
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
File: lqeZovSzCLIlIrzkXjGNanAmKSs.mft (raw, json)
Hash identifier: M9xMfZQd/c/ioOaM6DTeHqRtlMotWfzsI8MUQiexWFQ=
Subject key identifier: 45:28:DB:70:56:7A:DA:CB:73:01:68:59:87:EC:C7:60:EE:CE:BC:49
Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
Certificate issuer: /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Certificate serial: 128D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
Manifest number: 127D
Signing time: Tue 22 Sep 2026 17:01:06 +0000
Manifest this update: Tue 22 Sep 2026 17:01:05 +0000
Manifest next update: Tue 29 Sep 2026 17:01:05 +0000
Files and hashes: 1: lqeZovSzCLIlIrzkXjGNanAmKSs.crl (hash: kqTlD+ivs6hp+TPN0JnmUkMxn2B+AnZpgM4qjD34e5c=)
2: 318BC266FEA911E8BF138B59C4F9AE02.roa (hash: S+enzldOi/Tk8VhBxK9J1PD1ALiMccvtC2k5b2Y8TNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl
rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4749 (0x128d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BA4B, serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Validity
Not Before: Sep 22 17:01:05 2026 GMT
Not After : Sep 29 17:01:05 2026 GMT
Subject: CN=6ab2b452-b20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:f3:8f:07:8f:b4:66:f8:bc:93:23:05:d6:
fa:65:53:e0:85:9d:3f:8d:26:ce:a2:de:93:4c:d0:
b7:bf:82:54:97:34:7a:8e:d8:e0:19:94:65:4c:ce:
93:a6:d9:d5:e2:44:cb:2b:f5:aa:98:ba:53:d0:6d:
7f:58:17:cf:71:74:8b:40:33:eb:b8:d1:e5:cc:04:
e1:b1:77:a0:bc:f7:97:bd:ac:f3:36:bf:c1:b3:c2:
10:7f:d2:fd:81:67:6b:5e:c0:79:94:17:01:7d:97:
94:10:43:31:44:57:f6:c0:71:84:12:e0:4d:8a:e7:
ba:cf:4f:11:61:1f:ac:ca:7e:5b:be:55:cc:83:f8:
23:9b:17:95:d1:0f:e7:f8:83:32:11:b8:3d:ff:ad:
c0:0a:5e:79:10:ff:7e:55:eb:30:13:aa:8a:a9:db:
32:71:73:20:91:48:cc:e2:1b:66:60:52:da:18:7f:
de:39:2d:e1:dd:8d:c1:14:35:62:14:0a:c3:65:7a:
98:c8:dc:10:5a:0e:43:b5:46:99:0f:49:95:61:bb:
eb:2e:d9:c7:c4:44:b9:11:5c:c7:ab:84:f9:c7:5f:
db:74:26:ef:a8:a8:02:e6:bc:3e:0e:df:d2:a4:b5:
19:36:fa:56:5b:a1:e6:21:52:86:52:56:88:56:2e:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:DB:70:56:7A:DA:CB:73:01:68:59:87:EC:C7:60:EE:CE:BC:49
X509v3 Authority Key Identifier:
keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5c:0b:3d:18:59:c6:ed:80:3b:e5:45:f5:37:af:e7:7f:8c:
b9:aa:78:f1:66:83:38:da:bf:82:5e:87:31:96:ec:08:c5:c0:
3c:44:0f:38:9d:1d:93:0b:cb:b7:6b:44:73:ec:48:3e:cc:27:
30:1d:07:e9:6d:88:f6:23:7f:38:90:21:24:d4:a3:bb:20:7e:
c5:a8:a1:4c:50:9a:f4:38:e3:65:cd:62:b8:bb:7d:22:89:a7:
d3:b3:ae:c3:4f:b9:f5:a3:66:33:34:47:f1:83:97:61:3c:34:
38:0b:58:e4:3b:3e:e3:2a:97:3f:92:76:cc:72:54:b6:e1:4f:
ca:11:7a:89:08:7b:6f:d2:0d:b3:6c:65:fa:ad:1c:cc:e1:94:
7e:aa:ab:ff:5b:aa:4b:93:14:52:b2:1a:df:c2:03:cd:e9:af:
08:77:26:0c:b2:06:9f:5e:d1:58:c2:70:31:66:0e:be:6f:15:
e5:1d:af:5b:ec:1a:b2:45:59:0f:a3:9d:7c:fc:ac:ac:bf:40:
73:52:ca:e2:69:95:c2:80:75:04:25:67:a6:b9:6f:7a:46:e0:
92:42:ae:8b:f1:3b:bd:a6:a4:1b:2d:fc:03:f1:01:f4:f5:9e:
df:7e:e7:03:3a:61:13:32:de:5d:7a:11:5e:e8:2b:7c:ca:c7:
9e:87:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:32:19 2026 by rpki-client