
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier: joQsu8fw7z/rd0SLyTbUtNJw3+AMfamYn5XtTKIglFg=
Subject key identifier: 99:27:64:4D:2A:5C:47:DE:CF:F1:3B:55:38:B8:A9:4D:4F:7D:EE:59
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number: 0879
Signing time: Thu 24 Sep 2026 22:39:45 +0000
Manifest this update: Thu 24 Sep 2026 22:39:45 +0000
Manifest next update: Thu 01 Oct 2026 22:39:45 +0000
Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 9Nnzfsrwpqn5/XwzkM5k/OcISvFMHBg8P7Noiw/Zna0=)
2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: ZZTRP8ZYh6abdb/gEV6kUhHlPU73mYT2fjwS4t3Y8Vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Validity
Not Before: Sep 24 22:39:45 2026 GMT
Not After : Oct 1 22:39:45 2026 GMT
Subject: CN=6ab5a6b1-bb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:f5:15:04:be:f1:e7:69:a7:ca:96:0c:b9:
19:18:76:0c:85:43:c4:80:ee:94:cd:82:ab:55:cb:
51:8b:72:f8:1f:d6:50:67:de:22:38:8d:75:50:ae:
c9:48:1f:44:0c:d0:36:4a:45:07:ff:0f:e7:8b:14:
36:ff:9c:aa:fb:23:6d:dc:b7:e9:e6:19:7b:9d:b2:
85:a6:c9:94:53:d7:0d:a3:7a:b7:06:03:0e:81:c0:
10:47:48:fb:81:47:2d:58:73:16:6b:1e:28:69:cd:
ba:34:96:ef:10:e3:6e:2d:c9:f3:d9:07:ed:30:16:
63:41:a9:4f:8b:d0:df:e7:2e:76:92:6f:c0:1e:64:
95:98:2b:d4:e6:c4:1e:b4:ff:d0:8a:67:f3:54:96:
52:f1:b4:35:77:fd:62:b8:e2:7c:f0:fe:62:90:e7:
fc:d5:f1:a9:96:59:90:63:20:c1:bc:f7:ac:2e:e5:
a1:11:d4:04:c2:fa:f7:c7:bb:a0:8a:7a:b5:57:b7:
14:ec:4f:21:eb:4c:43:dc:ed:f7:3d:88:ed:53:fe:
2d:7a:c0:a3:ac:78:3c:a5:d2:ed:3c:84:e1:2c:c8:
21:dc:20:0a:5a:45:9d:76:49:18:d9:67:26:6d:52:
8d:45:ab:51:fe:a6:29:df:6b:11:e0:f6:d0:8c:41:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:64:4D:2A:5C:47:DE:CF:F1:3B:55:38:B8:A9:4D:4F:7D:EE:59
X509v3 Authority Key Identifier:
keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:12:e0:35:46:84:b0:30:2e:d0:d2:99:b7:6b:8b:81:90:cc:
48:41:d0:21:51:02:08:20:d9:a2:cf:5e:5e:a0:94:6e:d6:e3:
1f:34:31:f7:c3:61:1c:55:db:cb:ee:85:73:99:9a:b1:0d:f4:
a2:d8:e3:e8:60:f6:31:b3:7a:ae:fe:ae:c7:2c:9d:db:a5:b3:
a8:44:1a:aa:33:cd:51:50:36:57:95:7b:59:2e:cf:71:93:f7:
af:da:03:4b:1b:ba:89:22:c6:b2:78:be:92:fa:a4:eb:c1:04:
ab:4f:00:ce:8d:0b:e5:db:19:e0:6e:4f:33:ca:dd:01:49:3d:
de:0a:da:2e:14:3f:dc:c4:08:54:68:14:ab:e8:b4:c0:0c:5a:
00:00:5b:66:b2:f6:6b:9f:c4:4d:0e:39:8e:90:ef:50:cb:bd:
48:5b:0e:29:e6:34:f6:cc:04:71:bb:70:b9:4d:78:2b:af:40:
42:cf:ba:0c:63:d6:fe:d9:04:fc:ad:4f:2c:8b:a7:b8:aa:2a:
87:2a:20:b7:b7:db:ea:9d:c2:22:1f:9d:fe:15:f3:e8:c8:bf:
4c:9c:84:d8:ac:ca:ab:fc:55:f2:d6:3e:5c:51:29:f2:0c:2a:
5c:d2:54:e0:48:fe:e9:2b:da:ff:ed:2d:01:30:40:28:a6:68:
05:7c:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:31:36 2026 by rpki-client