
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
File: LVublUzRc7c_8Ifephh55IBR0js.mft (raw, json)
Hash identifier: 7T7k6+sfapwDUtaFl2K3dbulZ7WNBV1moGDLd+Vm1YI=
Subject key identifier: 57:D0:C3:CB:19:C4:C0:79:73:8A:9C:A7:21:3B:9D:B0:C7:BF:E3:CC
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Certificate issuer: /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
Manifest number: 0125
Signing time: Thu 23 Jul 2026 07:46:23 +0000
Manifest this update: Thu 23 Jul 2026 07:46:22 +0000
Manifest next update: Thu 30 Jul 2026 07:46:22 +0000
Files and hashes: 1: LVublUzRc7c_8Ifephh55IBR0js.crl (hash: 3FfNHi7oIuMnLFCIm/audbPQdxL2SbC666+eop3hbH4=)
2: D44647F42AA511F0B80C4C59C4F9AE02.roa (hash: BPkxT9PJbOIgNrspZOoDgDO33hVHTRKGqGy183wMITk=)
3: 2719F6E88BA311F0A0D19E2CC4F9AE02.roa (hash: JRxe6WQ5i8FSwSqbtx1T3zxfQy2HORxOSSN4JwBWN5k=)
4: 30376074EF8811EFABCDFD34C4F9AE02.roa (hash: dbuZmNGm++g8muXahSZhdDCEu8MGAKIyX1z0wQbDzqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Validity
Not Before: Jul 23 07:46:22 2026 GMT
Not After : Jul 30 07:46:22 2026 GMT
Subject: CN=6a61c6cf-dd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:01:fb:69:81:d3:0f:cf:c1:92:fd:d4:ea:
83:1e:68:e1:07:0c:cc:76:c8:75:ce:71:20:e7:85:
1c:07:ee:d2:e0:d6:a3:e9:11:d4:f7:8d:23:a0:d1:
4f:89:73:66:42:85:74:5f:07:94:08:1b:d1:e6:69:
19:11:d5:36:3e:20:3b:7a:09:aa:d0:b3:ce:4b:e7:
f3:45:fa:fc:c0:e7:62:49:ac:12:37:8b:5f:d5:ed:
50:b3:b9:9c:69:8d:38:f6:6e:09:72:4e:48:18:82:
48:cf:a5:a8:9a:d4:84:85:4f:48:fd:84:74:d0:83:
98:d4:13:b5:ea:bf:fc:5b:85:aa:99:65:94:67:53:
97:93:00:36:45:70:5c:f2:f7:0c:32:3c:b4:10:4a:
62:de:2f:12:9f:86:52:55:0d:09:8d:fd:44:b1:7d:
be:72:1c:bb:ce:5d:3d:94:69:54:69:8b:46:c3:d4:
f7:f9:99:f2:94:a2:7e:e3:cc:50:58:20:e2:cc:6d:
d0:3c:50:8c:36:63:8d:61:ad:c1:34:a6:7b:c9:55:
ad:ef:5f:43:05:b3:56:c2:70:12:c7:4b:30:bb:64:
d9:f9:df:d9:6a:cc:68:d9:16:51:c6:5c:bc:1d:af:
f3:39:02:e3:9e:a3:03:ee:cc:cc:df:ae:a3:27:6a:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:C3:CB:19:C4:C0:79:73:8A:9C:A7:21:3B:9D:B0:C7:BF:E3:CC
X509v3 Authority Key Identifier:
keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ef:02:57:e7:1a:ab:17:6e:8b:b1:01:f6:49:01:99:85:00:
c6:73:5e:20:ed:7c:86:e1:f7:e3:f6:8e:dc:fa:88:32:d7:b4:
b5:53:8b:c1:97:4b:7c:0d:19:68:09:b2:ac:e5:a9:dc:f9:c4:
f5:51:bc:e2:ec:00:ff:c9:8e:30:f1:37:98:b1:42:2b:d4:06:
c2:13:af:42:67:61:b2:92:1c:50:5c:77:70:5c:13:82:c0:63:
d6:b9:c5:cb:9e:d4:2a:f0:36:b6:32:89:29:5c:10:1b:b4:5d:
1f:d5:8b:b1:e5:d6:6e:08:a7:d0:99:17:69:29:21:7e:73:e8:
6e:34:03:97:dc:7d:30:4d:51:6c:df:45:98:4c:86:20:a7:8d:
33:a9:9f:44:9a:ed:3a:b7:e7:90:34:3f:75:a9:bc:5c:da:7d:
28:2f:bc:99:18:d9:61:8e:c2:fe:05:f2:d6:cc:a5:76:ef:ad:
29:ec:7a:f2:13:e6:33:40:f9:cb:ba:2f:18:a4:e9:6a:52:7a:
9c:08:53:99:1e:b5:3d:52:c8:5b:87:32:5a:94:c2:f9:20:b6:
1c:86:8a:fa:3b:a2:9c:da:0e:bd:c0:07:43:b5:7b:0f:9f:b0:
d5:b8:00:4c:8e:56:96:66:42:aa:a5:bb:a4:6b:76:58:01:c6:
df:f5:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:05 2026 by rpki-client