
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json)
Hash identifier: r1GMRiPtCT8h5SNe4zCxbXqjj9VKOLWMAdiUwotFyh4=
Subject key identifier: 0B:55:32:BF:A9:24:FE:8B:95:00:57:58:18:FE:69:79:7A:01:88:E1
Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
Manifest number: 016A
Signing time: Fri 25 Sep 2026 05:33:24 +0000
Manifest this update: Fri 25 Sep 2026 05:33:24 +0000
Manifest next update: Fri 02 Oct 2026 05:33:24 +0000
Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: +gsyhaYWLI+M9Fay9JoDXyNqC6PDrfnKIQkfAIdsVmM=)
2: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (hash: rv9K2z3jLDHYayjuD/ofwi0jQtAT/5qT98rJ5cSCRIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Validity
Not Before: Sep 25 05:33:24 2026 GMT
Not After : Oct 2 05:33:24 2026 GMT
Subject: CN=6ab607a4-1268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:f0:43:37:a9:5b:94:ba:67:51:58:02:3f:
9f:c2:a4:68:26:af:0c:0c:c8:d8:3d:56:69:d5:00:
14:e8:25:11:d9:a4:73:9d:8a:84:e6:8f:7c:a6:3a:
10:b3:37:b6:57:d1:03:05:58:04:77:3f:ce:3d:cc:
d4:66:d5:17:2e:b0:0e:90:34:28:02:25:20:de:a9:
e0:01:5c:bb:29:7f:db:bf:55:03:24:39:1b:06:d2:
00:34:17:62:60:a6:8c:29:2d:34:3f:0b:15:56:5a:
cc:ab:09:c9:b7:26:d8:00:f9:ea:5d:13:97:e2:d5:
20:76:f5:3c:2a:a0:98:d3:11:6e:50:f2:a0:12:ae:
de:a3:1c:a1:73:52:bc:cc:a0:d9:e4:fe:47:73:d0:
2b:e6:cc:24:9b:a9:41:c7:01:c4:73:7c:15:97:b3:
0e:3f:d3:96:1d:13:eb:7c:12:65:94:96:fc:35:a7:
26:2e:a0:a4:8b:d7:98:f6:5d:ce:ef:e3:02:5d:a4:
69:d5:14:ca:96:61:19:95:7b:aa:e1:7a:fb:54:21:
63:4b:2e:7a:f2:02:78:cc:b0:ee:af:81:86:f0:46:
6e:37:f0:ec:c6:f0:0a:95:d4:88:e6:28:9f:e4:86:
48:9c:6d:da:98:80:4a:be:b3:37:4d:01:65:30:b9:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:55:32:BF:A9:24:FE:8B:95:00:57:58:18:FE:69:79:7A:01:88:E1
X509v3 Authority Key Identifier:
keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:59:61:e0:df:32:c2:76:60:5a:be:30:91:64:77:b1:26:21:
69:2b:8f:52:78:e9:f5:6d:45:b2:a8:c5:84:6d:e7:53:0a:65:
35:86:a4:44:44:25:9e:31:48:e0:59:71:b4:4f:22:5e:88:c2:
ba:f7:67:f8:40:ec:f9:48:03:d0:e6:f5:f0:95:c4:f7:24:6f:
ff:b2:47:a8:bd:b6:31:f0:e6:07:46:40:c7:14:99:d1:93:cd:
f4:17:60:de:01:13:60:68:50:74:15:6e:8c:9c:15:dd:61:8f:
ef:8d:ca:85:eb:de:4b:41:a8:e0:e4:f2:21:96:36:f5:3a:ca:
c4:ef:fb:14:41:3c:29:8f:8c:e0:1e:93:d8:c8:35:16:9d:85:
06:50:08:f5:11:6f:0e:94:a6:61:a4:04:14:c4:26:5d:3f:2b:
0e:8a:1d:38:b5:90:e8:7b:5b:33:47:eb:27:14:1b:9f:ff:5a:
70:c4:ad:d8:c4:7e:5f:ad:7a:42:49:ce:aa:8c:8b:02:65:81:
c6:4b:e6:b0:77:1b:c9:f0:a8:37:e7:2e:c0:71:cb:ca:3f:d9:
c2:6f:bf:17:66:e5:62:cc:6e:6f:f7:7f:49:24:74:fa:58:5b:
19:54:43:e8:35:57:28:e6:e5:fb:2b:74:d7:11:15:e7:59:b3:
58:d7:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:54:02 2026 by rpki-client