
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: cCIns6JrMFQFPnvQoHxkrG/c1Zjea53WKRJpDUT9oOY=
Subject key identifier: 86:53:B4:68:DD:AD:D7:D0:5B:4F:EB:BB:CB:4E:54:AB:7A:67:48:EA
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 07E9
Signing time: Tue 12 May 2026 23:05:07 +0000
Manifest this update: Tue 12 May 2026 23:05:06 +0000
Manifest next update: Tue 19 May 2026 23:05:06 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: ReLe2CUxx8R1gAysh5pD3z+5S2JoFmgv/OHrpijZg9c=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: May 12 23:05:06 2026 GMT
Not After : May 19 23:05:06 2026 GMT
Subject: CN=6a03b223-5adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:2e:45:33:e4:90:c9:ef:67:dc:06:f6:cd:
71:4f:cb:98:4c:6d:09:b5:09:a1:47:b6:a1:af:5d:
26:9b:b5:ab:6c:66:de:a2:e2:9a:57:6d:b4:82:d4:
8e:7e:34:da:99:4a:13:6e:7b:16:5e:2b:09:0d:11:
52:ca:2c:65:c7:c7:bd:12:c8:f3:23:19:9a:39:9b:
0a:3f:83:ff:28:f9:3d:69:64:c1:ca:1c:3c:1c:b9:
08:33:db:ea:5c:3b:7d:2b:80:0d:7e:37:7e:f5:b0:
c5:a2:89:ae:ec:f2:a2:b6:7a:a1:42:dc:cc:be:70:
17:18:e5:0f:26:a3:e1:3e:59:8b:e8:95:ab:34:26:
7c:4f:f2:48:42:2c:c2:ee:b9:8c:f4:3b:09:e0:fb:
b2:6f:f2:ed:44:4e:69:62:e3:11:ed:c0:7b:09:8f:
7b:d1:09:4c:fc:c7:58:57:eb:88:e6:11:9f:24:42:
1d:46:6d:90:0e:40:7f:1e:87:f7:3c:f9:3f:72:67:
e5:95:89:46:12:a7:39:31:3b:9c:14:b4:ca:9e:19:
d0:b0:fb:04:24:bb:24:b8:68:fc:71:e5:ff:c6:22:
8f:eb:d5:41:18:9c:2f:c3:cc:3d:63:30:bb:c6:12:
7d:25:c8:55:fe:28:16:2a:80:44:e0:4d:bf:5e:e5:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:53:B4:68:DD:AD:D7:D0:5B:4F:EB:BB:CB:4E:54:AB:7A:67:48:EA
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:ee:fd:d5:37:be:96:b3:aa:3a:82:a4:ef:ef:d2:d2:44:78:
b0:a3:60:60:d9:60:20:54:a2:07:51:b6:a8:e7:c7:29:a4:3f:
a3:d5:c6:94:f9:5e:b6:55:89:65:2f:7f:bf:b2:8d:27:d1:35:
39:ff:0a:12:e2:1a:84:a0:aa:fd:d4:b3:a9:74:47:87:dd:46:
3d:19:0d:58:fd:7a:d5:08:42:d8:49:64:6e:cc:0a:92:2f:13:
c0:1e:03:03:ab:48:6c:15:a5:0e:3e:ee:99:91:a6:0d:b9:d5:
f5:90:68:e8:b1:fd:50:ef:d0:b3:89:1b:72:60:2c:f4:90:b1:
27:aa:42:9b:0e:5e:16:71:27:84:2c:82:34:ed:2b:d4:9c:dc:
2b:d7:e1:c3:cd:2d:c4:66:00:46:47:4c:49:b3:f4:a1:af:99:
af:3c:72:12:5c:7c:7f:51:dc:bf:29:39:80:a1:06:10:82:f0:
0a:07:49:b0:df:fd:4f:b4:ce:72:e6:1a:38:f5:4f:dd:54:5c:
cc:e0:63:77:4b:84:4a:3a:15:f7:1f:a4:f9:d3:88:ac:b9:31:
18:88:10:0b:87:ee:f6:f4:3a:b2:01:e9:a1:15:d8:13:3f:8b:
ea:53:ce:90:35:ec:9d:22:be:b4:10:9b:59:94:8e:34:d4:ee:
8e:ed:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:40 2026 by rpki-client