
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
File: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json)
Hash identifier: CzaVWE9jd07X3Pc8Q+hXGHr+6VY6xEpqSbrH2zWf5Q8=
Subject key identifier: 15:E1:0D:A4:6B:15:9F:CD:1C:FD:20:C1:FD:2F:F4:83:7B:41:49:66
Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
Certificate issuer: /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
Manifest number: 011C
Signing time: Thu 23 Jul 2026 07:35:54 +0000
Manifest this update: Thu 23 Jul 2026 07:35:53 +0000
Manifest next update: Thu 30 Jul 2026 07:35:53 +0000
Files and hashes: 1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: TUWSkiZlE7FMQADKunfRiP5RulVdHqbbrOqsIKrt5K0=)
2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: zpf55g2EZGmJ8domoDiH0XWR0tTe31ZdyOLgVVw44Oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Validity
Not Before: Jul 23 07:35:53 2026 GMT
Not After : Jul 30 07:35:53 2026 GMT
Subject: CN=6a61c45a-5639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:bc:d5:7e:2c:3d:99:1f:ed:05:0e:04:ad:
1a:fc:e4:35:c4:41:77:e7:76:6b:f1:c7:73:67:a6:
ef:a1:40:7c:f1:87:3b:2a:c2:34:97:3b:07:bc:6c:
aa:35:b0:da:62:18:03:76:6b:51:eb:08:fe:ab:7f:
75:2a:af:50:0c:77:27:4f:b9:4e:5b:23:ed:fa:55:
75:81:29:be:65:a6:4f:90:17:6a:d8:52:81:73:9b:
e5:c6:ef:d1:fb:23:43:a5:69:a8:92:6d:b3:c4:b5:
1b:03:9a:9d:a8:49:ae:e2:44:78:c6:b5:eb:b2:f0:
55:50:31:51:f4:97:19:86:39:c2:af:a0:6c:28:ba:
7c:a2:04:e3:d9:3e:51:59:8a:b9:1b:b3:d4:75:0c:
53:c6:02:a9:8e:26:0a:89:ee:d7:a1:f7:f8:ec:43:
ac:38:aa:e2:40:5a:8e:fd:ef:8d:a4:be:b6:c8:4a:
84:41:1a:1f:f3:50:86:92:ee:d0:f7:8c:ea:b2:53:
6f:b2:6b:24:61:03:c3:bf:e1:a3:92:65:ae:31:b4:
e9:c6:bf:ab:43:ab:64:3c:36:ed:34:ef:20:f8:43:
e5:8d:4d:9d:19:a5:5b:33:53:e2:b1:3c:0a:09:a7:
f2:76:cf:53:66:8e:b5:f0:53:e1:70:9b:45:80:3c:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:0D:A4:6B:15:9F:CD:1C:FD:20:C1:FD:2F:F4:83:7B:41:49:66
X509v3 Authority Key Identifier:
keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b5:c0:33:27:d0:8a:2e:e3:90:9a:26:d8:da:2c:8d:91:3d:
6b:42:16:05:74:d2:66:56:da:54:7c:dc:03:78:d9:3f:e3:cc:
cc:a2:19:da:21:38:48:5e:b4:ec:48:ec:44:30:51:c9:1e:06:
7e:b6:ec:37:35:dd:45:73:22:f0:f2:e2:78:60:56:09:6c:01:
1b:50:c6:ac:2e:fe:e9:a4:f7:9c:09:d8:cd:39:d0:6d:57:8e:
7d:04:08:64:fc:2b:da:53:4b:3f:ad:22:ea:df:51:1f:09:1b:
83:0f:3f:84:f1:9b:54:6e:17:fc:f0:99:ed:31:ff:7d:c8:8e:
57:d1:90:43:f6:7c:a6:f4:60:d5:fe:62:1d:ba:3d:67:18:4f:
04:e9:76:e6:2f:1a:fc:3d:b2:e6:cb:9e:9d:e9:a0:1c:16:ba:
98:55:c5:54:f3:6e:ac:51:62:2f:9b:7c:72:88:12:2a:2e:ce:
5a:74:3a:28:ed:85:b2:44:16:c4:80:af:24:f9:48:03:49:be:
32:bc:f4:62:14:79:25:88:f2:c1:88:61:ac:80:79:03:ad:c1:
47:a8:cf:b5:5c:d9:80:84:69:fd:55:7d:3e:2f:0b:ca:bc:6f:
82:68:e7:b3:ca:72:ea:75:68:bf:04:56:8c:0d:39:94:8b:1f:
b9:a8:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:20 2026 by rpki-client