
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier: KA+9guhHRk500/YpSZr5dQA1vldSz5jYuIWn8MESVik=
Subject key identifier: CD:2C:7C:7E:66:AF:B3:B7:45:07:C9:2D:F3:AF:3C:28:AB:9B:06:02
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number: 01D5
Signing time: Wed 13 May 2026 04:35:49 +0000
Manifest this update: Wed 13 May 2026 04:35:48 +0000
Manifest next update: Wed 20 May 2026 04:35:48 +0000
Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: rVWwtP75AIbE41lN3ZK06Zxytt0+bXRipZ49zF52Zo4=)
2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: LSGqnHSpVE6t1VnR1CP7MXHTDo/gjQidyC59lrbruAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Validity
Not Before: May 13 04:35:48 2026 GMT
Not After : May 20 04:35:48 2026 GMT
Subject: CN=6a03ffa4-77ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:8b:ea:cc:c8:f7:f4:27:c5:6e:ef:d4:a0:
71:eb:52:d9:e1:50:dc:b5:68:03:17:2a:5a:f4:8c:
cb:4d:8c:d6:3b:f7:82:da:b2:f0:47:9e:23:05:e0:
bd:49:2f:be:56:bc:7e:64:fd:58:b5:ba:7d:ee:3f:
02:bb:bc:7b:52:e2:75:0b:95:4b:0d:5a:e6:83:a3:
9d:46:00:d8:92:9c:d7:ba:0b:73:c9:a7:4a:90:2f:
47:fb:d0:b7:3b:9c:c1:ef:b6:54:3c:5a:9d:e0:4e:
16:04:e5:30:75:c2:9f:28:ae:4c:5b:df:93:62:94:
5b:ef:23:37:6b:9f:c5:fd:ad:4a:23:9f:bf:01:9b:
66:9e:4a:79:1d:d4:4f:7b:57:d0:92:2a:8a:29:b2:
dd:b4:88:2e:17:52:4b:a2:4a:d0:41:2b:4a:5c:2a:
c5:97:25:2f:cf:30:76:02:7d:a1:96:fc:a0:91:bb:
32:63:2b:d8:7c:10:32:d0:36:6c:50:81:cc:53:7a:
0a:bb:5c:88:2b:ef:05:f0:8a:55:1c:98:56:46:31:
28:61:8c:76:ac:00:b8:55:f9:7c:68:12:71:42:9a:
11:67:97:53:c8:77:64:52:ea:ce:7d:9f:59:f7:74:
eb:87:46:54:7e:64:9c:7e:f0:32:b1:27:c4:dd:26:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:7C:7E:66:AF:B3:B7:45:07:C9:2D:F3:AF:3C:28:AB:9B:06:02
X509v3 Authority Key Identifier:
keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:32:bc:92:a5:69:4c:75:1e:9b:10:4c:63:45:ad:3a:ed:7a:
b3:8c:1c:bf:c6:b9:0c:51:49:ce:85:45:75:b3:bb:d8:3d:08:
f5:37:a7:91:bb:40:04:40:ce:f3:a0:ee:c3:89:ab:e5:4c:02:
e1:54:b0:48:d3:f8:be:db:32:25:9a:8b:d3:d3:0c:b9:9b:13:
9c:44:1b:d8:a6:7a:c2:6b:a2:15:93:7f:30:c8:c3:b1:ef:12:
6a:bd:83:ba:d1:be:65:d5:86:6e:6c:d0:55:b3:08:c7:b6:19:
8f:de:65:c2:0d:8a:df:87:88:b8:c2:fd:38:1c:4e:f9:59:48:
46:3f:ed:4f:29:1c:df:20:b5:9b:67:1b:2a:13:cc:5c:65:2c:
3c:57:46:3a:f3:f5:12:54:00:4c:f7:75:dd:bc:ca:05:bd:1a:
1e:52:1b:72:05:ad:ea:02:ff:d8:f8:c9:8e:93:54:fe:f2:b5:
2a:d8:5f:b8:d6:dd:0f:28:9c:2d:88:ee:c7:69:f2:37:01:1d:
b2:cb:63:b4:b3:c4:e9:88:a2:3b:fd:f3:83:4c:fc:d9:51:e6:
00:74:62:f8:81:b5:6f:c9:35:e4:f9:8f:7b:87:6e:a6:86:be:
0f:50:66:b9:22:92:b8:12:97:b8:6a:94:61:4a:7a:31:c2:07:
34:17:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:28 2026 by rpki-client