
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
File: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json)
Hash identifier: dGJQ9rv8jQbuxXKPDNKECnReGbhhtvWKW7t58d6OmV0=
Subject key identifier: 81:20:C7:4A:50:30:21:94:6B:A2:67:B5:83:38:65:C9:64:BB:D2:43
Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
Certificate issuer: /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
Manifest number: E0
Signing time: Wed 25 Mar 2026 05:49:05 +0000
Manifest this update: Wed 25 Mar 2026 05:49:04 +0000
Manifest next update: Wed 01 Apr 2026 05:49:04 +0000
Files and hashes: 1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: svNuTGxlJ4cHX5j85IiGUlKhAJ1apgWx4P1zDaBqOmY=)
2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: zpf55g2EZGmJ8domoDiH0XWR0tTe31ZdyOLgVVw44Oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Validity
Not Before: Mar 25 05:49:04 2026 GMT
Not After : Apr 1 05:49:04 2026 GMT
Subject: CN=69c37751-06ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:f2:25:2e:44:ba:19:90:3a:39:fe:15:74:
a4:40:15:7a:e4:9b:e2:b4:b6:f3:75:49:e1:cf:22:
a6:d5:69:8d:12:b1:bc:99:55:d0:56:6f:28:cc:c3:
59:17:f9:c7:9f:cd:bf:be:8a:e8:08:fe:e7:67:44:
a4:77:11:68:e2:a5:54:ce:f3:c0:fd:e2:e0:da:be:
5e:5b:47:74:a4:91:7f:56:f8:2d:69:b8:17:65:7b:
60:bc:0e:26:35:50:69:1c:51:05:b3:65:8a:eb:f0:
a0:3b:05:b8:08:9a:1c:75:24:eb:88:46:90:b7:43:
9d:e4:d4:24:21:b8:27:07:7f:fb:f9:6f:0e:51:22:
70:11:f0:e7:bd:a7:ba:c7:53:dc:7c:49:ea:bf:2b:
3f:58:74:f4:6f:97:6e:a0:c7:49:79:93:18:66:fd:
d2:4a:60:ad:5c:3c:92:3e:06:c0:e5:0e:63:bc:bc:
1b:f8:6a:2d:db:08:90:e4:58:42:2b:16:f5:48:61:
2d:fc:08:12:5a:e7:5b:f6:72:f2:48:63:e9:aa:6e:
a1:ff:fd:96:f1:b8:ea:53:1a:af:f1:a1:ce:fa:bf:
5f:5e:35:d1:43:89:5c:30:14:9d:9b:62:40:dd:c5:
da:92:d2:b6:4a:90:62:04:b5:55:4b:18:69:77:c1:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:C7:4A:50:30:21:94:6B:A2:67:B5:83:38:65:C9:64:BB:D2:43
X509v3 Authority Key Identifier:
keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b2:2b:d5:86:f5:b2:08:35:0e:6d:1e:a7:ec:cb:ef:65:2d:
98:0c:5b:14:e5:e8:3a:b8:0c:ef:44:b4:eb:63:3f:45:c8:96:
f1:05:8d:48:5c:a8:87:ee:5d:28:53:e2:5a:2f:9e:c9:fb:7e:
c2:88:98:a4:3f:67:58:1e:27:0c:5f:0f:19:b6:4d:f9:c7:8c:
e1:15:4a:d0:a0:0e:aa:36:58:df:40:e1:a0:45:17:a9:49:e1:
de:54:79:73:bb:23:22:1d:46:77:1e:1b:a5:56:fb:74:2c:84:
21:53:df:f1:c8:33:7d:98:05:28:9b:bb:e9:3e:c5:08:38:c8:
9e:6d:08:05:be:05:ce:f6:5f:fd:63:a4:e6:3e:95:6e:52:7d:
ae:aa:36:3f:9b:c5:85:90:a8:05:03:6c:a4:ec:33:49:a5:6e:
ea:00:8d:b7:8f:8c:9f:b1:5a:70:04:78:17:76:ca:8c:2b:cd:
03:d0:14:c2:c0:39:19:cc:4f:ed:6f:32:45:2b:ce:1b:3f:5c:
3f:21:93:a3:73:ad:8d:e1:23:63:bf:13:8e:8c:b5:b2:42:03:
63:85:23:c8:c7:40:1d:32:0e:22:3c:2b:21:4e:84:9c:91:fe:
ab:13:04:04:0a:87:a1:c3:14:a7:99:37:24:9a:94:10:95:6f:
46:fe:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:20 2026 by rpki-client