
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
File: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json)
Hash identifier: ddkBJ4lxamYw6kDRRFttnxPnPi4EstT4EJSJt5kOtsM=
Subject key identifier: 91:FD:88:E1:66:95:27:E0:25:EB:DF:A9:45:AD:76:6B:61:28:BB:7A
Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
Certificate issuer: /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
Manifest number: 013F
Signing time: Fri 25 Sep 2026 05:35:40 +0000
Manifest this update: Fri 25 Sep 2026 05:35:39 +0000
Manifest next update: Fri 02 Oct 2026 05:35:39 +0000
Files and hashes: 1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: zdZyxoFYO4DwGT+v+klU0abXV+3f+NWhfq133jitLRQ=)
2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: WLTPc3nTZLsY0TJ0P2ml2s4l522A2jynEA00QV6JYYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Validity
Not Before: Sep 25 05:35:39 2026 GMT
Not After : Oct 2 05:35:39 2026 GMT
Subject: CN=6ab6082c-4e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:6c:eb:56:1a:e5:47:bd:12:33:3d:cb:89:
26:b9:1e:e3:b8:44:3f:20:61:cf:51:35:83:6d:ad:
2a:b2:bc:15:cd:e1:f5:8a:4b:f3:e8:20:bd:01:f7:
ce:1f:f7:14:1c:ee:ed:02:4a:00:2e:f9:bd:ef:f8:
6e:99:3b:c9:f9:56:6e:24:b7:d7:4a:9b:df:17:ac:
65:36:33:60:5e:0e:0f:9b:1a:4b:3e:b4:bc:ba:56:
02:ae:38:ea:a8:36:32:e3:db:de:38:c3:49:b8:e5:
7c:e1:9d:e7:b8:e4:65:b7:2d:02:5d:2a:a9:5b:e5:
58:97:d5:18:d8:3a:31:14:3f:8b:9a:d6:10:af:b6:
7d:3f:68:d1:36:4f:ac:2e:5f:62:bd:db:d4:d7:15:
dc:59:ec:91:b5:85:ff:fb:ac:da:48:6a:99:96:c1:
2e:ea:d8:dd:88:7e:4d:a4:c8:50:e1:bc:3f:da:d8:
c0:1b:8e:f1:03:96:6a:02:27:c0:e4:df:af:5a:ab:
5e:19:bb:40:f2:bb:57:41:7d:e7:e1:5e:73:09:14:
0c:5a:e0:f4:40:33:84:56:f2:04:4e:b0:05:3c:c9:
16:1b:1f:14:a3:8a:66:3e:71:4c:09:d0:08:1e:1e:
46:8e:09:9d:43:5b:22:96:47:49:8a:53:26:71:3c:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FD:88:E1:66:95:27:E0:25:EB:DF:A9:45:AD:76:6B:61:28:BB:7A
X509v3 Authority Key Identifier:
keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:a4:53:43:5b:64:3e:3f:6f:7b:1c:e4:18:52:ff:32:4a:f9:
cb:14:50:f2:0d:2d:eb:c0:6b:d1:32:ba:50:b0:a1:44:b8:8d:
1e:17:9d:4f:44:59:a1:21:26:74:dd:92:12:92:84:0d:37:11:
48:a4:2d:0f:1f:87:ca:18:d9:1c:56:c9:0a:1d:9c:81:a8:bc:
da:d2:71:74:11:28:c5:ae:9b:b4:5f:70:33:33:1e:26:75:f7:
d1:49:6a:86:c5:5a:0a:9a:e4:ba:be:b2:15:28:13:b4:c6:4e:
33:8b:90:de:51:0c:e4:5e:0a:42:87:db:d3:8d:ce:35:c9:3b:
77:51:23:3c:ea:c1:d8:a0:61:ed:d0:a8:f6:1a:af:e5:e5:48:
48:9f:3e:7c:8a:6a:53:a2:c6:cd:ad:c9:bd:49:46:be:12:54:
00:98:a6:70:37:7f:c2:7d:a0:8c:9c:9e:ca:77:b2:16:f6:e8:
ea:67:73:97:0b:f7:bb:43:18:52:33:af:cc:b8:20:8f:e1:25:
35:76:77:02:20:9e:44:2f:f0:17:a3:44:64:3b:a4:73:5d:ba:
51:bf:59:7e:35:4d:13:72:1a:a5:12:bc:64:a9:62:b6:49:1a:
3c:40:ea:18:95:57:73:e9:58:08:c7:89:14:3c:a3:13:e6:8b:
10:5e:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:20:44 2026 by rpki-client