
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier: w2Vb5YAQ5/aPa7UlQvTBLqcbXj7HZfea7y+mHZb8I+k=
Subject key identifier: 1F:F4:FD:3F:3C:CB:42:44:5B:6B:3C:05:FE:57:6A:54:EE:86:3F:12
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial: 087D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number: 086E
Signing time: Thu 02 Jul 2026 21:02:21 +0000
Manifest this update: Thu 02 Jul 2026 21:02:20 +0000
Manifest next update: Thu 09 Jul 2026 21:02:20 +0000
Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: WIBY4t9pW2/EOxg4k/gnYE8TLtGGFFvt9PqHi9QCvws=)
2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: PnvDWjWzjaNuJRVmvtkfv01lOJ4mbsRef16ZNQueyWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 21:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Validity
Not Before: Jul 2 21:02:20 2026 GMT
Not After : Jul 9 21:02:20 2026 GMT
Subject: CN=6a46d1dd-c4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:6e:56:6d:88:d4:e8:dc:f0:38:f7:73:a9:
54:57:04:c5:05:f9:a5:59:d4:97:0f:7f:15:15:06:
dd:a9:c2:a5:72:fc:8c:be:f0:bc:2d:3e:73:53:0e:
84:ca:fb:52:0b:cb:c7:0c:39:fe:ac:65:09:9a:9f:
e0:a8:a5:e4:82:c6:37:61:6f:a0:9d:96:fb:09:9f:
fe:34:37:21:ea:8e:b5:d8:0c:dc:8f:2c:06:0a:b5:
3e:1c:bd:c3:64:c0:df:ff:a3:6f:d3:ea:1f:78:e2:
34:9c:00:9f:28:66:cf:98:a9:cc:9f:0f:11:7c:ec:
14:a7:26:87:3d:fb:87:0d:fb:3f:bf:10:84:a7:15:
a8:e8:0a:5b:43:3a:29:3d:d4:fd:c9:11:65:5e:3e:
d1:fa:78:5c:e8:90:ef:51:ce:a3:c2:b4:90:4a:4d:
24:eb:5c:7e:61:39:a7:a2:b0:20:93:78:e2:15:f8:
64:5c:ce:85:72:d6:81:ff:67:6e:42:02:2e:62:3a:
94:2f:5e:5f:75:37:27:90:f9:eb:60:ef:14:09:0e:
e6:0e:95:14:38:c5:3d:73:02:fc:5f:61:71:60:06:
ea:c6:cc:b1:73:5e:24:f0:1e:ad:31:d3:05:6d:9b:
0f:74:6f:92:26:f4:af:e4:96:f6:14:fd:b2:69:f0:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:FD:3F:3C:CB:42:44:5B:6B:3C:05:FE:57:6A:54:EE:86:3F:12
X509v3 Authority Key Identifier:
keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:af:86:18:a9:17:51:99:08:36:fa:cc:08:d8:0d:7c:78:d1:
65:1e:db:30:da:9b:57:cf:9d:a4:81:e1:ee:25:80:dd:95:d3:
aa:fc:13:40:7e:06:d6:d1:da:4a:00:49:a0:b1:f8:9c:b7:87:
1c:4e:d5:25:a2:aa:9a:d4:17:e7:a9:10:4b:5a:82:f9:37:f0:
fe:26:99:d0:6e:f2:59:43:02:3a:2b:88:23:ad:ce:e8:68:f2:
e5:be:45:da:f6:9e:c7:3e:f9:5c:23:37:ef:4c:df:18:f6:12:
42:67:85:c4:fd:f7:b4:e7:b1:7a:96:c4:9e:2a:1c:7e:19:82:
4a:fd:62:64:0b:b8:97:82:69:24:2c:ab:80:47:15:f9:36:3f:
62:32:08:ba:91:89:b3:8f:1d:ea:a3:5a:63:de:ad:e5:b8:ea:
c5:b7:e6:06:a5:a6:9d:a5:c7:ef:2b:b1:85:5c:24:c3:43:cd:
8a:94:e2:7b:17:2f:97:ad:6b:1d:2d:b7:22:8a:03:6b:65:58:
f5:6a:7d:e7:c3:93:6d:75:4e:ea:7f:78:6d:fb:80:c8:22:55:
31:2b:9e:75:97:9a:ca:ea:31:7e:ba:7a:84:65:0c:69:21:a0:
38:7d:71:b3:0a:0c:c8:70:af:2d:67:9a:5d:1a:6a:28:40:ff:
15:44:14:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 05:24:34 2026 by rpki-client