
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier: 4gtxwbtpLplyN0vnLf2rX3sWUtCA0n7FLDkrNGcK66o=
Subject key identifier: 5C:10:99:CD:4F:E8:CF:D3:12:AE:7F:11:FF:50:6A:6D:31:32:9E:8D
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number: 0223
Signing time: Sun 15 Nov 2026 03:03:06 +0000
Manifest this update: Sun 15 Nov 2026 03:03:06 +0000
Manifest next update: Sun 22 Nov 2026 03:03:06 +0000
Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: BnVzVsEoOWQo1CBBb9A6K3vvTpU/YZgo4DKi+1YSLLM=)
2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Validity
Not Before: Nov 15 03:03:06 2026 GMT
Not After : Nov 22 03:03:06 2026 GMT
Subject: CN=6af920ea-122e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:50:9f:d2:b5:32:6e:ff:61:5d:2f:7a:eb:
b9:9e:41:20:0e:99:81:2f:91:b5:fb:05:a9:00:2c:
dd:fd:d0:61:27:0b:0c:e1:60:29:e5:6f:0b:55:79:
61:61:6c:58:e0:dc:c9:46:e9:36:c7:f8:0b:8a:4b:
e9:61:13:55:2f:f9:e6:9f:9e:8a:6f:80:12:33:84:
e4:0a:00:9d:8f:a5:27:94:62:1c:b5:5e:66:0f:84:
bc:77:66:b2:25:d5:2c:ee:b2:aa:13:6d:75:fd:23:
98:ce:ad:48:d2:a8:e0:f4:9a:39:69:2a:3f:6a:73:
62:b7:07:06:1e:e0:b4:00:e2:5b:07:e0:c5:54:e2:
86:a4:77:42:68:b4:51:d3:b7:3a:91:cc:87:24:1c:
0f:e4:ea:ba:a6:c0:8e:0a:f8:ba:04:20:67:26:df:
a7:3e:8a:93:6a:e9:6a:17:b8:03:85:82:bd:1b:63:
d6:e0:2b:88:74:ff:77:b4:57:23:a5:65:f4:bf:89:
b7:8a:99:d6:35:b2:ca:0d:83:a4:38:37:19:2d:b7:
64:e4:90:cb:79:5d:c7:80:52:52:43:fc:2a:ff:a1:
78:fd:a1:33:e7:42:de:f5:e8:bc:06:25:9d:9a:be:
b1:94:d4:3a:93:98:93:79:1a:83:48:ea:53:8a:57:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:99:CD:4F:E8:CF:D3:12:AE:7F:11:FF:50:6A:6D:31:32:9E:8D
X509v3 Authority Key Identifier:
keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a4:69:ff:ef:43:d8:75:21:6e:fa:60:33:b1:57:dd:e8:b7:
68:65:0d:56:57:15:a0:bd:17:c7:33:40:05:88:ff:30:79:5e:
5e:0f:ef:46:3a:ea:df:3c:67:29:30:71:4c:2b:93:97:bd:4e:
54:b9:b5:14:fe:60:17:19:5d:85:f5:ad:c0:28:bc:17:34:2a:
5f:e5:78:e5:12:dd:75:f3:83:99:8b:7a:73:0b:82:9a:cf:54:
2b:e9:e2:ca:6e:d8:71:9f:77:b2:1e:95:5f:2d:5c:d4:e6:40:
55:d4:ae:4f:ac:00:72:a4:b4:b9:47:64:9b:d8:06:5a:87:59:
65:55:fd:62:c9:a3:98:39:65:2f:ba:a7:69:95:45:b8:fe:72:
86:8e:a8:44:ed:6f:a8:7c:bd:5b:34:c1:2e:78:c5:fa:5c:fb:
7a:27:7b:8f:33:6a:22:cb:e6:76:69:74:5f:d4:7f:24:bf:e4:
54:be:91:65:4c:9b:ad:8d:a7:58:6f:0d:72:6a:c5:7e:84:67:
ae:4a:ad:f2:36:58:49:ef:fd:fb:de:6f:d7:69:bd:a4:b8:6e:
db:1a:7a:ed:f3:8a:f6:db:76:fe:e5:04:62:98:36:30:13:f0:
5d:17:b6:34:bd:d9:ef:ff:81:62:fd:3a:72:e1:3c:84:91:5f:
79:42:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:12:09 2026 by rpki-client