
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier: K0YLHn8c256N3npApBgilKIQaht4FWQJM4luAdukSfk=
Subject key identifier: EA:E8:6B:51:33:FE:96:67:D8:4F:93:43:32:30:56:3D:32:17:69:1E
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number: 01E8
Signing time: Thu 23 Jul 2026 04:47:35 +0000
Manifest this update: Thu 23 Jul 2026 04:47:34 +0000
Manifest next update: Thu 30 Jul 2026 04:47:34 +0000
Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: 8sxA5yIpbhu77m0kfHFS3Npl+RWCjnOHdcePIMQ8oE0=)
2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Validity
Not Before: Jul 23 04:47:34 2026 GMT
Not After : Jul 30 04:47:34 2026 GMT
Subject: CN=6a619ce7-f4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:cf:f3:77:55:8c:90:32:77:a2:b6:94:34:
b2:49:ce:95:eb:9e:6b:20:52:50:51:4b:83:20:46:
c4:ae:37:1e:eb:aa:73:76:4f:7c:bd:6c:44:19:df:
f2:20:80:04:1d:3a:a4:ab:c3:90:9f:f6:8f:6d:5d:
87:1f:ad:50:b5:ea:59:6f:c5:3d:be:f2:65:cd:b5:
45:2c:e7:eb:21:87:26:9f:44:6e:c5:7a:0e:7e:cd:
fb:2c:ab:97:d4:da:63:c5:79:28:c8:fb:ea:fa:9c:
75:26:6f:5a:17:04:4d:36:76:9f:ca:db:6d:55:fb:
d2:aa:f9:e6:3d:fb:c8:6e:c5:78:9e:9e:56:e8:26:
fe:14:3c:31:c5:40:e4:20:9a:28:a8:f9:23:e1:d7:
ed:32:17:ab:89:09:bc:b2:7f:ea:34:79:72:94:c2:
4c:5f:ed:5b:7f:9d:47:24:37:8a:e5:7d:62:18:f5:
67:fb:30:26:2c:77:cb:76:d8:22:19:35:d4:f6:23:
69:df:bf:18:89:4e:ac:6c:50:3a:d5:75:d3:ea:b7:
60:db:cc:77:59:0a:8b:32:41:34:2d:29:30:c3:2c:
33:1e:19:74:b3:58:8a:81:50:07:cd:ef:e8:7b:f6:
44:73:ea:30:89:91:ab:7c:cc:92:df:03:b2:6a:d8:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:6B:51:33:FE:96:67:D8:4F:93:43:32:30:56:3D:32:17:69:1E
X509v3 Authority Key Identifier:
keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:be:2d:94:f9:2f:09:d1:e6:b4:32:8f:e8:00:e6:78:4f:e5:
f1:5a:0a:2b:84:34:24:40:26:c2:a5:d7:5c:31:e4:30:d1:8f:
c8:a1:5f:80:e2:eb:0e:80:ce:42:28:cf:47:ec:04:ac:0e:d0:
50:dc:a1:54:0c:24:d1:82:e9:63:88:7c:25:df:c3:e4:20:4a:
b2:b2:e6:90:e6:51:06:d2:43:1e:85:76:41:5b:cc:35:e3:6b:
56:06:af:20:b1:1f:a0:0b:e7:a9:e8:9c:20:00:02:16:ac:c6:
e9:b8:3f:75:dc:0d:e1:ab:56:90:01:15:5a:6f:7f:9e:35:84:
22:5e:2a:1d:8b:a0:c6:d2:94:f3:3f:95:3b:b9:45:7d:76:83:
29:86:b9:ef:24:55:1c:a2:fd:50:d4:a7:d5:ac:61:ae:dd:bb:
49:8e:b2:de:b9:d2:de:53:cd:48:8a:44:72:7a:e7:66:e8:ce:
48:15:31:be:d8:52:c4:91:c4:6e:52:af:db:08:fe:ac:82:6b:
93:2c:ad:f5:53:71:bb:cc:73:72:ef:6c:36:43:45:1b:d6:88:
39:8b:73:50:e4:40:8a:3e:8d:e6:1c:c7:09:95:d2:f8:85:4c:
13:05:91:f0:c3:a9:62:f3:9d:8f:29:34:c4:13:ab:a5:28:c3:
e0:16:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:17 2026 by rpki-client