
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier: yQkp6WsPqW7CXTw4LjpTcAOZI4cDL4Pf3attqmszo6Q=
Subject key identifier: 36:4F:54:DB:2B:02:DA:26:17:A1:C4:DC:F2:D8:7F:AB:CD:C8:A1:03
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number: C8
Signing time: Wed 13 May 2026 04:20:33 +0000
Manifest this update: Wed 13 May 2026 04:20:33 +0000
Manifest next update: Wed 20 May 2026 04:20:33 +0000
Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: ODBKLYsVf6Gu0N+PiGug+0j+8PPGQ/87jQNa2//yRWo=)
2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: OU+mhLZle+EP1xDm2dufdCPvv2y3/vJOiy9NfS4fNUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Validity
Not Before: May 13 04:20:33 2026 GMT
Not After : May 20 04:20:33 2026 GMT
Subject: CN=6a03fc11-0683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:45:00:33:b6:17:fb:37:3e:24:43:27:bc:
80:bf:5e:62:d9:cd:0a:9f:63:bd:72:2a:6e:65:c8:
50:e5:21:d0:01:bb:83:87:a8:63:2f:5a:09:34:0b:
b9:af:35:ed:c9:c7:61:14:47:56:82:4c:a0:22:c3:
cd:d7:53:0a:7b:10:3e:50:9f:b2:eb:7e:5c:ce:ac:
7a:4e:a4:0c:d5:73:9a:46:9a:77:c5:9f:38:6c:1f:
24:d7:fb:00:03:02:4f:1f:7b:db:11:00:b1:e7:20:
07:74:3c:a6:f0:b9:12:2e:e1:b7:0f:c8:78:7d:2a:
03:c2:13:88:22:d1:27:50:a4:a1:25:88:b1:fb:6f:
9c:70:12:9e:9b:8c:a1:82:40:d2:24:ce:13:6a:8b:
9f:ea:84:d8:fc:0c:ea:c6:77:34:5c:4f:f9:f7:d2:
47:90:3f:24:02:e3:a0:bc:4f:d7:91:06:ee:24:ad:
10:c2:19:4f:1f:22:45:ad:6e:cc:63:5c:d8:cc:a2:
1d:4f:38:fd:5e:62:7c:22:53:69:c6:35:d7:1a:68:
ea:66:41:80:96:c1:14:5f:15:ab:7f:5d:d3:d6:e3:
8c:30:9a:ff:d7:65:09:06:fe:65:d4:7f:db:40:b1:
17:a3:1b:c7:b3:4d:18:e5:d4:d5:7f:06:df:f7:79:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4F:54:DB:2B:02:DA:26:17:A1:C4:DC:F2:D8:7F:AB:CD:C8:A1:03
X509v3 Authority Key Identifier:
keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:4d:69:f4:b2:f4:c6:1e:1a:71:e1:24:2d:fb:d5:8e:ce:f6:
30:5a:7c:77:7d:6f:93:36:1b:85:ce:10:52:08:25:65:11:88:
fb:28:f4:53:3e:e2:5e:d2:6f:ad:df:67:9f:de:28:21:88:fb:
af:0d:6a:5a:a6:6e:f3:28:3b:70:bd:ee:97:8f:d3:d8:62:f7:
36:ac:44:c5:d5:2b:dc:59:31:75:31:6b:70:4a:f4:0c:11:6d:
ed:03:e4:f8:9c:05:7c:d9:d3:18:28:59:4d:e3:a0:10:77:79:
dc:19:74:47:bd:2c:c3:b1:3a:0b:20:3f:79:22:63:c6:5a:85:
84:3c:60:9b:b4:12:a9:b2:b5:ed:70:89:41:d8:09:62:9d:b8:
b6:64:98:8c:94:4b:e9:c3:fb:a7:d3:0c:50:b6:bc:f7:8b:4b:
25:5c:e0:ab:0e:6f:68:2c:8a:6b:c4:6d:07:3f:25:f8:30:41:
38:19:08:a6:2d:07:90:b0:e8:7c:35:b1:8d:26:03:dc:b9:5e:
e7:46:a1:af:b2:35:72:e6:c5:af:a6:1e:bb:72:44:97:b7:a4:
9c:2c:19:d1:5a:1d:f8:98:1d:79:9e:87:c2:1a:b4:55:7f:a8:
48:35:23:51:aa:2d:83:4c:4e:74:00:ae:d4:81:9c:d6:e5:c1:
f0:a4:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:52:16 2026 by rpki-client