
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json)
Hash identifier: xNTmblBnB34P+GbSp559n3WLzkOW60N54Wz7/SmKiN8=
Subject key identifier: 8F:CC:F8:D7:B7:D1:7F:99:3C:84:60:00:77:C4:D5:F8:28:24:49:49
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
Manifest number: AE
Signing time: Fri 27 Mar 2026 06:41:09 +0000
Manifest this update: Fri 27 Mar 2026 06:41:08 +0000
Manifest next update: Fri 03 Apr 2026 06:41:08 +0000
Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: ZibW653GG1/xQ1OjJp3xMCScOAnJUwjrCrIiKsX7bbY=)
2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: tRzWam95vSpEscniZPqXRHQpti8KQpPkufP+tHJBdpA=)
3: 72AD814686F911F0A97FA80EC4F9AE02.roa (hash: t6ZSVMbsxuBBJVxsfnJR2/4SpjFBD9tweOs5BjzUU9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Validity
Not Before: Mar 27 06:41:08 2026 GMT
Not After : Apr 3 06:41:08 2026 GMT
Subject: CN=69c62685-09a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:97:92:24:67:d6:2b:38:9b:8c:db:64:c4:
f3:99:fc:6f:2f:9c:55:64:a8:a8:6d:a2:1a:8e:45:
f9:14:ca:fa:44:f6:7a:44:61:84:91:fa:51:e4:ee:
f6:45:09:65:8c:0e:52:e6:00:49:63:a3:32:83:10:
73:65:fa:43:38:f9:92:d2:f2:4c:5a:86:c3:e2:af:
6e:4c:b7:15:aa:3c:a0:55:02:50:8d:21:ac:e5:49:
fd:e0:7e:7c:3d:c4:40:84:cd:13:69:94:bc:74:84:
1e:cc:50:43:14:09:09:38:e2:2d:d2:11:9c:68:f7:
6f:85:df:30:d0:be:55:4b:42:52:f1:73:39:2a:61:
8f:fa:2e:08:de:ee:2c:29:2c:35:35:51:0a:64:6d:
5f:37:6a:a9:9d:a6:df:94:d2:01:22:df:9d:6d:0c:
08:e6:59:d3:5e:10:10:1b:81:ad:4b:30:02:5a:9e:
c3:2c:ac:04:4c:21:a4:5f:b5:93:69:e9:f5:42:ca:
f1:58:87:1b:b6:db:53:65:00:07:e9:39:10:95:3e:
8d:e3:88:1a:3d:42:27:b6:f8:d4:92:a3:19:d7:bd:
ca:62:9e:9a:55:9a:c6:8e:f7:69:96:04:aa:c2:10:
6b:3b:56:41:f8:1c:81:ff:d3:18:a2:cc:f8:28:b0:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CC:F8:D7:B7:D1:7F:99:3C:84:60:00:77:C4:D5:F8:28:24:49:49
X509v3 Authority Key Identifier:
keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:1a:57:cf:44:7f:c1:61:bb:fd:a7:0c:eb:7c:dc:a3:96:38:
51:7d:53:82:a2:b6:bc:c2:fa:51:72:32:60:1f:57:f5:2e:3f:
55:b8:6b:5c:bc:d2:db:b5:4b:3e:17:5c:97:6d:e7:e3:3e:8c:
77:27:f4:66:7f:b5:36:b6:10:54:bf:f0:f5:6d:68:c1:d8:2f:
31:be:dc:0e:d9:dd:87:7a:f1:bb:09:0a:b6:ff:56:c2:ae:e4:
54:a0:47:59:aa:3a:57:22:b0:dd:b0:e5:9f:8d:49:33:cc:22:
7c:1a:ec:72:b5:bc:bb:42:91:7f:8f:11:59:ea:c1:55:cd:74:
b4:46:17:c7:23:c9:c6:51:30:39:10:22:88:28:47:68:cf:4a:
6c:c0:38:85:f8:47:a0:27:42:99:c2:e5:7a:a5:ca:f7:65:fe:
83:33:b1:8e:74:d4:d9:09:a3:75:51:56:bc:af:4b:57:76:16:
20:4c:90:be:98:91:87:70:06:ab:c9:52:2a:51:2c:02:53:11:
7c:80:1d:ca:94:fb:70:a0:9b:10:e9:73:c2:8e:ce:97:38:b0:
61:19:84:49:77:47:39:d7:a8:d2:82:d2:23:4a:68:70:9a:5d:
13:e5:ba:0e:db:e5:65:b3:e8:e6:13:c6:91:d7:3b:f2:ab:ef:
09:9b:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:00 2026 by rpki-client