
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: 8caz92qz/INGmWVE1tNXXRuL401sMVIQ3100tr4fAzE=
Subject key identifier: 8C:3F:9A:83:E5:BD:FB:0F:15:E8:96:4C:2B:93:1F:D2:E2:EE:BA:22
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 07B7
Signing time: Tue 24 Mar 2026 22:45:23 +0000
Manifest this update: Tue 24 Mar 2026 22:45:22 +0000
Manifest next update: Tue 31 Mar 2026 22:45:22 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 7WqI3IVXdnzmTE+Ky8EnmUN8oRHd1obt3M/3o7PWjmo=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Mar 24 22:45:22 2026 GMT
Not After : Mar 31 22:45:22 2026 GMT
Subject: CN=69c31403-357c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:79:5c:73:1a:49:9f:04:5b:0d:86:36:88:
81:c7:57:46:9e:dd:cb:f4:08:da:fe:1e:2b:57:5f:
fa:35:18:fb:d2:b9:1d:a3:bb:bc:8d:9f:90:c5:1e:
48:d6:a3:f3:d4:30:f9:90:b3:f2:aa:c4:e8:b8:42:
42:7d:a3:f1:30:c1:0c:02:60:c2:24:7f:9d:8f:a1:
cb:ad:91:3c:fa:88:89:0b:51:99:20:05:84:42:ce:
69:8a:dc:80:12:d6:b5:67:7f:20:d5:00:a7:5c:51:
33:dd:32:af:e2:36:5b:8f:20:2d:ee:d6:31:81:85:
60:ce:92:fd:63:9a:7e:1f:1a:d7:d7:b1:34:64:fe:
3f:19:b9:b8:43:a5:1c:af:ca:1a:d6:44:8b:22:1e:
9e:77:db:56:bb:02:81:90:53:4d:c6:9f:21:2a:4a:
2a:3b:d2:95:bb:0a:69:e8:1e:b3:96:2f:28:31:6c:
fc:95:49:e4:86:6e:31:f9:96:2d:ce:42:df:46:c1:
39:4f:72:33:80:3d:af:6f:33:7c:0c:70:07:aa:d7:
f2:37:ce:b4:ff:dd:e9:dc:c8:2f:f7:83:c3:46:b7:
0e:d9:4a:a4:17:38:6e:5c:1d:84:a4:ad:1d:57:bb:
ef:44:5d:f6:a9:08:4b:e7:24:f8:91:31:e1:3b:7c:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:9A:83:E5:BD:FB:0F:15:E8:96:4C:2B:93:1F:D2:E2:EE:BA:22
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:a4:07:b2:59:a7:90:f8:11:40:01:8e:49:58:a3:6c:0a:8f:
c4:08:52:10:10:35:3f:f7:a7:f4:b8:69:90:e4:01:6c:e0:f1:
a1:ad:f0:df:c9:f7:00:ae:9d:63:ff:39:d7:9f:31:08:a7:48:
10:40:8e:b9:83:7d:7b:71:bc:cf:74:56:8b:c4:e5:12:bc:fe:
e4:f1:93:47:8c:87:23:41:83:1e:95:53:a3:ae:65:6f:d8:c5:
95:1a:4c:8b:c8:ff:40:39:6f:83:96:ad:db:62:da:9f:b5:3b:
d5:57:16:9d:6d:8a:f6:3a:e6:7e:8d:57:ae:a2:70:42:f5:a5:
de:02:24:c3:e3:d4:6c:2e:2a:2b:30:d0:53:cb:e9:59:28:0f:
97:21:a8:c8:77:9b:2f:63:ae:3f:e9:ac:07:0f:de:93:c4:52:
9a:95:87:ab:db:07:1b:7f:c7:65:ef:a6:bb:9b:85:78:20:87:
88:67:1f:3a:a6:ce:cd:f1:59:85:6b:d1:6d:99:06:50:c7:88:
de:2c:24:3e:2e:95:b0:79:90:58:8e:de:d0:b3:02:ec:70:2a:
05:7b:d1:bd:5f:68:40:48:b5:26:df:be:58:5e:94:29:4f:d9:
a4:ae:55:55:91:fe:4f:1e:b1:1e:21:f9:50:5a:d5:ab:b1:e2:
25:0e:41:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF
NjY5QUU3RTAwHhcNMjYwMzI0MjI0NTIyWhcNMjYwMzMxMjI0NTIyWjAYMRYwFAYD
VQQDEw02OWMzMTQwMy0zNTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtiF5XHMaSZ8EWw2GNoiBx1dGnt3L9Aja/h4rV1/6NRj70rkdo7u8jZ+QxR5I
1qPz1DD5kLPyqsTouEJCfaPxMMEMAmDCJH+dj6HLrZE8+oiJC1GZIAWEQs5pityA
Eta1Z38g1QCnXFEz3TKv4jZbjyAt7tYxgYVgzpL9Y5p+HxrX17E0ZP4/Gbm4Q6Uc
r8oa1kSLIh6ed9tWuwKBkFNNxp8hKkoqO9KVuwpp6B6zli8oMWz8lUnkhm4x+ZYt
zkLfRsE5T3IzgD2vbzN8DHAHqtfyN860/93p3Mgv94PDRrcO2UqkFzhuXB2EpK0d
V7vvRF32qQhL5yT4kTHhO3xKTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIw/moPl
vfsPFeiWTCuTH9Li7roiMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD
MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1
LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn
SUpiQXkyQm5hcUhtYWE1LUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh6QHslmnkPgRQAGOSVijbAqPxAhSEBA1P/en9LhpkOQBbODxoa3w38n3AK6d
Y/85158xCKdIEECOuYN9e3G8z3RWi8TlErz+5PGTR4yHI0GDHpVTo65lb9jFlRpM
i8j/QDlvg5at22Lan7U71VcWnW2K9jrmfo1XrqJwQvWl3gIkw+PUbC4qKzDQU8vp
WSgPlyGoyHebL2OuP+msBw/ek8RSmpWHq9sHG3/HZe+mu5uFeCCHiGcfOqbOzfFZ
hWvRbZkGUMeI3iwkPi6VsHmQWI7e0LMC7HAqBXvRvV9oQEi1Jt++WF6UKU/ZpK5V
VZH+Tx6xHiH5UFrVq7HiJQ5BVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:34 2026 by rpki-client