
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier: vzjIv8JY2rjBtOlMjJ0Tadj1JpR9V8vHom/gI576VsI=
Subject key identifier: E8:30:5A:B5:64:C6:0F:01:20:39:65:EA:33:15:23:A4:2C:6E:B8:24
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number: 0132
Signing time: Wed 13 May 2026 05:46:33 +0000
Manifest this update: Wed 13 May 2026 05:46:33 +0000
Manifest next update: Wed 20 May 2026 05:46:33 +0000
Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: p1uFyyO6uXbGHbs6zFpcD0FZJSjJssdv/Ba9MUpLx8w=)
2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: 4QxgO/v1kKmqzX3Jt1zEm2uuH1Y0Ot5nAQyWZtBjGQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Validity
Not Before: May 13 05:46:33 2026 GMT
Not After : May 20 05:46:33 2026 GMT
Subject: CN=6a041039-e44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:be:10:f9:57:f9:7b:d3:26:da:1f:77:20:
e7:bd:24:41:41:8b:c9:e0:07:b9:64:b4:10:9d:49:
92:21:3c:00:f0:88:47:d2:5c:97:c2:8d:87:78:14:
38:53:d2:4e:05:6e:3d:1a:a9:4d:8a:bd:a3:b2:eb:
45:0b:9c:1a:22:ea:53:1f:da:98:42:36:27:1a:61:
fa:2e:24:ff:c8:45:5f:66:cc:30:7b:b1:c7:d3:95:
c2:04:b3:46:05:9d:24:ee:2d:ab:bd:28:c6:a0:52:
d9:6b:47:9d:fe:50:1a:19:71:56:4b:6e:1f:a6:2b:
e6:b7:b1:8f:bd:97:c7:dc:a5:48:c0:3c:90:fd:cb:
1c:be:78:aa:cb:48:f4:8b:34:c1:5c:86:0c:00:e0:
2b:50:a8:bf:36:63:07:c6:6f:fc:4d:7c:b0:71:46:
70:8d:e1:50:44:c1:7a:28:15:d0:3e:23:aa:04:80:
6b:04:ab:bc:c3:40:29:be:bb:f8:51:c3:ee:f4:12:
11:69:14:c8:c0:6b:a2:ae:93:76:6a:2b:af:8c:4b:
18:f2:7a:cb:0a:d8:62:76:3a:ba:82:64:a1:40:46:
e2:b7:9e:bd:b5:b9:09:69:df:7e:8e:06:a7:6e:31:
a5:43:02:cc:dd:9a:d0:84:31:ca:cb:52:af:b6:3f:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:30:5A:B5:64:C6:0F:01:20:39:65:EA:33:15:23:A4:2C:6E:B8:24
X509v3 Authority Key Identifier:
keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0e:63:99:c9:cc:c5:a9:a7:17:81:00:a8:0f:73:65:15:ce:
46:31:df:09:41:93:df:ef:85:e4:77:27:3f:3e:81:2b:9e:93:
f2:03:7c:92:29:4d:d9:ec:13:ec:9f:1d:37:a4:cb:be:e2:2f:
0f:eb:41:73:33:3e:85:83:ba:f8:73:b4:79:56:dd:3f:4a:67:
cc:20:9f:9d:9f:ed:bb:c6:5d:1a:bb:b2:13:64:f0:7a:c6:d5:
5b:d3:75:f2:cd:1e:84:ef:31:b8:27:02:08:73:3d:99:b3:f3:
9f:fb:99:eb:3d:2b:83:04:82:76:85:0e:52:76:2c:1c:49:f8:
9c:2b:bd:ec:7d:0d:af:0e:64:09:75:40:6a:67:90:72:cc:08:
41:55:49:b5:02:4b:ca:50:1a:65:c2:47:6b:19:76:a5:5d:c2:
87:86:08:99:6d:09:9d:6d:6e:2d:48:43:a3:18:cb:71:e8:3f:
69:61:a0:56:c4:ee:80:5f:de:47:7e:7d:8b:78:5d:28:7d:9a:
a5:f5:33:86:cc:70:f4:ed:d0:49:62:50:51:f4:96:af:ba:9d:
30:28:ee:9b:7a:f7:43:c2:e6:49:9a:28:83:81:b4:7b:07:67:
67:d5:dc:7b:4a:80:bd:cf:97:a2:bc:36:5a:eb:69:64:c9:4c:
08:53:0a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:29 2026 by rpki-client