
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json)
Hash identifier: KWOmHiaMPg9AcVELBxPByjSUKHy4Oak4FPtmXt6aWCU=
Subject key identifier: C7:56:E4:9C:4B:E9:E0:AA:B5:EB:A7:40:3B:68:00:49:D7:8B:59:12
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
Manifest number: 0216
Signing time: Mon 11 May 2026 02:53:37 +0000
Manifest this update: Mon 11 May 2026 02:53:37 +0000
Manifest next update: Mon 18 May 2026 02:53:37 +0000
Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: Oxsf2EiXjoEN7fJIasW6Uj8AmBEtFv6qt88OxlU4dRY=)
2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 2O1k5KDca2tfl/EQnQ5lVCtAgwjAnHM94uUoNTqPDZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Validity
Not Before: May 11 02:53:37 2026 GMT
Not After : May 18 02:53:37 2026 GMT
Subject: CN=6a0144b1-1f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:4c:c3:a9:ac:3a:b2:7c:50:cc:4c:8e:ef:
8c:e1:7b:f3:04:74:86:02:43:9e:2e:8b:09:09:0a:
9c:f9:e0:00:d1:c0:f3:a1:26:f3:17:3b:0f:68:99:
b2:04:44:af:61:5d:43:dd:9b:d0:34:4f:d9:a1:cc:
e9:51:b1:9b:c7:5e:e0:ca:f0:f6:b3:75:64:68:27:
8c:9d:6e:22:5f:8d:a1:31:4c:a1:2d:9e:f7:b5:f5:
8e:e2:91:6d:77:0b:44:f3:33:68:43:5c:c6:92:8d:
b6:7e:ae:09:24:24:31:77:f8:f8:0a:70:fa:4d:e2:
07:27:5c:18:62:f5:6c:65:80:24:0e:07:97:07:81:
6f:27:cd:9c:c8:59:b9:ba:b1:32:58:ec:ba:62:dd:
d2:83:59:7b:57:a6:7d:9a:2f:8d:25:cc:21:59:92:
7a:fc:2c:31:97:79:3f:f8:61:67:53:e8:86:5f:2d:
87:01:ce:0d:7e:2c:93:79:37:44:da:7c:13:c5:e4:
14:d4:f8:37:e4:36:db:31:71:9d:02:2b:27:82:5b:
2e:c0:99:78:40:56:7a:f0:d1:21:30:96:79:64:46:
95:5a:c4:20:f4:c9:45:97:79:29:eb:0f:ce:a5:68:
c5:60:8f:19:de:8d:a3:f9:7f:7c:28:68:7e:b7:eb:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:E4:9C:4B:E9:E0:AA:B5:EB:A7:40:3B:68:00:49:D7:8B:59:12
X509v3 Authority Key Identifier:
keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:1c:b8:6d:49:4b:d2:b0:1a:00:7b:dd:47:c8:33:68:d8:d2:
b7:aa:4e:23:5c:20:d9:3b:d1:75:77:f6:39:a4:b3:01:f4:f7:
7e:b2:af:8d:be:d1:81:97:a6:d8:d0:f6:03:30:fc:93:ae:fc:
a6:b7:20:b2:99:14:d9:ea:04:2b:42:d8:3d:53:62:29:75:db:
d3:a3:c9:60:55:ed:29:01:13:c9:23:2c:94:54:78:cd:05:67:
50:d5:2b:85:51:92:14:fd:ad:60:df:71:96:27:f2:a3:9c:00:
6a:e0:b9:61:be:61:26:50:3a:92:51:23:37:c8:ed:2e:80:3a:
32:24:19:23:41:99:ae:50:eb:ff:2c:61:98:c0:a1:aa:19:33:
80:19:59:dc:3c:da:61:7e:d3:48:82:98:f5:8a:6b:4d:96:5b:
b4:e5:29:b1:94:d0:71:ac:ef:ca:2b:e3:9b:90:1d:cf:6b:1f:
75:27:f3:c4:a1:e8:37:64:45:96:05:7f:fc:87:d4:c4:d9:18:
1e:9e:82:e5:1f:4e:c4:cd:a9:9e:35:4b:bc:e8:1c:85:7f:2a:
7b:e3:af:ac:b1:b4:f4:09:1f:e8:5c:84:30:ba:73:a7:76:ea:
1a:59:50:6a:a2:3a:5c:be:5a:7e:bd:a6:64:c6:03:c2:3c:19:
3c:f2:81:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:37:26 2026 by rpki-client