
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
File: llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json)
Hash identifier: zfFH46dwOhBwDelZ/e4alU1jvUQF81TEGt1W8BL47RI=
Subject key identifier: 52:DF:5C:12:27:D5:79:B9:D0:2D:6C:87:09:A7:91:C8:CC:D5:59:D6
Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
Certificate issuer: /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
Manifest number: 0140
Signing time: Wed 25 Mar 2026 04:32:15 +0000
Manifest this update: Wed 25 Mar 2026 04:32:14 +0000
Manifest next update: Wed 01 Apr 2026 04:32:14 +0000
Files and hashes: 1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: Cv7cmzc4TFaJJVCf4GwKMVq045+VPU6YH9dY3o3LdP8=)
2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: 21CMC+4jrqt9R3YVeyqV8PFYMlUBz4//FXWyuGoWN2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Validity
Not Before: Mar 25 04:32:14 2026 GMT
Not After : Apr 1 04:32:14 2026 GMT
Subject: CN=69c3654f-f0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4a:89:44:96:21:34:b0:77:19:f6:1c:0e:98:
8e:52:d8:6e:db:5d:1b:f9:71:11:4b:76:e2:16:be:
2d:94:37:59:64:9b:89:5f:ea:82:5e:42:32:4d:dd:
05:15:4a:d5:5d:7a:da:2e:c4:f8:fa:28:ec:02:11:
08:e8:8f:64:d2:ea:07:e0:d3:32:78:d0:d1:92:17:
0d:0b:dc:78:e0:85:09:a0:5a:ac:31:4f:cb:56:c9:
e7:97:4b:aa:d1:d9:4e:b6:ab:fd:82:13:be:78:73:
13:74:4f:9b:61:67:c5:22:08:85:6a:03:f3:94:f1:
92:fb:06:40:1a:fe:7a:eb:c4:fa:91:c2:c7:7e:b9:
ac:46:1e:18:04:b7:6a:f7:e2:82:43:a5:27:e4:23:
2c:f6:f2:ba:a8:88:56:d6:bf:16:cd:1d:90:de:db:
2f:3c:5b:d4:3a:47:62:48:51:c3:7d:a3:de:a5:e0:
6f:4c:71:37:37:2b:7f:c8:a8:e0:b7:1a:ac:34:8c:
91:7e:30:39:c9:0e:86:00:4b:93:e6:ba:b9:84:8f:
bf:11:8a:70:b8:54:7c:20:1c:1a:74:55:99:70:a7:
31:b5:ab:ff:73:46:1d:2a:96:e1:3b:a1:f8:81:b3:
81:d8:ff:9b:9d:ab:42:54:1f:e1:29:23:78:53:3e:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DF:5C:12:27:D5:79:B9:D0:2D:6C:87:09:A7:91:C8:CC:D5:59:D6
X509v3 Authority Key Identifier:
keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:fc:8b:6a:91:0d:01:31:67:c7:9b:02:33:f1:92:9c:11:e2:
fd:5b:86:e6:0d:19:35:6a:16:75:5b:81:36:dd:07:10:0b:7d:
e6:37:14:68:9c:42:e7:d1:32:de:aa:12:31:25:f3:2f:9d:ce:
c0:91:3b:2a:16:86:62:ac:43:79:80:c7:89:10:d7:13:89:34:
0b:01:09:c2:61:b5:6c:fc:84:ab:29:a7:1b:98:b9:bb:2e:a1:
ce:8a:04:b3:49:71:9d:5f:5b:e2:8f:00:db:a6:9f:1f:8b:32:
ea:9a:6a:a5:bc:7d:d9:4e:e9:e5:7b:0e:95:52:d7:7c:85:25:
22:9c:54:81:42:87:13:2a:b8:54:84:d7:d1:d3:f9:a3:b9:de:
8a:de:ec:fa:a3:07:0a:ba:76:1e:f7:e3:9e:59:43:db:e0:7b:
41:70:b8:c7:2c:bb:f0:29:3b:28:fe:49:91:50:9d:15:4a:96:
5b:1d:8f:c7:99:ad:07:fc:e3:ce:18:68:c2:23:4b:b3:c8:ef:
8c:46:ca:c3:40:ce:dd:2c:32:cd:ae:3d:75:6d:5b:f8:c0:7f:
fe:39:d5:a8:1f:9a:58:40:25:29:14:e2:95:9c:b5:c3:3b:2b:
e7:4a:b1:79:0e:74:08:c4:9d:00:1c:37:f6:99:9d:9d:fc:fd:
19:a2:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:25:53 2026 by rpki-client