
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json)
Hash identifier: Wd6MC1BWOe5hcHSPbvEIXTYy76Y8Uy+bKtKmB+/xeG4=
Subject key identifier: 85:F1:D3:67:0C:A1:2C:19:90:21:48:F9:8B:65:E9:0B:A4:F8:DE:05
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial: 0B33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
Manifest number: 0B13
Signing time: Tue 24 Mar 2026 19:07:03 +0000
Manifest this update: Tue 24 Mar 2026 19:07:03 +0000
Manifest next update: Tue 31 Mar 2026 19:07:03 +0000
Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: fc8ihbRJKc7T62yw7rqxC24puL+msmijE4YsrV9+zK4=)
2: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: t8HfITWMiY77C/57T/c++ATVS/SPRcZB8peHOJW/N/M=)
3: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: gULvTolTuEQQ8V1CNmUYM1da4itNfnCs1HnngbZhPLc=)
4: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: AbgBtupL6oOugUr9CWAY/Qjm4Xwk2lURBbagBtXRmQE=)
5: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: WHnFAG70JawqBzlnEo6WtvfDMead1qbEaY3qu5N7lXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Validity
Not Before: Mar 24 19:07:03 2026 GMT
Not After : Mar 31 19:07:03 2026 GMT
Subject: CN=69c2e0d7-ffda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:85:e3:0f:d4:37:1d:66:53:bf:fd:4c:c5:
a8:58:c9:ae:e7:c9:d4:22:5a:df:44:64:84:fd:7b:
91:11:86:50:9c:11:a9:fa:ea:a1:05:9b:c3:6b:bc:
7d:69:c5:8c:ac:a7:05:c9:ea:94:3a:48:ff:ff:3f:
4f:4a:21:0c:cd:41:44:0e:f1:f3:64:e9:ca:49:d8:
68:a0:47:80:e1:28:5d:aa:77:af:48:07:8e:24:a2:
34:c6:e5:59:60:8c:ba:13:91:d1:1c:73:f7:8a:a5:
16:91:95:88:ea:80:9f:a7:a9:3f:49:89:c2:11:cb:
eb:1a:4f:37:5f:ea:a3:e1:a4:b9:92:0d:52:76:fb:
dd:d5:03:c1:43:22:f6:98:64:94:aa:ef:ee:f1:ac:
f2:15:78:e6:30:d1:3f:6f:52:1f:2f:3c:e8:9a:38:
dc:b2:d1:48:f3:d3:58:d5:c7:22:dd:9d:a1:b8:65:
22:af:08:3a:6b:37:bf:7d:c0:c5:f8:6d:d7:6c:9c:
96:ce:6a:0b:17:63:16:34:73:ee:fb:ff:4f:18:c3:
b2:20:d8:f6:15:ba:39:e5:5e:67:23:96:02:08:2d:
39:50:1e:ae:f3:f5:01:e6:b6:ff:ed:66:4d:38:80:
5b:a5:ea:fb:80:4e:55:f0:e8:48:69:59:25:4a:c7:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F1:D3:67:0C:A1:2C:19:90:21:48:F9:8B:65:E9:0B:A4:F8:DE:05
X509v3 Authority Key Identifier:
keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:34:55:2b:8d:19:2f:5d:b0:a3:3f:8f:85:cd:15:8f:6b:a1:
56:6e:8c:48:b9:37:99:74:51:11:38:0a:9b:cd:8e:0d:31:cb:
cb:73:4d:f2:68:db:8a:7b:7c:ff:a2:da:e2:1d:c4:db:cd:bb:
04:1f:ed:d5:93:93:07:70:c7:fc:84:75:e4:34:c1:f5:0a:01:
69:84:ba:f7:e9:a3:06:29:44:d6:57:6f:e7:23:80:ae:21:4f:
54:d4:9a:76:a8:38:19:96:02:d9:67:89:cb:af:07:ae:b1:52:
14:0b:be:3f:39:a7:98:7f:cb:ad:32:db:5b:05:f3:e3:7d:9a:
ad:8d:bc:ea:99:21:5a:7e:ed:3a:e6:10:19:b5:03:b3:ed:14:
86:d8:59:13:a9:84:31:65:e3:af:5a:62:b1:86:f3:89:9f:8f:
db:7e:ed:f3:e7:3c:09:ce:3b:80:ea:00:08:ab:b9:b4:ae:d2:
4b:72:11:2b:38:ce:2d:64:09:02:08:58:0c:2a:72:50:1f:6f:
04:f9:6b:28:6a:7c:34:68:39:5f:84:d3:54:98:eb:cb:f4:c0:
05:bb:16:4d:2b:d3:f3:3b:bd:64:7a:3d:a7:3a:30:f6:80:7a:
3f:1c:ba:42:d7:5f:b9:a2:3d:da:ca:bc:63:85:cc:7c:c4:00:
27:b9:53:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF
REM2MEQ1M0IwHhcNMjYwMzI0MTkwNzAzWhcNMjYwMzMxMTkwNzAzWjAYMRYwFAYD
VQQDEw02OWMyZTBkNy1mZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwLKF4w/UNx1mU7/9TMWoWMmu58nUIlrfRGSE/XuREYZQnBGp+uqhBZvDa7x9
acWMrKcFyeqUOkj//z9PSiEMzUFEDvHzZOnKSdhooEeA4ShdqnevSAeOJKI0xuVZ
YIy6E5HRHHP3iqUWkZWI6oCfp6k/SYnCEcvrGk83X+qj4aS5kg1Sdvvd1QPBQyL2
mGSUqu/u8azyFXjmMNE/b1IfLzzomjjcstFI89NY1cci3Z2huGUirwg6aze/fcDF
+G3XbJyWzmoLF2MWNHPu+/9PGMOyINj2Fbo55V5nI5YCCC05UB6u8/UB5rb/7WZN
OIBbper7gE5V8OhIaVklSsdhnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXx02cM
oSwZkCFI+Ytl6Quk+N4FMB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF
RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTQ1Ni8yMzc4RTA4MDVFRTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1At
cy1ZM3JVOS1jbkx0eGcxVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYjRVK40ZL12woz+Phc0Vj2uhVm6MSLk3mXRRETgKm82ODTHLy3NN8mjbint8
/6La4h3E2827BB/t1ZOTB3DH/IR15DTB9QoBaYS69+mjBilE1ldv5yOAriFPVNSa
dqg4GZYC2WeJy68HrrFSFAu+PzmnmH/LrTLbWwXz432arY286pkhWn7tOuYQGbUD
s+0UhthZE6mEMWXjr1pisYbziZ+P237t8+c8Cc47gOoACKu5tK7SS3IRKzjOLWQJ
AghYDCpyUB9vBPlrKGp8NGg5X4TTVJjry/TABbsWTSvT8zu9ZHo9pzow9oB6Pxy6
QtdfuaI92sq8Y4XMfMQAJ7lTBA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:16 2026 by rpki-client