
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json)
Hash identifier: TSj0q78i5ktk9HAQlBy1zHy2PxDuroN75atN4vMWnw8=
Subject key identifier: F2:02:37:3B:43:CD:1E:67:79:05:1D:4F:1E:27:AF:56:0E:EB:7D:2D
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial: 0329
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
Manifest number: 0322
Signing time: Fri 25 Sep 2026 00:52:23 +0000
Manifest this update: Fri 25 Sep 2026 00:52:22 +0000
Manifest next update: Fri 02 Oct 2026 00:52:22 +0000
Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: So5bonAeopKdxV5DXmoViaz1e5sX/SWoz77O6deqQ7E=)
2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: 415aT/obMJjSH780K/K390shhJpsFr+sPe3d3m1bO1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809 (0x329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Validity
Not Before: Sep 25 00:52:22 2026 GMT
Not After : Oct 2 00:52:22 2026 GMT
Subject: CN=6ab5c5c7-66b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:4c:e5:22:b9:5c:42:db:6a:5d:fb:7f:7d:
3a:ec:76:0d:e2:a7:79:29:0a:51:dd:7c:69:38:3c:
8c:14:75:56:5a:22:c9:65:48:d8:e1:34:25:12:cb:
2c:4f:36:eb:0f:9f:0d:0b:1c:2a:b7:ce:96:7c:77:
fb:36:ff:9b:46:f0:25:02:40:aa:cc:4b:e2:d5:13:
10:94:ae:40:7c:8b:b0:0a:f1:0b:90:8d:4c:0b:49:
1b:73:7f:fd:5e:cc:88:45:cc:f5:e2:e4:4c:5b:13:
3e:fd:1e:eb:c3:5f:0e:02:48:c4:e7:f2:41:ed:a4:
a9:33:e0:b8:f1:81:e5:0d:53:22:ea:42:74:0a:85:
e3:83:42:c6:45:41:58:0c:ca:1b:5d:9d:55:0e:ba:
2f:ba:2b:57:00:40:7a:6e:65:f5:25:38:21:fa:7c:
d2:cb:ae:0d:23:49:e6:11:66:cb:0e:ac:24:37:8d:
18:68:e3:0d:aa:ab:81:8b:5d:a7:dd:09:ce:81:b1:
4f:0b:98:8e:6b:b3:78:f0:8f:20:9a:98:d6:00:1b:
ff:92:70:2f:01:64:ac:d3:09:d7:b2:43:80:d1:bd:
d7:8f:c3:54:49:ae:87:9e:55:e7:f2:bd:d5:35:6c:
c5:47:e2:19:b4:e8:32:6e:b8:25:98:b9:27:38:19:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:02:37:3B:43:CD:1E:67:79:05:1D:4F:1E:27:AF:56:0E:EB:7D:2D
X509v3 Authority Key Identifier:
keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:47:df:0c:3a:33:1c:3c:29:f0:23:c7:18:60:f1:8a:6a:50:
a9:7f:15:36:20:06:8a:b1:d6:c9:e2:cc:4e:e9:6b:a9:46:fd:
a2:4a:5a:ee:c0:4b:90:3e:d8:e6:04:27:ee:4c:2c:ed:35:7c:
2a:22:c5:7a:5e:a9:d5:c2:54:72:f6:4a:0d:d1:46:cc:36:ea:
f7:c0:37:f8:a6:3b:75:32:ef:c5:10:81:92:3e:a5:bf:55:e6:
b2:b4:8c:b0:f3:d9:83:a4:99:b2:72:ae:41:97:7f:62:8e:dc:
86:bd:d1:3c:6f:a1:75:cd:4d:bb:7d:88:35:12:f5:29:fb:fd:
7b:b5:81:b4:24:63:3b:e0:7a:23:12:e4:ee:7e:83:65:f9:f9:
19:8b:b4:40:2e:d1:4a:6e:c7:a5:ab:3f:8d:6c:b7:8d:22:f2:
60:4e:8b:0d:45:47:a0:44:d7:ba:a5:bc:fd:10:48:e9:2e:13:
df:b7:e4:66:52:ea:b8:91:13:1f:16:ad:da:82:2e:44:d1:43:
25:02:4b:38:4e:b2:29:0f:f5:c0:53:78:f6:6c:7d:72:e2:81:
36:fc:18:98:ad:1b:9a:f3:ee:41:01:6d:bb:55:bb:b1:d6:e7:
f3:bb:c6:d2:09:60:c3:3f:0c:0e:a0:e1:17:fc:49:59:be:83:
a2:ee:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:39:49 2026 by rpki-client