
$ rpki-client -vvf rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
File: LtaWwj0zRedLDXNOJLcQqniq5fo.mft (raw, json)
Hash identifier: rv3t/WMBF4A8qinZvsewSLlYLLrYI16gWYxF+ft62sM=
Subject key identifier: 86:A4:C0:CC:70:26:7C:0D:54:FF:D5:8F:02:62:55:1F:6C:C9:F9:78
Authority key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Certificate issuer: /CN=A913714B/serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
Manifest number: 4B
Signing time: Wed 25 Mar 2026 07:27:43 +0000
Manifest this update: Wed 25 Mar 2026 07:27:42 +0000
Manifest next update: Wed 01 Apr 2026 07:27:42 +0000
Files and hashes: 1: LtaWwj0zRedLDXNOJLcQqniq5fo.crl (hash: HIDAZqtvkvFCloDJecYkcc5EVr/4MJpLLemHmcwOF6g=)
2: 5D7ACB26B90811F0ADC46B62C4F9AE02.roa (hash: 4Afz0RP57yzwWRjbdV6j33r3wX6GOFsx3kHHTaSiTLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Validity
Not Before: Mar 25 07:27:42 2026 GMT
Not After : Apr 1 07:27:42 2026 GMT
Subject: CN=69c38e6f-3a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:bf:7b:dd:42:55:79:8b:67:f8:9d:5b:15:
e5:7f:27:09:7b:b0:c8:7c:eb:66:73:7d:1e:27:ce:
fa:f4:00:6a:c5:86:7b:00:7c:19:93:60:27:04:6c:
f6:90:65:f4:1f:0a:59:d2:bb:9d:cf:87:04:3a:65:
87:4f:25:76:9b:53:22:8d:9e:12:b1:a8:15:04:a0:
50:10:ac:8c:ce:ec:ff:c0:fb:a0:06:c6:07:02:1a:
60:c1:2a:da:21:7d:9f:bf:bb:49:fc:3a:e8:8a:dc:
70:a1:44:2b:cd:0c:62:c0:02:5a:93:19:0e:74:d6:
64:69:d5:7c:25:55:14:bd:eb:dd:bd:7e:bf:77:f9:
32:d2:da:1b:60:e0:64:67:48:e0:2e:26:62:2a:6a:
45:db:d0:66:41:cb:df:54:54:11:23:44:66:d7:97:
76:df:82:76:a6:2d:36:72:7a:35:7b:eb:c7:3a:81:
14:9a:ed:e6:f8:1f:14:ec:07:7f:d3:b6:d9:88:79:
7a:af:19:e5:c3:4c:f0:47:59:e9:da:1c:16:97:14:
c7:57:1b:7f:d5:10:00:d4:e1:9d:3f:38:80:33:43:
ab:6a:94:c3:d7:f8:8b:f0:cf:df:53:e6:ec:e3:f1:
a4:dc:64:e8:8f:ff:03:32:12:99:e5:30:ab:23:75:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A4:C0:CC:70:26:7C:0D:54:FF:D5:8F:02:62:55:1F:6C:C9:F9:78
X509v3 Authority Key Identifier:
keyid:2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:95:4d:03:75:08:bc:f9:e2:d8:64:5d:d3:76:86:51:ca:
df:12:8f:dd:39:5f:c5:2e:93:43:04:52:9e:c8:8d:e3:5a:9b:
f1:56:68:e7:ef:2f:e9:1d:d8:f7:7c:4e:d6:5d:44:c7:ad:f9:
41:e8:3a:52:27:21:73:75:8d:d6:2f:db:95:bb:a8:95:fb:8c:
06:f8:db:8a:86:fe:43:6d:2d:a5:96:b2:df:e0:db:26:ef:c4:
b6:22:e1:4d:3f:6b:c6:87:45:79:c8:8f:55:ff:91:b7:41:de:
f6:c6:ad:d6:88:a0:08:0e:be:74:bf:44:1d:8d:d5:6f:1d:1a:
ff:d5:be:85:62:3d:15:b0:04:9d:2b:fa:4c:e8:eb:ed:29:0d:
d4:76:28:73:48:bb:89:c7:bc:35:60:78:29:6f:97:89:f2:8a:
58:83:c6:5c:f1:e0:27:f6:6d:c9:ba:98:d0:c4:ff:d2:0b:6d:
92:26:ea:02:6a:79:a6:b8:35:ab:7c:ff:8e:20:84:02:4c:40:
f5:88:ba:7d:5b:0a:bc:52:75:b9:b0:7a:a4:66:75:b2:8e:ac:
95:26:6b:45:8f:56:43:e0:ea:4a:02:cf:5f:50:2c:e0:7f:17:
6c:46:46:54:d3:bc:dd:5c:88:26:c3:a0:92:54:ce:23:b8:24:
bb:0e:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:33 2026 by rpki-client