
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json)
Hash identifier: Q0fAz/+qMC9eCO3z1QQsFIa40dI6J1w0fkY59qigbMk=
Subject key identifier: CF:8C:A9:4B:01:17:42:6F:E3:28:17:0D:B3:85:4D:0D:5A:B2:CF:CF
Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA
Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
Manifest number: 021C
Signing time: Thu 23 Jul 2026 04:07:03 +0000
Manifest this update: Thu 23 Jul 2026 04:07:02 +0000
Manifest next update: Thu 30 Jul 2026 04:07:02 +0000
Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: oO3yfFYVsZyUzQ2qGdB5B9RW7pZnXLU6z4Ngp/KIsak=)
2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: wKye+Bf4sTbbkGL0Ip13QuqoroMtLnMn7BDQ5dOtrUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl
rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118009, serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA
Validity
Not Before: Jul 23 04:07:02 2026 GMT
Not After : Jul 30 04:07:02 2026 GMT
Subject: CN=6a619367-10d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:c8:c5:c4:38:05:1e:46:5e:b7:84:9d:6d:
d6:d8:db:56:ad:0a:31:5c:4a:80:56:c5:77:8b:d6:
d6:6d:e2:f7:6d:cc:3b:f7:cf:2f:10:50:12:03:47:
62:ba:73:c6:4f:cf:1e:96:4d:d7:2c:87:ab:d9:b3:
47:fe:aa:56:c6:31:ca:0d:5c:13:68:83:4c:bd:2a:
0d:fe:d5:6c:d2:94:e5:43:14:17:6b:15:b7:6a:9f:
9f:9a:53:e6:32:4e:99:22:d0:33:06:3e:56:63:73:
e0:1e:69:bf:da:12:5c:28:24:f0:ae:33:73:74:0c:
b6:a2:33:04:eb:fb:87:90:ab:9e:b2:d1:54:03:f0:
1d:42:86:32:8c:10:77:d8:5f:a6:97:30:39:02:03:
4c:40:47:e7:39:fe:b7:39:ce:0e:53:3f:89:8e:dd:
81:5d:11:78:73:54:49:e8:77:b0:77:27:31:3b:fc:
f9:2d:03:56:cc:4c:56:d0:73:a9:fa:26:22:ac:c4:
0f:e5:ca:d7:01:a0:65:a1:34:08:ba:c6:ab:55:a1:
d1:b3:81:ce:65:c6:90:58:8a:75:f9:03:8c:dd:04:
f3:48:57:bb:94:33:a4:92:74:95:15:8b:f6:2b:97:
67:cf:fb:77:38:af:b7:fa:8a:a8:a8:f9:ee:b0:36:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:A9:4B:01:17:42:6F:E3:28:17:0D:B3:85:4D:0D:5A:B2:CF:CF
X509v3 Authority Key Identifier:
keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:92:c1:f2:d2:12:80:2d:15:fb:e0:09:8f:2b:45:fe:15:da:
db:a0:23:05:5d:9a:2a:fe:c4:6d:a7:e6:04:ef:7d:5d:83:3c:
e0:28:f0:a7:b9:3f:e2:d5:2b:7a:b8:c1:bb:50:68:a7:99:37:
b2:45:a7:10:b5:45:d8:2e:c9:1e:93:65:e4:d2:a8:4d:7f:6f:
99:2b:51:b3:e9:c7:b9:7f:79:47:21:b6:d5:9c:96:2a:4c:58:
f3:fb:3f:78:59:6e:77:1a:87:74:f5:5c:ac:2d:9c:0c:68:77:
31:18:97:8c:7f:0f:66:34:c1:b8:4d:b8:a8:b9:6a:3f:05:64:
91:95:89:31:12:17:16:65:a6:3d:17:89:b1:9f:03:ba:1b:e3:
c5:ea:99:52:14:16:3a:23:39:42:97:65:67:f0:11:0b:e9:3b:
88:8d:4a:29:a7:bc:26:ac:0d:ee:25:00:d4:b3:c9:28:b2:48:
2b:8c:b2:f4:bc:28:82:2c:d4:8a:dc:15:74:10:4f:33:f9:96:
f4:53:c8:c7:93:b8:0f:37:65:aa:72:09:d5:35:f6:c5:c0:52:
cf:32:b8:18:40:c7:ad:a3:ae:53:aa:e3:f7:78:d8:9c:5f:1f:
0a:1a:2d:2b:d1:4a:85:de:bd:a1:c8:d9:99:e4:4c:e3:50:5e:
56:19:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:28 2026 by rpki-client