
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: 7DN4GBKvmlXu00QSQFHRl2nt2bHii4aOmUdtkgHNd94=
Subject key identifier: AE:72:D3:6F:85:12:E6:8C:33:31:42:28:6E:59:70:36:5B:71:CF:A6
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4A8A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 4A6C
Signing time: Thu 11 Jun 2026 14:50:27 +0000
Manifest this update: Thu 11 Jun 2026 14:50:26 +0000
Manifest next update: Thu 18 Jun 2026 14:50:26 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: 3AIDJXpvLFBQEum4+YQcEHDefLDnsfyjL+RBRIWw6KM=)
2: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
3: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: R5q4mx+s9uEpcu2HtTPXgSdWbDKlsykJ60NOYm07C3w=)
4: _KtbpyYSYFeOSNmqwBIRqzpaIwk.cer (hash: VxzHTIWHWE5e1kkdmrFBypeeSBudraax6wjaIcwT32Y=)
5: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: iV05xmMyePyIT86cKY8Y2kLrNQLqTwwd1A2Z00Rys/o=)
6: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=)
7: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (hash: sYKa+Y5lE+05j9p6XCNihD6VxqVWOC0uNPeofzjcijQ=)
8: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (hash: dc92CXSHVcK4zCYIrrv+NPWC93p6+eAno540R7w0xUo=)
9: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: 1+Rzv17HOJVmhyptKkOz5vmBbVoA02iCHrgaS/bnCHE=)
10: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (hash: kRE596OuuyWoxbv8T1vR2OaR4I4quaciUDwMti2Nlmk=)
11: BvSy24SzhwK186kqeJJV2c_vPus.cer (hash: Cy51FJsOgmK/E7wlpy0E5rXUKLSOTbCvLcmr1LlMA0c=)
12: zURUsk4_99x1y76Rm92nnEe5Xqc.cer (hash: H5fg7c2O93XAHMjs397YJBjJaE7ncYjqoDI2vqqer3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19082 (0x4a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Jun 11 14:50:26 2026 GMT
Not After : Jun 18 14:50:26 2026 GMT
Subject: CN=6a2acb33-737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:ad:1b:5c:3d:60:07:0d:e2:36:67:cf:9a:
27:a8:e2:1b:88:eb:9a:40:ae:57:97:a9:28:5e:f9:
cc:2a:0d:41:3e:ee:44:d3:79:11:e7:57:7b:1b:9b:
d9:dd:a8:8d:49:ad:23:c2:55:a4:98:06:d2:f9:d0:
d9:16:61:e8:98:61:04:5e:80:37:32:63:38:50:7c:
f7:c6:52:3c:89:10:89:7b:20:c1:91:2e:7e:80:e8:
28:13:54:49:a2:ef:25:81:79:39:b5:48:50:99:00:
13:f6:ac:69:e4:41:58:b5:47:9d:0e:71:52:78:67:
4f:30:6d:2e:c2:78:70:a8:64:2d:84:7f:66:e3:85:
b0:d6:1e:ec:09:70:d3:4f:f3:97:82:4a:2b:be:c4:
ce:b3:8a:23:d4:ba:dc:da:dd:85:f1:68:e5:96:a4:
e4:c1:57:c1:5d:39:bd:be:a3:b1:a5:58:4c:8d:2d:
e4:35:e9:a7:f7:9d:36:d7:3c:64:16:52:6a:08:dc:
a9:a8:50:c8:98:35:d7:7c:9b:4b:76:2e:d6:cd:f7:
d1:03:23:1b:39:d6:f9:25:b2:c5:67:3f:3d:1a:af:
de:cb:25:dc:14:2d:6d:9f:3f:dd:df:9d:f2:7d:c3:
cf:b9:f1:5b:6b:70:5b:bc:e1:76:fa:44:a1:fe:3c:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:72:D3:6F:85:12:E6:8C:33:31:42:28:6E:59:70:36:5B:71:CF:A6
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:6b:67:e5:aa:3f:3c:2d:e3:58:bb:8b:92:5b:0a:ac:a8:9b:
b9:af:f0:fa:68:23:0f:19:3d:19:c6:fc:7d:b7:59:e2:2d:79:
d0:77:8d:58:86:16:88:3d:2f:bf:d4:32:88:c2:a7:4f:d1:28:
7a:c1:c3:4f:b8:b1:da:01:22:af:d8:e5:15:8e:41:2d:51:07:
b1:88:9c:a0:6a:fc:0c:23:52:c6:00:71:31:f3:73:90:11:22:
f9:b1:ec:b9:5c:6f:cd:75:02:aa:16:9c:45:a2:2f:e5:24:eb:
60:09:d6:6c:d0:2d:01:0f:cc:94:79:f3:75:10:e0:6a:bd:6b:
d2:c9:f6:f7:f1:cd:52:12:86:ea:60:40:3e:41:15:f2:4d:1c:
62:7c:53:45:9c:41:e9:64:73:5e:57:06:32:24:df:db:2b:ad:
e8:8c:88:95:9e:73:6e:4f:0f:29:bd:68:c3:96:68:3c:9d:99:
3e:08:de:8b:91:34:76:d9:9d:ed:69:6a:77:37:a3:d2:f8:3e:
83:c9:4d:2b:b0:75:20:5d:4a:3f:2a:e6:3c:f6:04:ef:f7:91:
a8:48:49:2d:e9:88:83:84:28:08:b7:17:c0:28:a0:d0:47:5f:
89:cd:3b:e7:6f:e0:c0:70:6a:1b:14:d9:41:6a:d9:48:ba:ad:
1b:c7:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:52:13 2026 by rpki-client