
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json)
Hash identifier: Fe1Fpk8V4rmPuOA/MqJX4+VR3t7sXEwJ/0KAh5xxR9Q=
Subject key identifier: CE:6C:2B:5C:84:9F:1C:7A:76:1B:EB:D3:E0:DC:2B:BC:B2:26:C5:15
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial: 0308
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
Manifest number: 0301
Signing time: Thu 23 Jul 2026 02:08:42 +0000
Manifest this update: Thu 23 Jul 2026 02:08:41 +0000
Manifest next update: Thu 30 Jul 2026 02:08:41 +0000
Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: R7YCtZ0lizGOGNGH9w6+mzn+p+9qYuiNW73TLVyTL9w=)
2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: 415aT/obMJjSH780K/K390shhJpsFr+sPe3d3m1bO1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 776 (0x308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Validity
Not Before: Jul 23 02:08:41 2026 GMT
Not After : Jul 30 02:08:41 2026 GMT
Subject: CN=6a6177aa-ec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:1d:c9:09:42:53:8e:34:ef:82:d5:fe:b3:
d2:b0:a3:51:67:cd:bb:4d:ea:3a:69:8c:34:0d:84:
38:f9:1b:c5:d8:02:24:eb:0a:6d:54:9e:5e:19:68:
fe:54:9e:7d:07:67:d8:bc:aa:82:c6:75:0c:93:d9:
02:f3:70:54:9f:cd:2c:4d:9c:83:1b:ae:bf:96:84:
29:07:73:6a:9c:da:0a:d0:5f:02:17:52:9c:c6:d6:
ed:f1:5f:79:bd:63:93:9a:f1:5c:21:e4:d6:81:01:
ed:5f:78:42:5e:94:3e:a1:3c:f5:98:06:18:d3:f6:
fb:ea:f4:07:ec:21:11:69:cc:a4:93:4c:b3:2a:0d:
8e:d0:c9:2c:be:81:7a:ce:5e:ff:cc:03:53:4a:dd:
e3:a1:fc:80:b8:4e:4d:29:d6:e7:04:df:08:e3:35:
bc:f1:b5:5f:26:64:92:f2:c3:78:21:0b:50:5a:66:
79:88:b3:6f:5b:44:10:69:5e:a2:af:b0:22:3c:d5:
ee:43:28:83:71:70:00:86:c3:84:be:6c:06:3d:a4:
b0:04:d7:f1:fb:03:22:b4:a5:de:bb:e1:b8:08:a8:
dd:be:f8:ca:48:3c:13:0c:1a:7f:4f:50:8e:20:45:
e1:9a:3d:02:1c:a2:13:75:15:b5:6f:ba:e0:0e:ca:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:2B:5C:84:9F:1C:7A:76:1B:EB:D3:E0:DC:2B:BC:B2:26:C5:15
X509v3 Authority Key Identifier:
keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bb:5f:2c:50:de:96:f5:cc:cf:5a:53:e8:23:16:c6:83:8b:
b0:f2:4f:ea:7b:53:60:67:72:c4:23:eb:6d:4a:54:6c:33:0d:
e8:c2:3c:58:6a:60:b0:85:9b:9e:86:14:29:0c:0d:87:1d:5f:
1f:57:8d:cd:fd:05:cf:78:eb:0a:f1:fe:a2:dd:e3:6c:ff:b9:
20:58:c8:b9:40:86:b4:0f:ea:ea:58:69:da:0a:f8:36:6c:94:
41:8d:f9:c6:76:a9:2a:aa:aa:c1:dc:83:ed:ae:44:08:a8:e4:
a7:14:16:0b:2f:00:3c:58:6d:4d:a2:86:a5:79:df:de:f6:f8:
a9:56:45:63:2e:95:9c:43:6a:76:39:47:72:20:a3:0b:fc:24:
c2:cf:9d:dd:78:ae:4c:39:2b:ac:d5:44:71:15:5b:b7:c8:51:
3c:82:ae:85:35:19:6a:62:b2:86:a8:92:ff:6a:47:4c:9b:a6:
7d:93:e5:e1:3a:01:16:3d:0f:7c:ad:9c:47:2d:9d:83:3b:f4:
63:9c:ba:63:fd:0e:b2:bc:77:d5:2b:49:19:d5:53:3e:04:d3:
10:8d:48:a3:4d:e1:53:dc:ed:08:b1:b0:99:b8:d8:3a:73:55:
63:2f:5f:86:48:1d:8a:7b:61:88:d3:54:b2:9d:8b:0e:ed:db:
9f:ef:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:14 2026 by rpki-client