
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json)
Hash identifier: XgjBzCZri1TgxHr4UUVc+Zsty0g1nCT1W4LImHDRjvI=
Subject key identifier: CD:68:C2:8C:15:12:1F:3D:92:73:B3:E0:2D:6E:86:26:35:8A:82:BE
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
Manifest number: 02C4
Signing time: Wed 25 Mar 2026 01:03:01 +0000
Manifest this update: Wed 25 Mar 2026 01:03:00 +0000
Manifest next update: Wed 01 Apr 2026 01:03:00 +0000
Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: gxsXZt4UDXE3B8Zjlb4QbzNElCXnEi7OkqcKLX6r+ZQ=)
2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: 415aT/obMJjSH780K/K390shhJpsFr+sPe3d3m1bO1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Validity
Not Before: Mar 25 01:03:00 2026 GMT
Not After : Apr 1 01:03:00 2026 GMT
Subject: CN=69c33445-58c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:64:38:65:45:f7:02:42:70:d7:38:d4:0c:
dc:80:8f:86:82:c9:7a:70:98:70:c4:7b:a4:27:53:
e3:ad:3b:f4:94:cc:ae:64:93:4c:9c:3a:d3:86:6e:
81:07:f3:d9:a6:80:a4:09:0d:d1:f8:e1:1c:c2:a2:
91:e8:54:4f:a3:cd:7d:f1:dd:86:c7:fa:9e:4a:9c:
e4:e5:36:4a:ae:5a:2a:c3:2c:05:03:63:01:0e:0c:
1e:d0:6c:21:69:2d:0f:48:72:75:e6:26:fe:9e:86:
46:cb:e1:25:29:5b:b8:a2:c2:15:d2:37:80:6b:19:
32:d1:81:50:dc:30:5b:9f:af:b9:7e:52:b7:f2:83:
1b:4e:6a:f0:6d:87:9d:1c:d2:fe:ed:80:5c:97:c5:
9e:1a:cb:28:e9:50:d8:eb:d2:f2:e6:78:00:2b:b9:
ed:db:fb:d1:d2:05:35:25:bb:48:f6:3d:b0:d1:36:
e8:76:a6:a4:35:32:4c:39:48:25:fa:7b:0e:9f:e2:
ce:60:62:1f:3c:ca:17:af:a9:73:c7:3d:20:da:3e:
46:bd:b2:39:75:c5:ca:98:c2:87:84:ce:ef:6b:5c:
bc:94:9e:45:01:4d:59:62:79:e5:8a:9f:28:93:a0:
a7:3c:2f:62:da:e0:31:b0:63:ee:4b:61:59:d1:3d:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:68:C2:8C:15:12:1F:3D:92:73:B3:E0:2D:6E:86:26:35:8A:82:BE
X509v3 Authority Key Identifier:
keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9a:6c:60:11:6b:d6:17:36:14:f5:13:bf:09:ef:1d:f0:22:
ee:df:fa:4e:c7:14:d9:e8:66:e4:67:b8:4b:37:4f:cb:09:0a:
bc:b3:2b:cd:d5:77:83:17:d2:ac:72:ac:fd:2d:dd:f6:72:a2:
d3:b6:41:ef:77:bd:9f:b6:e5:03:eb:a8:f8:1d:e6:a6:5e:0c:
3e:ac:8d:f1:d6:08:f1:0f:c7:66:2a:f7:f5:18:3f:ac:ff:0c:
7e:9c:6e:6e:e3:d2:0b:b6:6b:68:a6:fa:70:1b:9c:a2:72:db:
ac:0a:15:a8:d2:c9:68:ac:5d:d6:9f:c0:5a:ee:b8:80:bb:8d:
fa:72:b6:94:76:4d:c1:52:29:71:53:76:16:f6:07:16:b5:78:
29:35:fe:96:55:af:1b:1a:46:cb:4a:e6:16:fb:19:d7:13:d6:
dd:ad:64:a7:03:2b:bb:5c:37:4a:ce:43:18:ba:1a:a8:f1:4b:
f4:2c:99:9d:75:57:ff:c6:f1:c7:36:62:de:a2:4c:34:70:71:
1f:63:79:7d:c0:cf:8e:00:51:19:25:f3:34:62:89:a1:70:bd:
c6:5f:dc:8b:15:1a:f5:a9:8e:da:d8:dd:e0:ad:23:b0:11:f3:
08:e9:66:3a:6c:c0:7c:67:a9:d4:16:47:6a:38:0a:ec:d5:7d:
fd:1a:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:42 2026 by rpki-client