
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json)
Hash identifier: uPGWIjmWiWgncLW/GaWzecQ90aw7m6SQKdaQpbbF68M=
Subject key identifier: 14:56:A7:6C:30:46:8B:FD:71:1C:6A:13:D9:E4:64:7B:30:CB:BA:39
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 08EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
Manifest number: 089B
Signing time: Tue 24 Mar 2026 20:38:35 +0000
Manifest this update: Tue 24 Mar 2026 20:38:34 +0000
Manifest next update: Tue 31 Mar 2026 20:38:34 +0000
Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: wqZexYvaWpRRIPumIS/6Bx3JQrlT9kRlTJVNOSg939g=)
2: F539311C7DA011F08A71610EC4F9AE02.roa (hash: zuOnKl7Ra5fTAdkhJCdRbWwvMsV4axmICBuK3Fon6uM=)
3: D3148936F04D11F0ADCEC652566F56BC.roa (hash: JpBcmYX7vhkzKbx6B5+SUfTpThWFFWkRmqfYfwES20Y=)
4: ABC4A34EAFB511F0815FDC37C4F9AE02.roa (hash: sTzRTjegS6pXcKJix4GmDLpe4+EUgN+B0F9yGltkFT4=)
5: 37B1E57EFD6D11F09CB822DF526F56BC.roa (hash: WIWaaL6J0bqMMf0KvezWt+PHFUVrDbYuMF14salkaWE=)
6: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: H/A7iGan8l2ZEGP/7yLh7s7H/bnN8gR/289pNjnbFDM=)
7: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: vdQ2xrptBn7xNAJo3kWc/DGcrDKO04tseFsh6m019NM=)
8: 2820099CFD6D11F0B9F4BFDE526F56BC.roa (hash: 82As9ZSFLFNPFgULYktow3wN3qL7htWgj1lzIw//GVI=)
9: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: mxO7b7RvGtlPB9HynwXd3uHeWp2ebdT0RMpPUyZ35Zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282 (0x8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Mar 24 20:38:34 2026 GMT
Not After : Mar 31 20:38:34 2026 GMT
Subject: CN=69c2f64b-eb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:aa:04:05:0f:a1:17:2c:af:6b:8c:5d:13:
f0:2b:ea:fe:55:32:d6:b2:6a:11:0a:33:2c:b8:2d:
43:44:a0:b5:0d:7d:c5:cf:98:44:a6:97:ec:a7:57:
2d:3e:68:da:78:63:29:d3:7b:81:cf:44:92:68:2e:
3c:bd:d0:06:58:5f:31:6e:19:88:40:5e:cd:94:0a:
c9:8c:1e:bf:7b:aa:9c:94:ba:95:29:9e:b5:38:a6:
0a:22:63:de:be:95:96:a0:98:ad:2d:1e:de:64:6e:
98:4d:e8:c7:0b:13:3a:d3:14:64:27:1b:cc:7f:f1:
72:e1:28:41:63:ae:ae:03:61:dd:76:fa:b2:f4:e6:
02:41:5f:af:67:12:39:0f:9d:eb:e1:ae:15:d6:02:
f3:55:1a:32:62:8b:65:77:4f:d8:a9:ff:e6:ff:1b:
22:63:79:b6:91:60:7e:be:c0:24:b2:3b:ae:3e:04:
5c:e0:b2:1f:5e:dc:3e:d4:64:96:6f:46:ce:8e:24:
e4:67:fd:dc:f8:29:c4:0e:a3:5f:8d:ea:7b:bb:74:
96:0a:cc:38:ad:8e:e5:24:12:ed:d0:58:1f:1a:43:
4a:6a:4c:f6:d9:cb:7b:03:3c:69:1a:7c:0f:8c:04:
c8:09:fb:37:0a:d4:ab:28:df:95:23:bb:9d:1c:75:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:A7:6C:30:46:8B:FD:71:1C:6A:13:D9:E4:64:7B:30:CB:BA:39
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2f:e6:0a:18:29:52:cc:dd:47:50:01:b8:8c:b4:db:9a:f0:
dc:cc:84:10:fa:27:e5:4f:6d:83:d2:5c:ac:f5:e3:ef:0b:c3:
90:c5:9a:8d:ac:08:82:6a:11:ba:c2:51:b1:95:b7:61:18:fd:
f0:b8:49:87:6e:b8:b6:84:4b:82:d9:d0:f0:a5:39:ee:e0:45:
49:13:d2:c2:3d:3f:d0:54:9c:4f:1a:cd:f6:50:80:16:b3:1b:
b2:40:98:6d:84:cf:8b:43:59:3c:4a:b0:e6:03:47:be:4e:9f:
42:79:7d:dd:20:58:b4:db:b4:6d:1d:d0:4e:d7:32:e0:d6:bb:
db:4a:89:64:2c:66:01:56:ec:2e:60:25:09:29:81:59:dd:90:
f8:07:f5:b5:a2:2e:f6:22:ca:f5:d8:14:9f:cc:37:96:0d:59:
f0:5e:4f:fa:57:d6:3a:d4:54:ce:53:b0:39:7d:54:24:fb:a6:
29:72:71:df:8c:78:3a:63:3d:f7:b8:cf:80:f9:81:e0:5c:28:
3d:d7:39:86:f7:cc:a9:55:f9:d9:88:cc:4b:5b:6a:08:22:33:
25:31:ee:c2:06:2c:ba:6b:6e:90:14:4d:7f:67:cb:66:2e:98:
a1:e0:2b:65:ce:a3:09:fa:5b:2f:60:88:01:e9:13:3f:5f:7c:
0d:16:8a:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1
MzIzM0U1OTUwHhcNMjYwMzI0MjAzODM0WhcNMjYwMzMxMjAzODM0WjAYMRYwFAYD
VQQDEw02OWMyZjY0Yi1lYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaqqBAUPoRcsr2uMXRPwK+r+VTLWsmoRCjMsuC1DRKC1DX3Fz5hEppfsp1ct
PmjaeGMp03uBz0SSaC48vdAGWF8xbhmIQF7NlArJjB6/e6qclLqVKZ61OKYKImPe
vpWWoJitLR7eZG6YTejHCxM60xRkJxvMf/Fy4ShBY66uA2Hddvqy9OYCQV+vZxI5
D53r4a4V1gLzVRoyYotld0/Yqf/m/xsiY3m2kWB+vsAksjuuPgRc4LIfXtw+1GSW
b0bOjiTkZ/3c+CnEDqNfjep7u3SWCsw4rY7lJBLt0FgfGkNKakz22ct7AzxpGnwP
jATICfs3CtSrKN+VI7udHHWlBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRWp2ww
Rov9cRxqE9nkZHswy7o5MB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2
QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX
b0RHSklWa0tGOTFUSXo1WlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASy/mChgpUszdR1ABuIy025rw3MyEEPon5U9tg9JcrPXj7wvDkMWajawIgmoR
usJRsZW3YRj98LhJh264toRLgtnQ8KU57uBFSRPSwj0/0FScTxrN9lCAFrMbskCY
bYTPi0NZPEqw5gNHvk6fQnl93SBYtNu0bR3QTtcy4Na720qJZCxmAVbsLmAlCSmB
Wd2Q+Af1taIu9iLK9dgUn8w3lg1Z8F5P+lfWOtRUzlOwOX1UJPumKXJx34x4OmM9
97jPgPmB4FwoPdc5hvfMqVX52YjMS1tqCCIzJTHuwgYsumtukBRNf2fLZi6YoeAr
Zc6jCfpbL2CIAekTP198DRaKUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:43 2026 by rpki-client