
fb:c8:4e:e4:fc:e5:bb:a3:34:f8:45:96:86:df:b0:3a:d4:e9:
a5:32:63:7c:2d:02:ce:c0:9f:4c:82:92:a6:90:a5:e3:cb:a8:
3d:70:c5:d2:e7:a2:04:3f:6f:77:7a:3b:6a:e8:49:70:b9:52:
57:60:e8:a6:68:1b:10:21:74:5f:5d:10:31:ea:9c:66:6c:f2:
73:ea:d9:3a:09:4b:a2:14:3d:1d:31:fc:7e:27:51:33:a9:f4:
71:ca:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:34 2026 by rpki-client